Helm Charts / Detect changed charts (push) Successful in 22s
Helm Charts / Detect changed charts (pull_request) Successful in 16s
MinIO / Auth with gitea for vault (push) Failing after 8m33s
MinIO / Tofu - minio IAC (push) Has been skipped
MinIO / Auth with gitea for vault (pull_request) Failing after 8m32s
MinIO / Tofu - minio IAC (pull_request) Has been skipped
Hashicorp Vault / Auth with gitea for vault (pull_request) Failing after 8m32s
Hashicorp Vault / Tofu - Vault IAC (pull_request) Has been skipped
Helm Charts / Library charts tool (push) Has been skipped
Helm Charts / Library charts tool (pull_request) Has been skipped
Hashicorp Vault / Auth with gitea for vault (push) Failing after 8m31s
Hashicorp Vault / Tofu - Vault IAC (push) Has been skipped
Helm Charts / Application charts pgcat (push) Has been skipped
Helm Charts / Application charts pgcat (pull_request) Has been skipped
Les décisions de conception (qui déclare, qui détient, pourquoi les octets ne passent pas par l'API) vivent désormais dans `factory/doc/adr/20260726-stockage-objet-minio.md`. Le code ne garde que ce qu'un relecteur ne peut pas deviner et qui l'empêcherait de casser quelque chose : l'absence VOLONTAIRE de s3:GetObject/PutObject dans la politique du provisionneur, l'absence VOLONTAIRE de basic-auth sur l'ingress S3, le caractère inconditionnel de la règle Vault, et l'avertissement sur les noms d'actions MinIO non éprouvés. Chaque fichier pointe l'ADR. 283 → 230 lignes sur minio/iac. tofu fmt propre, tofu validate réussi sur les deux racines. Co-Authored-By: Claude Opus 5 (1M context) <[email protected]> Claude-Session: https://claude.ai/code/session_01CoafGWmRVESaWX819USUUA
33 lines
700 B
Terraform
33 lines
700 B
Terraform
terraform {
|
|
required_providers {
|
|
vault = {
|
|
source = "vault"
|
|
version = "4.4.0"
|
|
}
|
|
minio = {
|
|
source = "aminueza/minio"
|
|
version = "3.3.0"
|
|
}
|
|
random = {
|
|
source = "hashicorp/random"
|
|
version = "3.6.3"
|
|
}
|
|
}
|
|
}
|
|
|
|
provider "vault" {
|
|
address = "https://vault.arcodange.lab"
|
|
auth_login_jwt { # TERRAFORM_VAULT_AUTH_JWT environment variable
|
|
mount = "gitea_jwt"
|
|
role = "gitea_cicd_minio"
|
|
}
|
|
}
|
|
|
|
# Provider MinIO — crée le compte de provisionnement (provisioner.tf).
|
|
provider "minio" {
|
|
minio_server = var.minio_endpoint
|
|
minio_user = local.config.rootUser
|
|
minio_password = local.config.rootPassword
|
|
minio_ssl = true
|
|
}
|