tjh.dev
Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)
1{ lib, buildGoModule, fetchFromGitHub }:
2
3buildGoModule rec {
4 pname = "kustomize-sops";
5 version = "4.2.1";
6
7 src = fetchFromGitHub {
8 owner = "viaduct-ai";
9 repo = pname;
10 rev = "v${version}";
11 sha256 = "sha256-Jm4mA91fyXQ8eScvRGDAmCBFVqT2GP57XIBZQo/bApg=";
12 };
13
14 vendorHash = "sha256-tNYPgXFDJuNRlrVE0ywg77goNzfoWHFVzOG9mHqK3q8=";
15
16 installPhase = ''
17 mkdir -p $out/lib/viaduct.ai/v1/ksops-exec/
18 mv $GOPATH/bin/kustomize-sops $out/lib/viaduct.ai/v1/ksops-exec/ksops-exec
19 '';
20
21 # Tests are broken in a nix environment
22 doCheck = false;
23
24 meta = with lib; {
25 description = "A Flexible Kustomize Plugin for SOPS Encrypted Resource";
26 longDescription = ''
27 KSOPS can be used to decrypt any Kubernetes resource, but is most commonly
28 used to decrypt encrypted Kubernetes Secrets and ConfigMaps.
29 '';
30 homepage = "https://github.com/viaduct-ai/kustomize-sops";
31 license = licenses.asl20;
32 maintainers = with maintainers; [ starcraft66 ];
33 };
34}