diff --git a/cluster/clustercfg/BUILD b/cluster/clustercfg/BUILD
index e207c4d..e7b308e 100644
--- a/cluster/clustercfg/BUILD
+++ b/cluster/clustercfg/BUILD
@@ -1,19 +1,25 @@
-load("@pydeps//:requirements.bzl", "requirement")
+load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
 
-py_binary(
-    name = "clustercfg",
-    python_version = "PY3",
+go_library(
+    name = "go_default_library",
     srcs = [
-        "clustercfg.py",
-        "ca.py",
+        "cmd_admincreds.go",
+        "cmd_gencerts.go",
+        "main.go",
     ],
-    visibility = ["//visibility:public"],
+    importpath = "code.hackerspace.pl/hscloud/cluster/clustercfg",
+    visibility = ["//visibility:private"],
     deps = [
-        requirement("cffi"),
-        requirement("fabric"),
-        requirement("idna"),
-        requirement("six"),
-        "//tools:secretstore_lib",
-        "//tools/hscloud:python",
+        "//cluster/clustercfg/certs:go_default_library",
+        "//go/workspace:go_default_library",
+        "@com_github_spf13_cobra//:go_default_library",
+        "@io_k8s_client_go//tools/clientcmd:go_default_library",
+        "@io_k8s_client_go//tools/clientcmd/api:go_default_library",
     ],
 )
+
+go_binary(
+    name = "clustercfg",
+    embed = [":go_default_library"],
+    visibility = ["//visibility:public"],
+)