s/roles/groups/g , iteration

ADP-216_sops_automation
LeeW 10 months ago
parent 6d5c9fab7e
commit e8f1a1acd0

@ -17,12 +17,12 @@ gpg --import /path/to/keys/*.gpg.pub
gpg --list-keys --keyid-format=long gpg --list-keys --keyid-format=long
### roles ### groups
Access for each repo is tracked using the `./roles/` directory; each sub-directory represents a "role" or "group". (Naming: choosing "role" as the name and deciding to just have "one group per role" Access for each repo is tracked using the `./groups/` directory; each sub-directory represents a "group" (Note: some "groups" are also "roles", e.g. `admin`)
```bash ```bash
cd roles/<project_name> cd groups/<project_name>
ln -s ../../<path_to_key.gpg.pub> ln -s ../../<path_to_key.gpg.pub>
``` ```
@ -46,14 +46,14 @@ The following commands explain how to update the `.sops.yaml` for a repository:
% git clone git@git.dev-at.de:cloud-solutions/nso/devnso-adp-argocd.git % git clone git@git.dev-at.de:cloud-solutions/nso/devnso-adp-argocd.git
% cd devnso-adp-argocd/ % cd devnso-adp-argocd/
# List available roles # List available groups
% ${PATH_TO_THIS_REPO}/bin/update_sops.sh --list_roles % ${PATH_TO_THIS_REPO}/bin/update_sops.sh --list_groups
# INFO: listing roles # INFO: listing groups
admin admin
automation automation
devnso-adp-argocd devnso-adp-argocd
# For a given role, update sops config and specified secrets file # For a given group, update sops config and specified secrets file
% ${PATH_TO_THIS_REPO}/bin/update_sops.sh -r devnso-adp-argocd -s ./adp-api-devs/adp-api-devs/secrets.yaml % ${PATH_TO_THIS_REPO}/bin/update_sops.sh -r devnso-adp-argocd -s ./adp-api-devs/adp-api-devs/secrets.yaml
% git diff % git diff
``` ```

Loading…
Cancel
Save