difftreelog
feat explicit managed marker
in: trunk
2 files changed
modules/nixos/secrets.nixdiffbeforeafterboth139 };139 };140 config.parts = mkMerge [140 config.parts = mkMerge [141 (mkIf (config.generator != null && config.generator ? parts) config.generator.parts)141 (mkIf (config.generator != null && config.generator ? parts) config.generator.parts)142 (mapAttrs (_: _: {}) (removeAttrs sysConfig.data.secrets.${secretName} ["shared"]))142 (mapAttrs (_: _: {}) (removeAttrs sysConfig.data.secrets.${secretName} ["shared" "managed"]))143 ];143 ];144 }144 }145 );145 );modules/secrets-data.nixdiffbeforeafterboth--- a/modules/secrets-data.nix
+++ b/modules/secrets-data.nix
@@ -38,6 +38,12 @@
sharedSecretData = {
freeformType = attrsOf (submodule secretDataValue);
options = {
+ managed = mkOption {
+ type = nullOr bool;
+ description = "Is current fleet data value is generated by generator";
+ default = null;
+ };
+
createdAt = mkOption {
type = str;
description = "Timestamp of secret generation/last rotation.";