openova/infra
e3mrah 901afa2a95
fix(infra/hetzner): add skip_region_validation=true to aws provider for Hetzner regions (#135) (#1344)
Fix #133 (PR #1343) swapped aminueza/minio for hashicorp/aws to bypass
DeleteBucketPolicy AccessDenied. Worked for the bucket creation API,
but the aws provider's region validator runs at provider-init time and
rejects Hetzner regions (fsn1/nbg1/hel1) before any S3 call:

    Error: invalid AWS Region: fsn1
    provider["registry.opentofu.org/hashicorp/aws"]

Reproduced on prov #19 (02c23fc20df90629) — failed at `tofu plan`
in 96s. Companion to the existing skip_credentials_validation +
skip_metadata_api_check + skip_requesting_account_id flags that
already disable the other AWS-specific preflight checks the Hetzner
endpoint can't satisfy.

skip_region_validation=true tells the provider not to compare the
region string against AWS's hardcoded region list; the region is
still passed through to the S3 SDK (used as the SigV4 signing region)
which is what Hetzner expects.

Per CLAUDE.md principle 16: same canonical seam as the other skip_*
flags in the same provider block — this is the missing fourth flag in
the standard "non-AWS S3-compatible backend" pattern.

Co-authored-by: e3mrah <1234567+e3mrah@users.noreply.github.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-11 04:12:50 +04:00
..
cloudflare-worker-leases feat(continuum): K-Cont-4 — Cloudflare Worker source + tofu wiring for lease witness (#1101) (#1159) 2026-05-09 08:01:44 +04:00
hetzner fix(infra/hetzner): add skip_region_validation=true to aws provider for Hetzner regions (#135) (#1344) 2026-05-11 04:12:50 +04:00