input-output-hk / bitte

Nix Ops for Terraform, Consul, Vault, Nomad
Apache License 2.0
157 stars 15 forks source link

hydrate-cluster and bootstrap systemd vault policy format drift #195

Open johnalotoski opened 2 years ago

johnalotoski commented 2 years ago

Since commit https://github.com/input-output-hk/bitte/commit/81a576eab9ae0653a5b9ee706f6ba36a10c00932, anytime the bootstrap core node is deployed with a change and then a TF hydrate-cluster plan is performed afterwards there will be at least a minimal no-op TF plan diff due to bootstrap script declaring vault policies in hcl format and hydrate-cluster declaring vault policies in json. Bringing the syntax to the same format for both methods should resolve -- likely the preference is to bring the bootstrap scripts to use json.

kaii-zen commented 2 years ago

Are you already working on this? If not then I can pick it up. Shouldn't be too hard.