Skip to content

facts

clanCore.facts.publicDirectory

This option has no description.

Type: null or path

Default:

null

facts

clanCore.facts.publicStore

method to store public facts. custom can be used to define a custom public fact store.

Type: one of "in_repo", "vm", "custom"

Default:

"in_repo"

facts

clanCore.facts.secretPathFunction

The function to use to generate the path for a secret. The default function will use the path attribute of the secret. The function will be called with the secret submodule as an argument.

Type: raw value

facts

clanCore.facts.secretStore

method to store secret facts custom can be used to define a custom secret fact store.

Type: one of "sops", "password-store", "vm", "custom"

Default:

"sops"

facts

clanCore.facts.secretUploadDirectory

The directory where secrets are uploaded into, This is backend specific.

Type: null or path

Default:

null

facts

clanCore.facts.services

This option has no description.

Type: attribute set of (submodule)

Default:

{ }

facts

clanCore.facts.services.<name>.generator

This option has no description.

Type: submodule

facts

clanCore.facts.services.<name>.generator.path

Extra paths to add to the PATH environment variable when running the generator.

Type: list of (path or package)

Default:

[ ]

facts

clanCore.facts.services.<name>.generator.prompt

prompt text to ask for a value. This value will be passed to the script as the environment variable $prompt_value.

Type: null or string

Default:

null

facts

clanCore.facts.services.<name>.generator.script

Shell script snippet to generate the secrets and facts. The script has access to the following environment variables: - facts: path to a directory where facts can be stored - secrets: path to a directory where secrets can be stored The script is expected to generate all secrets and facts defined for this service.

Type: string

facts

clanCore.facts.services.<name>.name

Namespace of the service

Type: string

Default:

"‹name›"

facts

clanCore.facts.services.<name>.public

This option has no description.

Type: attribute set of (submodule)

Default:

{ }

facts

clanCore.facts.services.<name>.public.<name>.name

name of the public fact

Type: string

Default:

"‹name›"

facts

clanCore.facts.services.<name>.public.<name>.path

path to a fact which is generated by the generator

Type: path

Default:

${config.clanCore.clanDir}/machines/${config.clanCore.machineName}/facts/${fact.config.name}

facts

clanCore.facts.services.<name>.public.<name>.value

This option has no description.

Type: null or string

Default:

${config.clanCore.clanDir}/${fact.config.path}

facts

clanCore.facts.services.<name>.secret

path where the secret is located in the filesystem

Type: attribute set of (submodule)

Default:

{ }

facts

clanCore.facts.services.<name>.secret.<name>.groups

Groups to decrypt the secret for. By default we always use the user's key.

Type: list of string

Default:

[ ]

facts

clanCore.facts.services.<name>.secret.<name>.name

name of the secret

Type: string

Default:

"‹name›"

facts

clanCore.facts.services.<name>.secret.<name>.path

path to a secret which is generated by the generator

Type: string

Default:

"/no-such-path"

facts