aaron/infra-core
1
0
Fork 2
Code Issues Pull requests 12 Projects Releases 1 Packages Wiki Activity Actions

HOMELAB-988: fix(es-forgejo-runner): point at real-AWS terraform creds #190

Merged
aaron merged 1 commit from plane/HOMELAB-988-runner-es-repoint into live 2026-04-26 00:37:28 +00:00
Conversation 0 Commits 1 Files changed 1 +5 -2
aaron commented 2026-04-26 00:37:26 +00:00
Owner
Copy link

Companion to prod#266. Repoints the runner-aws-credentials ExternalSecret at the new terraform-aws-credentials Secret instead of velero-aws-credentials.

Reason: terraform's S3 backend uses real AWS — velero's keys are Backblaze B2 and STS rejects them.

Companion to prod#266. Repoints the runner-aws-credentials ExternalSecret at the new terraform-aws-credentials Secret instead of velero-aws-credentials. Reason: terraform's S3 backend uses real AWS — velero's keys are Backblaze B2 and STS rejects them.
HOMELAB-988: fix(es-forgejo-runner): point at real-AWS terraform creds
Some checks failed
0/0 projects applied successfully.
CI Review / pr-title (pull_request) Has been cancelled
Details
CI Review / helm-validate (pull_request) Has been cancelled
Details
CI Review / ai-review (pull_request) Has been cancelled
Details
Lint & Validate / terraform-validate (pull_request) Has been cancelled
Details
Lint & Validate / yaml-lint (pull_request) Has been cancelled
Details
Lint & Validate / shellcheck (pull_request) Has been cancelled
Details
da5b4029dc 
The runner-aws-credentials ES was sourcing from velero-aws-credentials,
but those are Backblaze B2 keys. Terraform's S3 backend talks to real
AWS STS and rejected them with InvalidClientTokenId during the K8s-
runner end-to-end test of HOMELAB-988.

prod#266 added a new SopsSecret CR that exposes the real AWS keys as
secrets/terraform-aws-credentials. This commit repoints the ES at it.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
aaron merged commit b54b346a05 into live 2026-04-26 00:37:28 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
aaron/infra-core!190
No description provided.