tjh.dev
nixpkgs mirror (for testing)
github.com/NixOS/nixpkgs
nix
1{
2 lib,
3 buildGoModule,
4 fetchFromGitHub,
5}:
6
7buildGoModule rec {
8 pname = "kustomize-sops";
9 version = "4.4.0";
10
11 src = fetchFromGitHub {
12 owner = "viaduct-ai";
13 repo = pname;
14 rev = "v${version}";
15 hash = "sha256-a9SvkHt8ZQFobOjKAECSJcRZEeRE8pTKLnXN4DYNa7k=";
16 };
17
18 vendorHash = "sha256-ajXW6H1XBgVtMdK7/asfpy6e3rFAD2pz3Lg+QFnkVpo=";
19
20 installPhase = ''
21 mkdir -p $out/bin
22 mkdir -p $out/lib/viaduct.ai/v1/ksops/
23 mkdir -p $out/lib/viaduct.ai/v1/ksops-exec/
24 mv $GOPATH/bin/kustomize-sops $out/bin/ksops
25 ln -s $out/bin/ksops $out/lib/viaduct.ai/v1/ksops-exec/ksops-exec
26 ln -s $out/bin/ksops $out/lib/viaduct.ai/v1/ksops/ksops
27 '';
28
29 # Tests are broken in a nix environment
30 doCheck = false;
31
32 meta = {
33 description = "Flexible Kustomize Plugin for SOPS Encrypted Resource";
34 longDescription = ''
35 KSOPS can be used to decrypt any Kubernetes resource, but is most commonly
36 used to decrypt encrypted Kubernetes Secrets and ConfigMaps.
37 '';
38 homepage = "https://github.com/viaduct-ai/kustomize-sops";
39 license = lib.licenses.asl20;
40 maintainers = with lib.maintainers; [ starcraft66 ];
41 };
42}