unkin/terraform-vault
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

policies: grant terraform-git read on the gitea config KV metadata path #103

Merged
benvin merged 1 commits from benvin/gitea-kv-metadata into master 2026-07-27 23:21:44 +10:00
Conversation 0 Commits 1 Files Changed 1
+5
unkinben commented 2026-07-27 22:07:17 +10:00
Owner
Copy Link
Copy Source

terraform-git's main apply still fails after the skip_child_token fix (tfgit #48): the vault_kv_secret_v2 seed resource reads the kv-v2 metadata path during plan/apply, and the grant added in #102 covered kv/data only — Vault returns 403 on GET kv/metadata/.../secret_backend/gitea/config (terraform-git pipeline 107). This is the last blocker before the KV seed lands and terraform-vault #101 can apply.

  • add read on kv/metadata/service/vault/au/syd1/secret_backend/gitea/config to the terraform-git seed policy
terraform-git's main apply still fails after the skip_child_token fix (tfgit #48): the vault_kv_secret_v2 seed resource reads the kv-v2 metadata path during plan/apply, and the grant added in #102 covered kv/data only — Vault returns 403 on GET kv/metadata/.../secret_backend/gitea/config (terraform-git pipeline 107). This is the last blocker before the KV seed lands and terraform-vault #101 can apply. - add read on kv/metadata/service/vault/au/syd1/secret_backend/gitea/config to the terraform-git seed policy
unkinben added 1 commit 2026-07-27 22:07:18 +10:00
policies: grant terraform-git read on the gitea config KV metadata path
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
b33053339c 
Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
benvin merged commit d82580f1af into master 2026-07-27 23:21:44 +10:00
benvin deleted branch benvin/gitea-kv-metadata 2026-07-27 23:21:44 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-vault#103
Delete Branch "benvin/gitea-kv-metadata"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?