limes: fix credential name for limes-validation user in global regions

sapcc · Dec 17, 2024 · 1c44ddc · 1c44ddc
1 parent 1e80ac4
commit 1c44ddc
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/openstack/limes/templates/seed.yaml b/openstack/limes/templates/seed.yaml
@@ -68,7 +68,11 @@ spec:
               role:    service
         - name: limes-validation
           description: User account for pre-deployment validation in CI
-          password: {{ printf "%s/%s/limes/keystone-user/validation/password" $vbase $region | quote }}
+          {{- $vault_path := printf "%s/limes" $region }}
+          {{- if $is_global }}
+            {{- $vault_path = printf "%s/limes-global" (($region | contains "qa") | ternary $region "global") }}
+          {{- end }}
+          password: {{ printf "%s/%s/keystone-user/validation/password" $vbase $vault_path | quote }}
           role_assignments:
             - project: service
               role:    resource_viewer # needs to be able to run `limesctl project show`