From 7d00923dbc3c89ff26d57087c0c9c61428eb198c Mon Sep 17 00:00:00 2001
From: Dreaded_X <tim@huizinga.dev>
Date: Wed, 3 Dec 2025 04:43:16 +0100
Subject: [PATCH] feat: Use pre-generated deploy key

---
 .gitattributes       |   1 +
 .secretsignore       |   1 +
 bootstrap.sh         |   6 +++++-
 keys/testing.key     | Bin 0 -> 527 bytes
 keys/testing.key.pub |   1 +
 5 files changed, 8 insertions(+), 1 deletion(-)
 create mode 100644 .gitattributes
 create mode 100644 .secretsignore
 create mode 100644 keys/testing.key
 create mode 100644 keys/testing.key.pub

diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..2339928
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+*.key filter=git-crypt diff=git-crypt
diff --git a/.secretsignore b/.secretsignore
new file mode 100644
index 0000000..421b2d2
--- /dev/null
+++ b/.secretsignore
@@ -0,0 +1 @@
+keys/*.key
diff --git a/bootstrap.sh b/bootstrap.sh
index 8888375..20aacdc 100755
--- a/bootstrap.sh
+++ b/bootstrap.sh
@@ -124,5 +124,9 @@ cilium-cli status --wait
 # cilium-cli connectivity test --namespace-labels pod-security.kubernetes.io/enforce=privileged
 
 echo "Bootstrapping flux..."
-flux bootstrap git --url ssh://git@huizinga.dev/infra/foundation --branch=main --path=clusters/${cluster_name} \
+flux bootstrap git \
+	--url ssh://git@huizinga.dev/infra/foundation \
+	--branch=main \
+	--private-key-file=keys/${cluster_name}.key
+	--path=clusters/${cluster_name} \
 	--components-extra=source-watcher
diff --git a/keys/testing.key b/keys/testing.key
new file mode 100644
index 0000000000000000000000000000000000000000..df91f5c060043186bad1429c7ddf4a2a8cf80d50
GIT binary patch
literal 527
zcmV+q0`UC+M@dveQdv+`01Jz~^TG7UZt<Oj&=O5qQxta3gMx)rlgGB?ZMr(=7~%xo
zoyx_fItqP>M6`)A<5*s8$2_w*f`iRjUIA^%&>96ix-EBY?;I%wg3&^;%#(kC;ByZj
zbqJ;gRH<7?7&RP*L#aF*;Kdw8cxWQ$L*mW#jH}=2B-CIC{&HKiVbkhaTqb@+Z#Qx#
z%e{VWi-&)pW7wNBI7p&bFeqAHk2TJKOr%$t+G#pcUrBgzHF?u|!!(wS)D&m-352@L
zx(rL3!YSE(cOUVV7!|j6npUv`Bd$Q{we#qO9RiP1Ybr8J?mT1{lMpLgq74<~HY|1_
zd@U2u3!xPEDad~IbTmiwv~QTCN)P#(P!A1O6bfpdO=(>+UxiZ&`NO`6*hYgqei*we
zptjl<#eGL6QX%9qmJ2w$>%)<GId2GXr@$=DCB$CQ1FFMSmN3A}$*uS8((I<grPb^g
zTQ|e>5@I)Kw8hZB=WRwc|L8d2Mzjs&3(5YX&GUX>lP=C0tf-801(DwPFFcp&YT3<*
zmZ*&*9LVYg?HTOVE4nR;f&v&+YdQKrEa@{Mz0i=SZ1{%n;Sc-bQwN{EOgR$vFR+-@
zEG35KXnEZD@0BF@1E*&u!AlxKVR9*~c2S<$#8*(KRRovrJoB#S!4{wS0Au_I%o=&G
RaXfImcrT7g(c_D%y&rQ-|G)qM

literal 0
HcmV?d00001

diff --git a/keys/testing.key.pub b/keys/testing.key.pub
new file mode 100644
index 0000000..8a6637f
--- /dev/null
+++ b/keys/testing.key.pub
@@ -0,0 +1 @@
+ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBJIjhlQCqpq97CQcM6hDThGBgt/jSqnvN9billcvouuNSyaKqZRdUFWxbauruXmVd5okuwjocyxU4FTuTtFyC5w= flux@testing