arcodange-org/tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(vault): rename applications.policies → ops_policies (cms CI was silently missing its R2 policy) #4

Merged
arcodange merged 1 commits from claude/fix-cms-ops-policies-key into main 2026-06-28 19:22:07 +02:00
Conversation 0 Commits 1 Files Changed 2 +2 -2
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
hashicorp-vault/iac/main.tf
View File

@@ -79,7 +79,7 @@ module "app_policies" {
for_each = { for app in var.applications : app.name => app } for_each = { for app in var.applications : app.name => app }
name = each.value.name name = each.value.name
envs = each.value.envs envs = each.value.envs
ops_policies = each.value.policies ops_policies = each.value.ops_policies
service_account_names = each.value.service_account_names service_account_names = each.value.service_account_names
service_account_namespaces = each.value.service_account_namespaces service_account_namespaces = each.value.service_account_namespaces
gitea_app_id = var.gitea_app_id gitea_app_id = var.gitea_app_id

2
hashicorp-vault/iac/variables.tf
View File

@@ -12,7 +12,7 @@ variable "POSTGRES_CREDENTIALS_EDITOR_PASSWORD" {
variable "applications" { variable "applications" {
type = set(object({ type = set(object({
name = string name = string
policies = optional(list(string), []) ops_policies = optional(list(string), [])
service_account_names = optional(list(string), []) service_account_names = optional(list(string), [])
service_account_namespaces = optional(list(string), []) service_account_namespaces = optional(list(string), [])
# Multi-env extension: list of envs this app deploys to. Defaults to ["prod"] for # Multi-env extension: list of envs this app deploys to. Defaults to ["prod"] for