GitHub / determinatesystems/nixos-vault-service issues and pull requests
#90 - Update clap to get rid of atty
Pull Request -
State: closed - Opened by grahamc 3 months ago
#89 - Update flake.lock, tests, run more checks, etc.
Pull Request -
State: closed - Opened by grahamc 3 months ago
#88 - Add a ' to a helper test, to validate escaping is happening
Pull Request -
State: closed - Opened by grahamc 3 months ago
#87 - Update dependabot.yml: update crates
Pull Request -
State: closed - Opened by grahamc 3 months ago
#86 - build(deps): bump actions/checkout from 3 to 4
Pull Request -
State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies
#85 - Update deps
Pull Request -
State: closed - Opened by grahamc over 1 year ago
- 3 comments
#84 - Fixed Issue with NixOS 23.11
Pull Request -
State: closed - Opened by usmcamp0811 over 1 year ago
#83 - Vault Agent Breaks with NixOS 23.11
Issue -
State: closed - Opened by usmcamp0811 over 1 year ago
- 3 comments
#82 - Mechanical migration to FlakeHub
Pull Request -
State: closed - Opened by grahamc almost 2 years ago
#81 - Better description in readme please
Issue -
State: open - Opened by con-f-use almost 2 years ago
#80 - Docs: difference to vault-agent service in nixpkgs?
Issue -
State: open - Opened by con-f-use about 2 years ago
#79 - DS-970: Add Magic Nix Cache and other workflow changes
Pull Request -
State: closed - Opened by flexiondotorg about 2 years ago
#78 - build(deps): bump DeterminateSystems/update-flake-lock from 16 to 19
Pull Request -
State: closed - Opened by dependabot[bot] over 2 years ago
- 2 comments
Labels: dependencies
#77 - build(deps): bump DeterminateSystems/update-flake-lock from 16 to 18
Pull Request -
State: closed - Opened by dependabot[bot] over 2 years ago
- 1 comment
Labels: dependencies
#76 - build(deps): bump DeterminateSystems/update-flake-lock from 16 to 17
Pull Request -
State: closed - Opened by dependabot[bot] over 2 years ago
- 1 comment
Labels: dependencies
#75 - Switch to Nix Installer Action
Pull Request -
State: closed - Opened by lucperkins over 2 years ago
#74 - build(deps): bump cachix/install-nix-action from 17 to 19
Pull Request -
State: closed - Opened by dependabot[bot] over 2 years ago
- 1 comment
Labels: dependencies
#73 - build(deps): bump DeterminateSystems/update-flake-lock from 12 to 16
Pull Request -
State: closed - Opened by dependabot[bot] over 2 years ago
Labels: dependencies
#72 - build(deps): bump DeterminateSystems/update-flake-lock from 12 to 15
Pull Request -
State: closed - Opened by dependabot[bot] over 2 years ago
- 1 comment
Labels: dependencies
#71 - Secrets might are persisted to disk if /tmp is not a tmpfs
Issue -
State: open - Opened by Mic92 almost 3 years ago
#70 - build(deps): bump cachix/install-nix-action from 17 to 18
Pull Request -
State: closed - Opened by dependabot[bot] almost 3 years ago
- 1 comment
Labels: dependencies
#69 - build(deps): bump DeterminateSystems/update-flake-lock from 12 to 14
Pull Request -
State: closed - Opened by dependabot[bot] almost 3 years ago
- 1 comment
Labels: dependencies
#68 - build(deps): bump DeterminateSystems/update-flake-lock from 12 to 13
Pull Request -
State: closed - Opened by dependabot[bot] almost 3 years ago
- 1 comment
Labels: dependencies
#67 - flake.lock: Update
Pull Request -
State: closed - Opened by github-actions[bot] almost 3 years ago
#66 - build(deps): bump DeterminateSystems/update-flake-lock from 9 to 12
Pull Request -
State: closed - Opened by dependabot[bot] about 3 years ago
Labels: dependencies
#65 - build(deps): bump DeterminateSystems/update-flake-lock from 9 to 11
Pull Request -
State: closed - Opened by dependabot[bot] about 3 years ago
- 1 comment
Labels: dependencies
#64 - Secret files are not available during preStart
Issue -
State: open - Opened by Mic92 about 3 years ago
#63 - build(deps): bump DeterminateSystems/update-flake-lock from 9 to 10
Pull Request -
State: closed - Opened by dependabot[bot] about 3 years ago
- 1 comment
Labels: dependencies
#62 - flake.lock: Update
Pull Request -
State: closed - Opened by github-actions[bot] about 3 years ago
#61 - flake.lock: Update
Pull Request -
State: closed - Opened by github-actions[bot] about 3 years ago
#60 - detsys-vaultAgent-<services>.service need a very long time to restart
Issue -
State: open - Opened by Mic92 about 3 years ago
#59 - Consider switching to LoadCredentials to inject secrets
Issue -
State: open - Opened by Mic92 about 3 years ago
- 2 comments
#58 - aws auth method: the "ec2" type: Aws AutoAuth nonce is not shared between instances or is persisted across restarts
Issue -
State: open - Opened by Mic92 about 3 years ago
- 4 comments
#57 - secretFiles cannot be used with systemd's LoadCredentials
Issue -
State: open - Opened by Mic92 about 3 years ago
- 2 comments
#56 - secretFiles are not chowned correctly in services using DynamicUser
Issue -
State: open - Opened by Mic92 about 3 years ago
#55 - flake.lock: Update
Pull Request -
State: closed - Opened by github-actions[bot] about 3 years ago
#54 - flake.lock: Update
Pull Request -
State: closed - Opened by github-actions[bot] over 3 years ago
#53 - build(deps): bump DeterminateSystems/update-flake-lock from 8 to 9
Pull Request -
State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies
#52 - flake.lock: Update
Pull Request -
State: closed - Opened by github-actions[bot] over 3 years ago
#51 - README: document new partially-typed `agentConfig` interface
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#50 - module: add StopPropagatedFrom= to sidecar unit config
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#49 - module: invert Wants= and WantedBy= relationship
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 7 comments
#48 - module: partially type auto_auth and template_config
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#47 - messenger: use async, allow child to return before backoff completes
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#46 - module: require template_config.exit_on_retry_failure to be true
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#45 - Fix compatibility with older Nixpkgs
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#44 - module: simplify and clean up expressions
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#43 - Integrate messenger with the module -- DS-64
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#42 - module: fix BindsTo ordering
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#41 - systemd templated units have not been validated
Issue -
State: open - Opened by cole-h over 3 years ago
#40 - flake.lock: Update
Pull Request -
State: closed - Opened by github-actions[bot] over 3 years ago
#39 - README: rewrite
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#38 - build(deps): bump cachix/install-nix-action from 16 to 17
Pull Request -
State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies
#37 - MESSENGER: init a tool to manage the vault agent and waiting for files
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#36 - Create a tool that will allow us to use a systemd `Type=notify` service
Issue -
State: closed - Opened by cole-h over 3 years ago
#35 - README: we use PrivateTmp + JoinsNamespaceOf, not TemporaryFileSystem
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#34 - module: apply mkDefault to restart-related configuration
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#33 - flake.lock: Update
Pull Request -
State: closed - Opened by github-actions[bot] over 3 years ago
#32 - WIP: module: kill ExecStartPost if ExecStart failed
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#31 - module: expose the path of secretFiles as an attribute
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#30 - Support default agent configuration
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#29 - `Restart=on-failure` doesn't actually restart until after the `ExecStartPost` command times out
Issue -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#28 - vault agent: disable trace logging
Pull Request -
State: closed - Opened by grahamc over 3 years ago
#27 - flake.lock: Update
Pull Request -
State: closed - Opened by github-actions[bot] over 3 years ago
#26 - module: uncomment BindsTo
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#25 - module: namespace EnvFiles
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#24 - Make restart-related config easily tuneable
Issue -
State: closed - Opened by cole-h over 3 years ago
- 2 comments
#23 - ci: allow manual triggering
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#22 - EnvironmentFiles need to be namespaced
Issue -
State: closed - Opened by cole-h over 3 years ago
#21 - build(deps): bump actions/checkout from 2 to 3
Pull Request -
State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies
#20 - build(deps): bump cachix/install-nix-action from 13 to 16
Pull Request -
State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies
#19 - Fix EnvFile handling
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#18 - `git` repo checklist
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#17 - README: update for recent changes
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#16 - Make sidecar more resilient to failure
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 3 comments
#15 - tests: consolidate boilerplate into one place
Issue -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#14 - Default vaultAgent config
Issue -
State: closed - Opened by cole-h over 3 years ago
#13 - module: test templating a token with a specific policy
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#12 - module: set ownership of secret files
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#11 - Set permissions of templated file
Issue -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#10 - Expose attribute that contains the path inside PrivateTmp
Issue -
State: closed - Opened by cole-h over 3 years ago
#9 - module: use inotifywait instead of a busy wait
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#8 - Secret units don't exit when a secret doesn't exist / is inaccessible
Issue -
State: closed - Opened by cole-h over 3 years ago
- 3 comments
#7 - module: mkDefault PrivateTmp to true
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#6 - module: assert that PrivateTmp is enabled
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#5 - Investigate using TemporaryFileSystem and JoinsNamespaceOf
Issue -
State: closed - Opened by cole-h over 3 years ago
- 1 comment
#4 - Test something resembling the real world
Pull Request -
State: closed - Opened by cole-h over 3 years ago
#3 - Test a templated secretFile
Pull Request -
State: closed - Opened by cole-h over 3 years ago
- 2 comments
#2 - Use inotify instead of a busy wait for secret files
Issue -
State: closed - Opened by grahamc over 3 years ago
- 1 comment
#1 - Initial module
Pull Request -
State: closed - Opened by grahamc over 3 years ago
- 1 comment