From a6d281dbc648765fac603e546034ef657ad57b60 Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sun, 15 Mar 2026 15:35:09 +0000
Subject: [PATCH] vaultwarden: upgrade to 1.35.4, use Recreate strategy

- Upgrade from 1.35.2 to 1.35.4 (fixes API key login userDecryptionOptions bug)
- Switch deployment strategy from RollingUpdate to Recreate (iSCSI PVC can't multi-attach)
---
 stacks/platform/modules/vaultwarden/main.tf | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/stacks/platform/modules/vaultwarden/main.tf b/stacks/platform/modules/vaultwarden/main.tf
index a7b5ca5a..cc4a9723 100644
--- a/stacks/platform/modules/vaultwarden/main.tf
+++ b/stacks/platform/modules/vaultwarden/main.tf
@@ -50,6 +50,9 @@ resource "kubernetes_deployment" "vaultwarden" {
   }
   spec {
     replicas = 1
+    strategy {
+      type = "Recreate"
+    }
     selector {
       match_labels = {
         app = "vaultwarden"
@@ -67,7 +70,7 @@ resource "kubernetes_deployment" "vaultwarden" {
       }
       spec {
         container {
-          image = "vaultwarden/server:1.35.2"
+          image = "vaultwarden/server:1.35.4"
           name  = "vaultwarden"
 
           resources {