Rodrigo Arias Mallo
b86798cd69
Starting with GitLab 16, there is a new mechanism to authenticate the runners via authentication tokens, so use it instead. Older tokens and runners are also removed, as they are no longer used. With the new way of managing tokens, both the tags and the locked state are managed from the GitLab web page. See: https://docs.gitlab.com/ee/ci/runners/new_creation_workflow.html Reviewed-by: Aleix Boné <abonerib@bsc.es>
18 lines
534 B
Nix
18 lines
534 B
Nix
let
|
|
keys = import ../keys.nix;
|
|
adminsKeys = builtins.attrValues keys.admins;
|
|
hut = [ keys.hosts.hut ] ++ adminsKeys;
|
|
# Only expose ceph keys to safe nodes and admins
|
|
safe = keys.hostGroup.safe ++ adminsKeys;
|
|
in
|
|
{
|
|
"gitea-runner-token.age".publicKeys = hut;
|
|
"gitlab-runner-docker-token.age".publicKeys = hut;
|
|
"gitlab-runner-shell-token.age".publicKeys = hut;
|
|
"nix-serve.age".publicKeys = hut;
|
|
"jungle-robot-password.age".publicKeys = hut;
|
|
|
|
"ceph-user.age".publicKeys = safe;
|
|
"munge-key.age".publicKeys = safe;
|
|
}
|