From e21a9a5da40ae9fa5aed0eab6af9011ceee0aead Mon Sep 17 00:00:00 2001 From: jgrusewski Date: Sun, 21 Jun 2026 13:54:13 +0200 Subject: [PATCH] fix(gitlab): enable terraformState object storage (was 403 on all TF-state API calls) Root cause: global.appConfig.terraformState was missing entirely from the GitLab Helm values, so the chart rendered terraform_state.enabled=false + object_store disabled -> every /terraform/state API call 403'd ('Object Storage is not enabled for Terraform::StateUploader'), blocking terragrunt. State files were intact in MinIO (foxhunt-gitlab-artifacts) the whole time. Added terraformState{enabled,bucket, connection} mirroring artifacts/lfs/packages; helm upgrade -> revision 25 -> TF-state API now 200. Co-Authored-By: Claude Opus 4.8 --- infra/k8s/gitlab/values.yaml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/infra/k8s/gitlab/values.yaml b/infra/k8s/gitlab/values.yaml index 581550595..e10db55c8 100644 --- a/infra/k8s/gitlab/values.yaml +++ b/infra/k8s/gitlab/values.yaml @@ -57,6 +57,16 @@ global: connection: secret: gitlab-s3-credentials key: connection + # Terraform/OpenTofu state object storage. MUST be present — without it the + # Terraform::StateUploader has no object store and every TF-state API call 403s + # ("Object Storage is not enabled for Terraform::StateUploader"). State files already + # live in foxhunt-gitlab-artifacts (6b/86///.tfstate). + terraformState: + enabled: true + bucket: foxhunt-gitlab-artifacts + connection: + secret: gitlab-s3-credentials + key: connection gitlab_kas: enabled: false