ai-workspace-lab/xworkspace-console
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): 将 R2 endpoint 写入 backend.tf HCL 而非 -backend-config flag

Browse Source 
Terraform S3 backend 的 endpoints 块只能在 HCL 配置里指定，
无法通过 -backend-config 命令行参数传递（endpoints={s3=...} 和
endpoints.s3=... 两种写法均被 Terraform 拒绝）。

改为：Configure remote backend 步骤用非引号 heredoc 将
TF_STATE_ENDPOINT 展开写入 backend.tf，terraform init 只通过
-backend-config 传 bucket/key/region。

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Haitao Pan 2026-06-25 11:29:35 +08:00
parent b9ec7a2e45
commit b4c051e6c0
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
.github/workflows/deploy-ai-workspace-iac.yaml vendored
View File

@ -181,11 +181,16 @@ jobs:
- name: Configure remote backend (optional) - name: Configure remote backend (optional)
if: ${{ steps.vault.outputs.TF_STATE_BUCKET != '' }} if: ${{ steps.vault.outputs.TF_STATE_BUCKET != '' }}
working-directory: ${{ env.ENV_DIR }} working-directory: ${{ env.ENV_DIR }}
env:
TF_STATE_ENDPOINT: ${{ steps.vault.outputs.TF_STATE_ENDPOINT }}
run: | run: |
set -euo pipefail set -euo pipefail
cat > backend.tf <<'EOF' # endpoints 块只能在 HCL 里配置，无法通过 -backend-config flag 传递。
# 用非引号 heredoc 将 endpoint URL 直接写入 backend.tf。
cat > backend.tf <<EOF
terraform { terraform {
backend "s3" { backend "s3" {
endpoints = { s3 = "${TF_STATE_ENDPOINT}" }
skip_credentials_validation = true skip_credentials_validation = true
skip_region_validation = true skip_region_validation = true
skip_requesting_account_id = true skip_requesting_account_id = true
@ -212,7 +217,6 @@ jobs:
set -euo pipefail set -euo pipefail
if [ -n "${TF_STATE_BUCKET}" ]; then if [ -n "${TF_STATE_BUCKET}" ]; then
terraform init -input=false \ terraform init -input=false \
-backend-config="endpoints.s3=${TF_STATE_ENDPOINT}" \
-backend-config="bucket=${TF_STATE_BUCKET}" \ -backend-config="bucket=${TF_STATE_BUCKET}" \
-backend-config="key=ai-workspace/terraform.tfstate" \ -backend-config="key=ai-workspace/terraform.tfstate" \
-backend-config="region=${TF_STATE_REGION:-us-east-1}" -backend-config="region=${TF_STATE_REGION:-us-east-1}"