An open API service for providing issue and pull request metadata for open source projects.

GitHub / determinatesystems/nixos-vault-service issues and pull requests

#90 - Update clap to get rid of atty

Pull Request - State: closed - Opened by grahamc 3 months ago

#89 - Update flake.lock, tests, run more checks, etc.

Pull Request - State: closed - Opened by grahamc 3 months ago

#88 - Add a ' to a helper test, to validate escaping is happening

Pull Request - State: closed - Opened by grahamc 3 months ago

#87 - Update dependabot.yml: update crates

Pull Request - State: closed - Opened by grahamc 3 months ago

#86 - build(deps): bump actions/checkout from 3 to 4

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago
Labels: dependencies

#85 - Update deps

Pull Request - State: closed - Opened by grahamc over 1 year ago - 3 comments

#84 - Fixed Issue with NixOS 23.11

Pull Request - State: closed - Opened by usmcamp0811 over 1 year ago

#83 - Vault Agent Breaks with NixOS 23.11

Issue - State: closed - Opened by usmcamp0811 over 1 year ago - 3 comments

#82 - Mechanical migration to FlakeHub

Pull Request - State: closed - Opened by grahamc almost 2 years ago

#81 - Better description in readme please

Issue - State: open - Opened by con-f-use almost 2 years ago

#80 - Docs: difference to vault-agent service in nixpkgs?

Issue - State: open - Opened by con-f-use about 2 years ago

#79 - DS-970: Add Magic Nix Cache and other workflow changes

Pull Request - State: closed - Opened by flexiondotorg about 2 years ago

#78 - build(deps): bump DeterminateSystems/update-flake-lock from 16 to 19

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 2 comments
Labels: dependencies

#77 - build(deps): bump DeterminateSystems/update-flake-lock from 16 to 18

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#76 - build(deps): bump DeterminateSystems/update-flake-lock from 16 to 17

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#75 - Switch to Nix Installer Action

Pull Request - State: closed - Opened by lucperkins over 2 years ago

#74 - build(deps): bump cachix/install-nix-action from 17 to 19

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#73 - build(deps): bump DeterminateSystems/update-flake-lock from 12 to 16

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago
Labels: dependencies

#72 - build(deps): bump DeterminateSystems/update-flake-lock from 12 to 15

Pull Request - State: closed - Opened by dependabot[bot] over 2 years ago - 1 comment
Labels: dependencies

#71 - Secrets might are persisted to disk if /tmp is not a tmpfs

Issue - State: open - Opened by Mic92 almost 3 years ago

#70 - build(deps): bump cachix/install-nix-action from 17 to 18

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies

#69 - build(deps): bump DeterminateSystems/update-flake-lock from 12 to 14

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies

#68 - build(deps): bump DeterminateSystems/update-flake-lock from 12 to 13

Pull Request - State: closed - Opened by dependabot[bot] almost 3 years ago - 1 comment
Labels: dependencies

#67 - flake.lock: Update

Pull Request - State: closed - Opened by github-actions[bot] almost 3 years ago

#66 - build(deps): bump DeterminateSystems/update-flake-lock from 9 to 12

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago
Labels: dependencies

#65 - build(deps): bump DeterminateSystems/update-flake-lock from 9 to 11

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago - 1 comment
Labels: dependencies

#64 - Secret files are not available during preStart

Issue - State: open - Opened by Mic92 about 3 years ago

#63 - build(deps): bump DeterminateSystems/update-flake-lock from 9 to 10

Pull Request - State: closed - Opened by dependabot[bot] about 3 years ago - 1 comment
Labels: dependencies

#62 - flake.lock: Update

Pull Request - State: closed - Opened by github-actions[bot] about 3 years ago

#61 - flake.lock: Update

Pull Request - State: closed - Opened by github-actions[bot] about 3 years ago

#59 - Consider switching to LoadCredentials to inject secrets

Issue - State: open - Opened by Mic92 about 3 years ago - 2 comments

#57 - secretFiles cannot be used with systemd's LoadCredentials

Issue - State: open - Opened by Mic92 about 3 years ago - 2 comments

#55 - flake.lock: Update

Pull Request - State: closed - Opened by github-actions[bot] about 3 years ago

#54 - flake.lock: Update

Pull Request - State: closed - Opened by github-actions[bot] over 3 years ago

#53 - build(deps): bump DeterminateSystems/update-flake-lock from 8 to 9

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#52 - flake.lock: Update

Pull Request - State: closed - Opened by github-actions[bot] over 3 years ago

#51 - README: document new partially-typed `agentConfig` interface

Pull Request - State: closed - Opened by cole-h over 3 years ago

#50 - module: add StopPropagatedFrom= to sidecar unit config

Pull Request - State: closed - Opened by cole-h over 3 years ago

#49 - module: invert Wants= and WantedBy= relationship

Pull Request - State: closed - Opened by cole-h over 3 years ago - 7 comments

#48 - module: partially type auto_auth and template_config

Pull Request - State: closed - Opened by cole-h over 3 years ago

#47 - messenger: use async, allow child to return before backoff completes

Pull Request - State: closed - Opened by cole-h over 3 years ago - 1 comment

#46 - module: require template_config.exit_on_retry_failure to be true

Pull Request - State: closed - Opened by cole-h over 3 years ago

#45 - Fix compatibility with older Nixpkgs

Pull Request - State: closed - Opened by cole-h over 3 years ago

#44 - module: simplify and clean up expressions

Pull Request - State: closed - Opened by cole-h over 3 years ago

#43 - Integrate messenger with the module -- DS-64

Pull Request - State: closed - Opened by cole-h over 3 years ago - 1 comment

#42 - module: fix BindsTo ordering

Pull Request - State: closed - Opened by cole-h over 3 years ago

#41 - systemd templated units have not been validated

Issue - State: open - Opened by cole-h over 3 years ago

#40 - flake.lock: Update

Pull Request - State: closed - Opened by github-actions[bot] over 3 years ago

#39 - README: rewrite

Pull Request - State: closed - Opened by cole-h over 3 years ago

#38 - build(deps): bump cachix/install-nix-action from 16 to 17

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#37 - MESSENGER: init a tool to manage the vault agent and waiting for files

Pull Request - State: closed - Opened by cole-h over 3 years ago

#35 - README: we use PrivateTmp + JoinsNamespaceOf, not TemporaryFileSystem

Pull Request - State: closed - Opened by cole-h over 3 years ago - 1 comment

#34 - module: apply mkDefault to restart-related configuration

Pull Request - State: closed - Opened by cole-h over 3 years ago - 1 comment

#33 - flake.lock: Update

Pull Request - State: closed - Opened by github-actions[bot] over 3 years ago

#32 - WIP: module: kill ExecStartPost if ExecStart failed

Pull Request - State: closed - Opened by cole-h over 3 years ago - 1 comment

#31 - module: expose the path of secretFiles as an attribute

Pull Request - State: closed - Opened by cole-h over 3 years ago - 1 comment

#30 - Support default agent configuration

Pull Request - State: closed - Opened by cole-h over 3 years ago

#28 - vault agent: disable trace logging

Pull Request - State: closed - Opened by grahamc over 3 years ago

#27 - flake.lock: Update

Pull Request - State: closed - Opened by github-actions[bot] over 3 years ago

#26 - module: uncomment BindsTo

Pull Request - State: closed - Opened by cole-h over 3 years ago

#25 - module: namespace EnvFiles

Pull Request - State: closed - Opened by cole-h over 3 years ago

#24 - Make restart-related config easily tuneable

Issue - State: closed - Opened by cole-h over 3 years ago - 2 comments

#23 - ci: allow manual triggering

Pull Request - State: closed - Opened by cole-h over 3 years ago

#22 - EnvironmentFiles need to be namespaced

Issue - State: closed - Opened by cole-h over 3 years ago

#21 - build(deps): bump actions/checkout from 2 to 3

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#20 - build(deps): bump cachix/install-nix-action from 13 to 16

Pull Request - State: closed - Opened by dependabot[bot] over 3 years ago
Labels: dependencies

#19 - Fix EnvFile handling

Pull Request - State: closed - Opened by cole-h over 3 years ago - 1 comment

#18 - `git` repo checklist

Pull Request - State: closed - Opened by cole-h over 3 years ago

#17 - README: update for recent changes

Pull Request - State: closed - Opened by cole-h over 3 years ago

#16 - Make sidecar more resilient to failure

Pull Request - State: closed - Opened by cole-h over 3 years ago - 3 comments

#15 - tests: consolidate boilerplate into one place

Issue - State: closed - Opened by cole-h over 3 years ago - 1 comment

#14 - Default vaultAgent config

Issue - State: closed - Opened by cole-h over 3 years ago

#13 - module: test templating a token with a specific policy

Pull Request - State: closed - Opened by cole-h over 3 years ago

#12 - module: set ownership of secret files

Pull Request - State: closed - Opened by cole-h over 3 years ago - 1 comment

#11 - Set permissions of templated file

Issue - State: closed - Opened by cole-h over 3 years ago - 1 comment

#10 - Expose attribute that contains the path inside PrivateTmp

Issue - State: closed - Opened by cole-h over 3 years ago

#9 - module: use inotifywait instead of a busy wait

Pull Request - State: closed - Opened by cole-h over 3 years ago

#8 - Secret units don't exit when a secret doesn't exist / is inaccessible

Issue - State: closed - Opened by cole-h over 3 years ago - 3 comments

#7 - module: mkDefault PrivateTmp to true

Pull Request - State: closed - Opened by cole-h over 3 years ago

#6 - module: assert that PrivateTmp is enabled

Pull Request - State: closed - Opened by cole-h over 3 years ago

#5 - Investigate using TemporaryFileSystem and JoinsNamespaceOf

Issue - State: closed - Opened by cole-h over 3 years ago - 1 comment

#4 - Test something resembling the real world

Pull Request - State: closed - Opened by cole-h over 3 years ago

#3 - Test a templated secretFile

Pull Request - State: closed - Opened by cole-h over 3 years ago - 2 comments

#2 - Use inotify instead of a busy wait for secret files

Issue - State: closed - Opened by grahamc over 3 years ago - 1 comment

#1 - Initial module

Pull Request - State: closed - Opened by grahamc over 3 years ago - 1 comment