From 728fbcd3bd616f2f7aca57db10643f6269cc4964 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sun, 22 Mar 2026 01:17:00 +0200
Subject: [PATCH] fix infra stack: add vault provider to terragrunt generate
 block

The infra stack's provider override only included proxmox but main.tf
uses data "vault_kv_secret_v2" which requires the vault provider.
---
 stacks/infra/terragrunt.hcl | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/stacks/infra/terragrunt.hcl b/stacks/infra/terragrunt.hcl
index f01b00bf..dcdbe164 100644
--- a/stacks/infra/terragrunt.hcl
+++ b/stacks/infra/terragrunt.hcl
@@ -3,13 +3,17 @@ include "root" {
   path = find_in_parent_folders()
 }
 
-# Override provider generation to include proxmox (instead of k8s providers)
+# Override provider generation to include proxmox + vault (k8s providers not needed)
 generate "providers" {
   path      = "providers.tf"
   if_exists = "overwrite_terragrunt"
   contents  = <<EOF
 terraform {
   required_providers {
+    vault = {
+      source  = "hashicorp/vault"
+      version = "~> 4.0"
+    }
     proxmox = {
       source  = "telmate/proxmox"
       version = "3.0.2-rc07"
@@ -26,6 +30,11 @@ variable "proxmox_pm_api_url" { type = string }
 variable "proxmox_pm_api_token_id" { type = string }
 variable "proxmox_pm_api_token_secret" { type = string }
 
+provider "vault" {
+  address          = "https://vault.viktorbarzin.me"
+  skip_child_token = true
+}
+
 provider "proxmox" {
   pm_api_url          = var.proxmox_pm_api_url
   pm_api_token_id     = var.proxmox_pm_api_token_id