uralkal: minio admin is minioadmin, not tfstate

Browse Source

741f4f5 set minio.admin to the tfstate account by assumption; tfstate is a
regular user, so admin API calls from live/s3 failed with
SignatureDoesNotMatch on minio_iam_user refresh. The real root account is
the one stored in secrets/minio/admin version 1 (2026-09-25). Without this
change vault-secrets would overwrite the manually restored Vault value back
to tfstate on the next apply.

Only minio.admin.root_user/root_password change in the decrypted content;
the other ciphertext lines are sops re-encrypting non-string values.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

...

This commit is contained in:

ivan 2026-10-05 15:08:30 +05:00

parent 2cb10af8bd

commit 2255d1c94f

1 changed files with 34 additions and 34 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Show Stats Download Patch File Download Diff File Expand all files Collapse all files

68

infrastructure-secrets.yaml

View File

File diff suppressed because one or more lines are too long