terraform-vault

unkin/terraform-vault

Fork 0

Files

T

History

unkinben d82580f1af

ci/woodpecker/push/apply Pipeline was successful

Details

policies: grant terraform-git read on the gitea config KV metadata path (#103 )

terraform-git's main apply still fails after the skip_child_token fix (tfgit #48): the vault_kv_secret_v2 seed resource reads the kv-v2 metadata path during plan/apply, and the grant added in #102 covered kv/data only — Vault returns 403 on GET kv/metadata/.../secret_backend/gitea/config (terraform-git pipeline 107). This is the last blocker before the KV seed lands and terraform-vault #101 can apply.

- add read on kv/metadata/service/vault/au/syd1/secret_backend/gitea/config to the terraform-git seed policy

Reviewed-on: #103
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>

2026-07-27 23:21:43 +10:00

auth

feat: add plan workflow

2026-05-21 23:52:30 +10:00

consul_root/au/syd1

Add terraform-enc Vault/Consul plumbing + encapi token grant (#98 )

2026-07-24 23:18:56 +10:00

gitea

policies: grant the vault deployer access to the gitea secrets engine (#100 )

2026-07-27 19:10:21 +10:00

gpg

Grant vault deployer access to import + manage the gpg engine (#88 )