Allow creation of deploy keys

[zeidlos]

I am currently trying to bootstrap a new kubernetes cluster, using terraform.
Within this process I also want to install fluxcd onto the cluster.
Fluxcd is allowing for a helm deployment.

What do I need?

In order for flux to reconcile the project, I need to give it ssh-keys, so it can pull from the repository.
I want to be able to create a new ssh-keypair from within terraform and then, using the forgejo-provider, upload the deploy key onto the repository with read/write permissions.

If you want a beta-tester for this, please hit me up.
Sadly I believe to lack the necessary skills to create this feature within this provider myself. :)

[stdevel]

That's an interesting idea! Sounds like it would be required to implement a Terraform provisioner. Looks like the Forgejo API offers a call for this:

What do you think, @acch?

[acch]

Thanks @zeidlos for bringing up this idea! Makes a ton of sense, and I guess it would provide value to many users...

I've briefly checked the forgejo-sdk. Looks like this is the function we would need to use:

• CreateDeployKey(user, repo string, opt CreateKeyOption)

... which requires these options (link):

type CreateKeyOption struct {
	// Title of the key to add
	Title string `json:"title"`
	// An armored SSH key to add
	Key string `json:"key"`
	// Describe if the key has only read access or read/write
	ReadOnly bool `json:"read_only"`
}

Hence, looks totally doable!