From 36fbfb86bc0818d98e4d058de85bc2adad4404e7 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 22 Aug 2026 23:25:44 +1000 Subject: [PATCH] Sort arrstack role apps alphabetically (#133) The master apply (pipeline 202) fails with "Provider produced inconsistent result after apply": the arrstack Vault engine returns apps alphabetically sorted while the provider models apps as an ordered List, so the declared order [sonarr, radarr, prowlarr] never matches the read-back. This is an interim unblock while the provider moves apps to a Set. - Reorders apps in config/arrstack_secret_backend_role/arrstack/all.yaml to alphabetical order to match the engine read-back Reviewed-on: https://git.unkin.net/unkin/terraform-vault/pulls/133 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- config/arrstack_secret_backend_role/arrstack/all.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/arrstack_secret_backend_role/arrstack/all.yaml b/config/arrstack_secret_backend_role/arrstack/all.yaml index ca37d39..62287d9 100644 --- a/config/arrstack_secret_backend_role/arrstack/all.yaml +++ b/config/arrstack_secret_backend_role/arrstack/all.yaml @@ -1,9 +1,9 @@ --- # Mints an arrproxy API key scoped to all three arr apps. apps: - - sonarr - - radarr - prowlarr + - radarr + - sonarr ttl: 60 # seconds (1m); short-lived by design, renewed on demand max_ttl: 86400 # seconds (24h); the engine additionally caps renewal at the # arrproxy admin token's fixed mint expiry.