From a04066c45526c6d8410ba998134f692ff991b4f3 Mon Sep 17 00:00:00 2001
From: Luiz Ribeiro <luizribeiro@gmail.com>
Date: Tue, 11 Jun 2024 08:57:23 -0400
Subject: [PATCH] Suffix PATH on kubenix script (#67)

Fixes #66

Setting the `PATH` to `$out/bin` is causing programs from the original `PATH` (such as `gpg`) to be inaccessible to `vals` - causing decryption of sops secrets with `gpg` to fail.
---
 pkgs/kubenix.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pkgs/kubenix.nix b/pkgs/kubenix.nix
index 2c69ca2..d4d9bd3 100644
--- a/pkgs/kubenix.nix
+++ b/pkgs/kubenix.nix
@@ -37,7 +37,7 @@ symlinkJoin {
 
   postBuild = ''
     wrapProgram $out/bin/kubenix \
-      --set PATH "$out/bin" \
+      --suffix PATH : "$out/bin" \
       --run 'export KUBECONFIG=''${KUBECONFIG:-${toString kubeconfig}}' \
       --set KUBECTL_EXTERNAL_DIFF '${diff}' \
       --set MANIFEST '${result}'