From 363e7b38978e3571a48aebfef77cf8436a66118a Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@unkin.net>
Date: Fri, 16 Oct 2026 22:05:06 +1100
Subject: [PATCH] Export artifactapi OIDC token and require provider 0.7

---
 Makefile                        | 4 +++-
 modules/artifactapi/versions.tf | 2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 55298b8..bddd2cb 100644
--- a/Makefile
+++ b/Makefile
@@ -12,7 +12,9 @@ define vault_env
 	else \
 		export VAULT_TOKEN=$$(vault write -field=token auth/approle/login role_id=$$VAULT_ROLEID); \
 	fi && \
-	export CONSUL_HTTP_TOKEN=$$(vault read -field=token consul_root/au/syd1/creds/terraform-artifactapi)
+	export CONSUL_HTTP_TOKEN=$$(vault read -field=token consul_root/au/syd1/creds/terraform-artifactapi) && \
+	export ARTIFACTAPI_TOKEN=$$(vault read -field=token identity/oidc/token/terraform-artifactapi) && \
+	[ -n "$$ARTIFACTAPI_TOKEN" ] || { echo "failed to read ARTIFACTAPI_TOKEN" >&2; exit 1; }
 endef
 
 init:
diff --git a/modules/artifactapi/versions.tf b/modules/artifactapi/versions.tf
index 71ba92b..e4d4c52 100644
--- a/modules/artifactapi/versions.tf
+++ b/modules/artifactapi/versions.tf
@@ -3,7 +3,7 @@ terraform {
   required_providers {
     artifactapi = {
       source  = "artifactapi.k8s.syd1.au.unkin.net/terraform-unkin/artifactapi"
-      version = "~> 0.5"
+      version = "~> 0.7"
     }
   }
 }