add omni

2026-04-09 18:02:06 +00:00
parent 58bb6ffac4
commit 3d60cb6706
6 changed files with 112 additions and 2 deletions
--- a/kubernetes/secrets/default.nix
+++ b/kubernetes/secrets/default.nix
@@ -4,5 +4,6 @@
    ./cloudnativepg/weyma-pgsql-replication.nix
    ./cert-manager/cloudflare-api-token.nix
    ./authentik/authentik-credentials.nix
+    ./omni/omni-etcd-key.nix
  ];
 }
--- a/kubernetes/secrets/omni/omni-etcd-key.nix
+++ b/kubernetes/secrets/omni/omni-etcd-key.nix
@@ -0,0 +1,17 @@
+{ config, ... }:
+{
+    sops.templates."omni-etcd-key.yaml" = {
+        mode = "0444";
+        content = ''
+            apiVersion: v1
+            kind: Secret
+            metadata:
+                name: omni-etcd-key
+                namespace: omni
+            type: Opaque
+            data:
+                omni.asc: ${config.sops.placeholder.omni_asc_base64}
+        '';
+        path = "/var/lib/rancher/k3s/server/manifests/secrets/omni-etcd-key.yaml";
+    };
+}