jfraeys/infra
Watch
1
0
Fork
You've already forked infra
 0
Code Issues 21 Pull requests 4 Projects Releases Packages Wiki Activity Actions

chore(ci): pause the scheduled drift check until its secrets exist #26

Closed
jfraeys wants to merge 0 commits from jfraeys/chore/pause-drift-check-schedule into main AGit
pull from: jfraeys/chore/pause-drift-check-schedule
merge into: jfraeys:main
Conversation 1 Commits - Files changed -
jfraeys commented 2026-10-08 20:42:19 -04:00
Owner
Copy link

The infra repo has none of the repo secrets drift-check reads (LINODE_TOKEN, CLOUDFLARE_API_TOKEN, OBJECT_STORAGE_ACCESS_KEY_ID, OBJECT_STORAGE_SECRET_ACCESS_KEY, FORGEJO_ADMIN_TOKEN), so each 6-hourly run built an ephemeral VM and failed in 2 seconds in tofu init (empty backend bucket/region; run 61). This comments out the schedule and keeps workflow_dispatch, notes where each value lives (the vault has three; LINODE_TOKEN and CLOUDFLARE_API_TOKEN come from .env TF_VAR_linode_token and TF_VAR_cloudflare_api_token), and records in docs/incidents.md that the 2026-10-02 incident "not yet added" is still true. To restore: add the five secrets in Forgejo (infra repo, Settings, Actions, Secrets), then uncomment the schedule block. Consider a narrower token than the admin one for FORGEJO_ADMIN_TOKEN. -- Generated with Claude Code

The infra repo has none of the repo secrets drift-check reads (LINODE_TOKEN, CLOUDFLARE_API_TOKEN, OBJECT_STORAGE_ACCESS_KEY_ID, OBJECT_STORAGE_SECRET_ACCESS_KEY, FORGEJO_ADMIN_TOKEN), so each 6-hourly run built an ephemeral VM and failed in 2 seconds in `tofu init` (empty backend bucket/region; run 61). This comments out the schedule and keeps `workflow_dispatch`, notes where each value lives (the vault has three; LINODE_TOKEN and CLOUDFLARE_API_TOKEN come from .env TF_VAR_linode_token and TF_VAR_cloudflare_api_token), and records in docs/incidents.md that the 2026-10-02 incident "not yet added" is still true. To restore: add the five secrets in Forgejo (infra repo, Settings, Actions, Secrets), then uncomment the schedule block. Consider a narrower token than the admin one for FORGEJO_ADMIN_TOKEN. -- Generated with [Claude Code](https://claude.com/claude-code)
The infra repo has none of the repo secrets drift-check reads (LINODE_TOKEN,
CLOUDFLARE_API_TOKEN, OBJECT_STORAGE_ACCESS_KEY_ID/SECRET_ACCESS_KEY,
FORGEJO_ADMIN_TOKEN), so every 6-hourly run built an ephemeral VM and failed
in tofu init with an empty backend bucket/region. Keep workflow_dispatch;
note where each value lives (vault, or .env TF_VAR_* for the two the vault
lacks) and record that the 2026-10-02 incident's 'not yet added' is still
true.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
jfraeys commented 2026-10-13 09:47:59 -04:00
Author
Owner
Copy link

Closing: this PR's head commit is already an ancestor of main (merged through another path), so there is nothing left to merge. Verified with git merge-base --is-ancestor.

Closing: this PR's head commit is already an ancestor of main (merged through another path), so there is nothing left to merge. Verified with git merge-base --is-ancestor.
jfraeys closed this pull request 2026-10-13 09:47:59 -04:00

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
jfraeys/infra!26
No description provided.