After the move to the self-signed internal DNS (gitea.arcodange.lab / vault.arcodange.lab), the default `ubuntu-latest` runner image does not trust the homelab CA, so the `uses:` clone of the vault-action over HTTPS fails TLS verification. webapp's workflows already moved to the `ubuntu-latest-ca` runner (whose image ships the homelab CA); apply the same to the factory `iac` and `postgres` tofu workflows. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2.0 KiB
2.0 KiB