uralkal: write secrets/minio/admin (rootUser/rootPassword) so CI's load_admin_creds.sh can read it

Browse Source

The pipeline's validate step failed before terraform even ran:
  load_admin_creds: EMPTY creds: MINIO_ADMIN_USER MINIO_ADMIN_PASSWORD
    — VAULT_TOKEN cannot read the matching secrets/* paths

scripts/load_admin_creds.sh unconditionally reads secrets/minio/admin
(rootUser/rootPassword) to configure the minio-buckets provider in
live/terragrunt.hcl, used by live/s3 to actually create buckets. uralkal's
minio.admin was never enabled (only per-app minio.apps.* entries existed)
so that Vault path didn't exist yet. Using the same admin creds
(tfstate/09Eat4eiMcg5) already set on every minio.apps.* entry — this is
the real external minio endpoint's admin account, not per-app.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

...

This commit is contained in:

ivan 2026-10-05 14:07:39 +05:00

parent e19c99038d

commit 741f4f5e5e

1 changed files with 1846 additions and 1842 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3688

infrastructure-secrets.yaml

View File

File diff suppressed because one or more lines are too long