From 0128d26d85b345b4414d2ce148b078a34e076d36 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Tue, 8 Sep 2026 22:41:58 -0600 Subject: [PATCH 1/2] feat: distribute Hero SSH identity --- secrets.tf | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/secrets.tf b/secrets.tf index 84f9555..684535b 100644 --- a/secrets.tf +++ b/secrets.tf @@ -21,7 +21,7 @@ locals { } "onion_secret_access_key" = { name = "ONION_AWS_SECRET_ACCESS_KEY" - value = data.sops_file.secret_vars.data["onion_aws_secret_access_key"] + value = data.sops_file.secret_vars.data["onion_secret_access_key"] repositories = ["www"] } "www_s3_bucket" = { @@ -79,6 +79,16 @@ locals { value = data.sops_file.secret_vars.data["hero_host_config_warp_client_secret"] repositories = ["hero-host-config"] } + "hero_host_config_ssh_private_key" = { + name = "HERO_HOST_CONFIG_SSH_PRIVATE_KEY" + value = data.sops_file.secret_vars.data["ssh_private_key"] + repositories = ["hero-host-config"] + } + "hero_host_config_ssh_known_hosts" = { + name = "HERO_HOST_CONFIG_SSH_KNOWN_HOSTS" + value = data.sops_file.secret_vars.data["ssh_known_hosts"] + repositories = ["hero-host-config"] + } "chart_updater_github_app_private_key" = { name = "CHART_UPDATER_GITHUB_APP_PRIVATE_KEY" value = data.sops_file.secret_vars.data["chart_updater_github_app_private_key"] From 51ff6ebf5f9770681d38663d29c6547a55eb7118 Mon Sep 17 00:00:00 2001 From: Steven Welch Date: Tue, 8 Sep 2026 22:42:49 -0600 Subject: [PATCH 2/2] fix: preserve existing onion secret reference --- secrets.tf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/secrets.tf b/secrets.tf index 684535b..6500578 100644 --- a/secrets.tf +++ b/secrets.tf @@ -21,7 +21,7 @@ locals { } "onion_secret_access_key" = { name = "ONION_AWS_SECRET_ACCESS_KEY" - value = data.sops_file.secret_vars.data["onion_secret_access_key"] + value = data.sops_file.secret_vars.data["onion_aws_secret_access_key"] repositories = ["www"] } "www_s3_bucket" = {