Renaming its policies left the role bound to nothing, and the module
indexes policy_auth_map by role name, so the plan failed with Invalid
index. woodpecker_terraform_netbox replaces it.
terraform-netbox supersedes terraform-infra but has no identity to run as:
the terraform-infra policies bind to a terraform_infra approle and a
woodpecker_terraform_infra k8s role that were never created.
- rename the netbox and consul creds policies, the engine role and the
consul ACL rules to terraform-netbox
- add the terraform_netbox approle and woodpecker_terraform_netbox k8s role
- grant the engine role extras.customfield, dcim.platform and the device
inventory types the module creates
- drop the kv/service/terraform/infra policy: the kea_token is gone with Kea
and the NetBox token is minted per run
unkin-agent