unkin/terraform-vault
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

policies: allow terraform-git to delete the gitea config seed for taint recovery #104

Merged
benvin merged 1 commits from benvin/gitea-kv-delete into master 2026-07-27 23:36:54 +10:00
Conversation 0 Commits 1 Files Changed 1
+6
unkinben commented 2026-07-27 23:26:19 +10:00
Owner
Copy Link
Copy Source

terraform-git's apply (pipeline 108) still fails: pipeline 107 actually wrote the seed but the post-create metadata read 403'd, so terraform tainted the resource — recovery is replace (delete+create), and delete was deliberately not granted. Withholding delete doesn't provide the write-once property anyway (that's lifecycle ignore_changes in terraform-git); it just breaks taint recovery and destroy.

  • add delete on the kv data path for the gitea config seed
  • add delete on the matching kv metadata path (full destroy support)

After merge+apply, restart the terraform-git apply once more — it will replace the tainted seed and go green, unblocking #101.

terraform-git's apply (pipeline 108) still fails: pipeline 107 actually wrote the seed but the post-create metadata read 403'd, so terraform tainted the resource — recovery is replace (delete+create), and delete was deliberately not granted. Withholding delete doesn't provide the write-once property anyway (that's lifecycle ignore_changes in terraform-git); it just breaks taint recovery and destroy. - add delete on the kv data path for the gitea config seed - add delete on the matching kv metadata path (full destroy support) After merge+apply, restart the terraform-git apply once more — it will replace the tainted seed and go green, unblocking #101.
unkinben added 1 commit 2026-07-27 23:26:20 +10:00
policies: allow terraform-git to delete the gitea config seed for taint recovery
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
1f060bd9b0 
Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
benvin merged commit bf9c785281 into master 2026-07-27 23:36:54 +10:00
benvin deleted branch benvin/gitea-kv-delete 2026-07-27 23:36:54 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-vault#104
Delete Branch "benvin/gitea-kv-delete"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?