Merge pull request 'Authenticate config writes with a Vault OIDC token' (#64) from benvin/oidc-token into main

Reviewed-on: #64

Makefile

@@ -12,7 +12,9 @@ define vault_env
 	else \
 		export VAULT_TOKEN=$$(vault write -field=token auth/approle/login role_id=$$VAULT_ROLEID); \
 	fi && \
-	export CONSUL_HTTP_TOKEN=$$(vault read -field=token consul_root/au/syd1/creds/terraform-artifactapi)
+	export CONSUL_HTTP_TOKEN=$$(vault read -field=token consul_root/au/syd1/creds/terraform-artifactapi) && \
+	export ARTIFACTAPI_TOKEN=$$(vault read -field=token identity/oidc/token/terraform-artifactapi) && \
+	[ -n "$$ARTIFACTAPI_TOKEN" ] || { echo "failed to read ARTIFACTAPI_TOKEN" >&2; exit 1; }
 endef
 
 init:

modules/artifactapi/versions.tf

@@ -3,7 +3,7 @@ terraform {
   required_providers {
     artifactapi = {
       source  = "artifactapi.k8s.syd1.au.unkin.net/terraform-unkin/artifactapi"
-      version = "~> 0.5"
+      version = "~> 0.7"
     }
   }
 }