rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): correct core-cli auth + S3 backend config for CI runner (iterate)

Browse Source
This commit is contained in:
Story Crater Bot
2026-08-18 15:08:01 -07:00
parent f16f439feb
commit df9d9845c0
3 changed files with 12 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.forgejo/workflows/terraform-apply.yml
+9 -5
View File
@@ -80,8 +80,6 @@ jobs:
- name: Terraform Init - name: Terraform Init
working-directory: terraform working-directory: terraform
env: env:
# MinIO S3 backend — use internal DNS (storage ns) instead of external hostname
# Runner pod blocked from external DNS; internal DNS is routable
AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }} AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }} AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
TF_VAR_kubeconfig_path: /tmp/kubeconfig TF_VAR_kubeconfig_path: /tmp/kubeconfig
@@ -89,9 +87,15 @@ jobs:
TF_SKIP_REGION_VALIDATION: "true" TF_SKIP_REGION_VALIDATION: "true"
TF_SKIP_REQUESTING_ACCOUNT_ID: "true" TF_SKIP_REQUESTING_ACCOUNT_ID: "true"
run: | run: |
# Override S3 endpoint to use internal cluster DNS terraform init \
export TF_CLI_ARGS_init="-backend-config=endpoints.s3=http://minio.storage.svc.cluster.local:9000" -backend-config="bucket=terraform-state" \
terraform init -backend-config="key=homelab/terraform.tfstate" \
-backend-config="region=us-east-1" \
-backend-config="endpoint=http://minio.storage.svc.cluster.local:9000" \
-backend-config="access_key=$AWS_ACCESS_KEY_ID" \
-backend-config="secret_key=$AWS_SECRET_ACCESS_KEY" \
-backend-config="skip_credentials_validation=true" \
-backend-config="use_path_style=true"
- name: Pull Terraform State - name: Pull Terraform State
working-directory: terraform working-directory: terraform
terraform/authentik-generated.tf
+2 -2
View File
@@ -25,7 +25,7 @@ resource "authentik_group" "authentik_admins" {
name = "authentik Admins" name = "authentik Admins"
parent = null parent = null
roles = null roles = null
users = [5, 4] users = [5, 4, 38]
} }
# __generated__ by Terraform from "5" # __generated__ by Terraform from "5"
@@ -137,7 +137,7 @@ resource "authentik_application" "core_cli_app" {
name = "core-cli" name = "core-cli"
open_in_new_tab = false open_in_new_tab = false
policy_engine_mode = "any" policy_engine_mode = "any"
protocol_provider = 0 protocol_provider = authentik_provider_oauth2.core_cli_provider.id
slug = "core-cli" slug = "core-cli"
uuid = "f15c69b4-414b-49da-9e65-eef0a0dbf1ee" uuid = "f15c69b4-414b-49da-9e65-eef0a0dbf1ee"
} }
terraform/state.tf
+1 -4
View File
@@ -4,10 +4,7 @@ terraform {
bucket = "terraform-state" bucket = "terraform-state"
key = "homelab/terraform.tfstate" key = "homelab/terraform.tfstate"
region = "us-east-1" region = "us-east-1"
endpoints = { endpoint = "https://minio-api.riotpiao.homelab.com"
s3 = "https://minio-api.riotpiao.homelab.com"
}
profile = "minio"
skip_credentials_validation = true skip_credentials_validation = true
skip_requesting_account_id = true skip_requesting_account_id = true
skip_region_validation = true skip_region_validation = true