pyrox.dev
lol
winter.bsky.social
1{
2 lib,
3 buildGoModule,
4 fetchFromGitHub,
5}:
6
7buildGoModule rec {
8 pname = "kustomize-sops";
9 version = "4.3.3";
10
11 src = fetchFromGitHub {
12 owner = "viaduct-ai";
13 repo = pname;
14 rev = "v${version}";
15 hash = "sha256-qIYV0wDzBRPt6s6d2dL4FobBSMlmVm+Z0ogig3r0Q/c=";
16 };
17
18 vendorHash = "sha256-UyDW4WgDgEygMxrxbCATxlPk9KAuc9lO/ldSFyydZUA=";
19
20 installPhase = ''
21 mkdir -p $out/lib/viaduct.ai/v1/ksops/
22 mkdir -p $out/lib/viaduct.ai/v1/ksops-exec/
23 mv $GOPATH/bin/kustomize-sops $out/lib/viaduct.ai/v1/ksops/ksops
24 ln -s $out/lib/viaduct.ai/v1/ksops/ksops $out/lib/viaduct.ai/v1/ksops-exec/ksops-exec
25 '';
26
27 # Tests are broken in a nix environment
28 doCheck = false;
29
30 meta = with lib; {
31 description = "Flexible Kustomize Plugin for SOPS Encrypted Resource";
32 longDescription = ''
33 KSOPS can be used to decrypt any Kubernetes resource, but is most commonly
34 used to decrypt encrypted Kubernetes Secrets and ConfigMaps.
35 '';
36 homepage = "https://github.com/viaduct-ai/kustomize-sops";
37 license = licenses.asl20;
38 maintainers = with maintainers; [ starcraft66 ];
39 };
40}