From 6478097e2dcdc762ba01aa4425e4e5cf5ee3f491 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Sun, 15 Mar 2026 23:36:46 +0000 Subject: [PATCH] fix platform stack: k8s_users.domains and sensitive for_each errors [ci skip] - Use lookup(user, "domains", []) for missing domains attribute - Wrap user_domains in nonsensitive() for Cloudflare for_each --- stacks/platform/main.tf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/stacks/platform/main.tf b/stacks/platform/main.tf index 85f7237c..e96d1156 100644 --- a/stacks/platform/main.tf +++ b/stacks/platform/main.tf @@ -71,7 +71,7 @@ locals { # User domains from namespace-owners for DNS/Cloudflare user_domains = flatten([ - for name, user in local.k8s_users : user.domains + for name, user in local.k8s_users : lookup(user, "domains", []) if user.role == "namespace-owner" ]) } @@ -383,7 +383,7 @@ module "cloudflared" { cloudflare_zone_id = var.cloudflare_zone_id cloudflare_tunnel_id = var.cloudflare_tunnel_id public_ip = var.public_ip - cloudflare_proxied_names = concat(var.cloudflare_proxied_names, local.user_domains) + cloudflare_proxied_names = concat(var.cloudflare_proxied_names, nonsensitive(local.user_domains)) cloudflare_non_proxied_names = var.cloudflare_non_proxied_names cloudflare_tunnel_token = data.vault_kv_secret_v2.secrets.data["cloudflare_tunnel_token"] }