add option to import sops secrets with groups,users,machines,prefixes

pkgs/clan-cli/clan_cli/secrets/import_sops.py

@@ -29,20 +29,61 @@ def import_sops(args: argparse.Namespace) -> None:
             raise ClanError(f"Could not import sops file {file}: {e}") from e
         secrets = json.loads(res.stdout)
         for k, v in secrets.items():
+            k = args.prefix + k
             if not isinstance(v, str):
                 print(
                     f"WARNING: {k} is not a string but {type(v)}, skipping",
                     file=sys.stderr,
                 )
                 continue
-            encrypt_secret(sops_secrets_folder() / k, v)
+            if (sops_secrets_folder() / k).exists():
+                print(
+                    f"WARNING: {k} already exists, skipping",
+                    file=sys.stderr,
+                )
+                continue
+            encrypt_secret(
+                sops_secrets_folder() / k,
+                v,
+                add_groups=args.group,
+                add_machines=args.machine,
+                add_users=args.user,
+            )
 
 
 def register_import_sops_parser(parser: argparse.ArgumentParser) -> None:
     parser.add_argument(
-        "--input_type",
+        "--input-type",
         type=str,
-        help="the input type of the sops file (yaml, json, ...)",
+        default=None,
+        help="the input type of the sops file (yaml, json, ...). If not specified, it will be guessed from the file extension",
+    )
+    parser.add_argument(
+        "--group",
+        type=str,
+        action="append",
+        default=[],
+        help="the group to import the secrets to",
+    )
+    parser.add_argument(
+        "--machine",
+        type=str,
+        action="append",
+        default=[],
+        help="the machine to import the secrets to",
+    )
+    parser.add_argument(
+        "--user",
+        type=str,
+        action="append",
+        default=[],
+        help="the user to import the secrets to",
+    )
+    parser.add_argument(
+        "--prefix",
+        type=str,
+        default="",
+        help="the prefix to use for the secret names",
     )
     parser.add_argument(
         "sops_file",