feat: add cdn to maps #375

Merged

xboxbedrock merged 2 commits from cdn-maps into main 2026-09-26 00:38:33 +00:00

Conversation 4 Commits 2 Files changed 2 +116

xboxbedrock commented 2026-09-26 00:32:04 +00:00

Member

Copy link

Provision CDN feature for maps

Provision CDN feature for maps

xboxbedrock added 1 commit 2026-09-26 00:32:04 +00:00

feat: add cdn to maps b82a2fafac

xboxbedrock requested reviews from thesuperRL, anish 2026-09-26 00:32:04 +00:00

scottylabs-bot added 1 commit 2026-09-26 00:35:02 +00:00

chore: regenerate tofu, schemas, CODEOWNERS [skip ci] 62c03c94c8

scottylabs-bot commented 2026-09-26 00:35:15 +00:00

Owner

Copy link

Ran Plan for project: cdn dir: tofu/cdn workspace: default

Show Output

Compiling governance-schema v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/375/default/crates/governance-schema)
   Compiling governance-core v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/375/default/crates/governance-core)
   Compiling governance-tfgen v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/375/default/crates/governance-tfgen)
   Compiling governance v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/375/default/crates/governance-cli)
    Finished `release` profile [optimized] target(s) in 7.92s


OpenTofu used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
+ create
! update in-place (current -> planned)

OpenTofu will perform the following actions:

  # garage_bucket.cdn_cmu-courses_courses will be updated in-place
! resource "garage_bucket" "cdn_cmu-courses_courses" {
        id                     = "ae979973d1e87e74b6ebfc2f6bf1be3849ec2cc31b2d6aef59cf0151653750cd"
        # (3 unchanged attributes hidden)
    }

  # garage_bucket.cdn_cmu-housing_housing will be updated in-place
! resource "garage_bucket" "cdn_cmu-housing_housing" {
        id                     = "fd591af159cb8f63f760588cdb89afcc6635ef96a8e6873057fe7136c06af9c8"
        # (3 unchanged attributes hidden)
    }

  # garage_bucket.cdn_cmu-maps_maps will be created
+ resource "garage_bucket" "cdn_cmu-maps_maps" {
+       global_alias           = "cdn-maps"
+       id                     = (known after apply)
+       website_enabled        = true
+       website_index_document = "index.html"
    }

  # garage_bucket.cdn_quest_quest will be updated in-place
! resource "garage_bucket" "cdn_quest_quest" {
        id                     = "64aa4193139e15e14a432e2a5016d034a9a746bbf2b6ff056aaa55b3caf20a46"
        # (3 unchanged attributes hidden)
    }

  # garage_bucket.cdn_uia_scottylabs_org will be updated in-place
! resource "garage_bucket" "cdn_uia_scottylabs_org" {
        id                     = "a0b94d4dab829fe60fdaaa6b8da20c473cfd7bd37faa2c67931ae158682e0629"
        # (3 unchanged attributes hidden)
    }

  # garage_bucket_permission.cdn_cmu-maps_maps will be created
+ resource "garage_bucket_permission" "cdn_cmu-maps_maps" {
+       access_key_id = (known after apply)
+       bucket_id     = (known after apply)
+       id            = (known after apply)
+       owner         = true
+       read          = true
+       write         = true
    }

  # garage_key.cdn_cmu-maps_maps will be created
+ resource "garage_key" "cdn_cmu-maps_maps" {
+       id                = (known after apply)
+       name              = "cdn-maps"
+       secret_access_key = (sensitive value)
    }

  # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_access_key_id will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_access_key_id" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/dev/CDN_ACCESS_KEY_ID"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_public_url will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_public_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/dev/CDN_PUBLIC_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_bucket will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_s3_bucket" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/dev/CDN_S3_BUCKET"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_endpoint will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_s3_endpoint" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/dev/CDN_S3_ENDPOINT"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_secret_access_key will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_secret_access_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/dev/CDN_SECRET_ACCESS_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_access_key_id will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_access_key_id" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/preview/CDN_ACCESS_KEY_ID"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_public_url will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_public_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/preview/CDN_PUBLIC_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_bucket will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_s3_bucket" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/preview/CDN_S3_BUCKET"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_endpoint will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_s3_endpoint" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/preview/CDN_S3_ENDPOINT"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_secret_access_key will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_secret_access_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/preview/CDN_SECRET_ACCESS_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_access_key_id will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_access_key_id" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/prod/CDN_ACCESS_KEY_ID"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_public_url will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_public_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/prod/CDN_PUBLIC_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_bucket will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_s3_bucket" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/prod/CDN_S3_BUCKET"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_endpoint will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_s3_endpoint" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/prod/CDN_S3_ENDPOINT"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_secret_access_key will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_secret_access_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/prod/CDN_SECRET_ACCESS_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_access_key_id will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_access_key_id" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/staging/CDN_ACCESS_KEY_ID"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_public_url will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_public_url" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/staging/CDN_PUBLIC_URL"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_bucket will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_s3_bucket" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/staging/CDN_S3_BUCKET"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_endpoint will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_s3_endpoint" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/staging/CDN_S3_ENDPOINT"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

  # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_secret_access_key will be created
+ resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_secret_access_key" {
+       data                = (sensitive value)
+       data_json           = (sensitive value)
+       data_json_wo        = (write-only attribute)
+       delete_all_versions = false
+       disable_read        = false
+       id                  = (known after apply)
+       metadata            = (known after apply)
+       mount               = "secret"
+       name                = "secretspec/maps/staging/CDN_SECRET_ACCESS_KEY"
+       path                = (known after apply)

+       custom_metadata (known after apply)
    }

Plan: 23 to add, 4 to change, 0 to destroy.

• ▶️ To apply this plan, comment:

  atlantis apply -p cdn
  

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p cdn
  

Plan: 23 to add, 4 to change, 0 to destroy.

---

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply
  

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock
  

Ran Plan for project: `cdn` dir: `tofu/cdn` workspace: `default` <details><summary>Show Output</summary> ```diff Compiling governance-schema v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/375/default/crates/governance-schema) Compiling governance-core v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/375/default/crates/governance-core) Compiling governance-tfgen v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/375/default/crates/governance-tfgen) Compiling governance v0.1.0 (/var/lib/atlantis/repos/ScottyLabs/governance/375/default/crates/governance-cli) Finished `release` profile [optimized] target(s) in 7.92s OpenTofu used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols: + create ! update in-place (current -> planned) OpenTofu will perform the following actions: # garage_bucket.cdn_cmu-courses_courses will be updated in-place ! resource "garage_bucket" "cdn_cmu-courses_courses" { id = "ae979973d1e87e74b6ebfc2f6bf1be3849ec2cc31b2d6aef59cf0151653750cd" # (3 unchanged attributes hidden) } # garage_bucket.cdn_cmu-housing_housing will be updated in-place ! resource "garage_bucket" "cdn_cmu-housing_housing" { id = "fd591af159cb8f63f760588cdb89afcc6635ef96a8e6873057fe7136c06af9c8" # (3 unchanged attributes hidden) } # garage_bucket.cdn_cmu-maps_maps will be created + resource "garage_bucket" "cdn_cmu-maps_maps" { + global_alias = "cdn-maps" + id = (known after apply) + website_enabled = true + website_index_document = "index.html" } # garage_bucket.cdn_quest_quest will be updated in-place ! resource "garage_bucket" "cdn_quest_quest" { id = "64aa4193139e15e14a432e2a5016d034a9a746bbf2b6ff056aaa55b3caf20a46" # (3 unchanged attributes hidden) } # garage_bucket.cdn_uia_scottylabs_org will be updated in-place ! resource "garage_bucket" "cdn_uia_scottylabs_org" { id = "a0b94d4dab829fe60fdaaa6b8da20c473cfd7bd37faa2c67931ae158682e0629" # (3 unchanged attributes hidden) } # garage_bucket_permission.cdn_cmu-maps_maps will be created + resource "garage_bucket_permission" "cdn_cmu-maps_maps" { + access_key_id = (known after apply) + bucket_id = (known after apply) + id = (known after apply) + owner = true + read = true + write = true } # garage_key.cdn_cmu-maps_maps will be created + resource "garage_key" "cdn_cmu-maps_maps" { + id = (known after apply) + name = "cdn-maps" + secret_access_key = (sensitive value) } # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_access_key_id will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_access_key_id" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/dev/CDN_ACCESS_KEY_ID" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_public_url will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_public_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/dev/CDN_PUBLIC_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_bucket will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_s3_bucket" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/dev/CDN_S3_BUCKET" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_endpoint will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_s3_endpoint" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/dev/CDN_S3_ENDPOINT" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_dev_cdn_secret_access_key will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_dev_cdn_secret_access_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/dev/CDN_SECRET_ACCESS_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_access_key_id will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_access_key_id" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/preview/CDN_ACCESS_KEY_ID" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_public_url will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_public_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/preview/CDN_PUBLIC_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_bucket will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_s3_bucket" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/preview/CDN_S3_BUCKET" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_endpoint will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_s3_endpoint" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/preview/CDN_S3_ENDPOINT" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_preview_cdn_secret_access_key will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_preview_cdn_secret_access_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/preview/CDN_SECRET_ACCESS_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_access_key_id will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_access_key_id" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/prod/CDN_ACCESS_KEY_ID" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_public_url will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_public_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/prod/CDN_PUBLIC_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_bucket will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_s3_bucket" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/prod/CDN_S3_BUCKET" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_endpoint will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_s3_endpoint" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/prod/CDN_S3_ENDPOINT" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_prod_cdn_secret_access_key will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_prod_cdn_secret_access_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/prod/CDN_SECRET_ACCESS_KEY" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_access_key_id will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_access_key_id" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/staging/CDN_ACCESS_KEY_ID" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_public_url will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_public_url" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/staging/CDN_PUBLIC_URL" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_bucket will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_s3_bucket" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/staging/CDN_S3_BUCKET" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_endpoint will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_s3_endpoint" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/staging/CDN_S3_ENDPOINT" + path = (known after apply) + custom_metadata (known after apply) } # vault_kv_secret_v2.cmu-maps_maps_staging_cdn_secret_access_key will be created + resource "vault_kv_secret_v2" "cmu-maps_maps_staging_cdn_secret_access_key" { + data = (sensitive value) + data_json = (sensitive value) + data_json_wo = (write-only attribute) + delete_all_versions = false + disable_read = false + id = (known after apply) + metadata = (known after apply) + mount = "secret" + name = "secretspec/maps/staging/CDN_SECRET_ACCESS_KEY" + path = (known after apply) + custom_metadata (known after apply) } Plan: 23 to add, 4 to change, 0 to destroy. ``` </details> * :arrow_forward: To **apply** this plan, comment: ```shell atlantis apply -p cdn ``` * :put_litter_in_its_place: To **delete** this plan and lock, click [here](https://atlantis.scottylabs.org/lock?id=ScottyLabs%252Fgovernance%252Ftofu%252Fcdn%252Fdefault%252Fcdn) * :repeat: To **plan** this project again, comment: ```shell atlantis plan -p cdn ``` Plan: 23 to add, 4 to change, 0 to destroy. --- * :fast_forward: To **apply** all unapplied plans from this Pull Request, comment: ```shell atlantis apply ``` * :put_litter_in_its_place: To **delete** all plans and locks from this Pull Request, comment: ```shell atlantis unlock ```

xboxbedrock commented 2026-09-26 00:35:49 +00:00

Author

Member

Copy link

atlantis apply

atlantis apply

scottylabs-bot commented 2026-09-26 00:35:52 +00:00

Owner

Copy link

Ran Apply for project: cdn dir: tofu/cdn workspace: default

Show Output

Finished `release` profile [optimized] target(s) in 0.05s

╷
│ Warning: Provider development overrides are in effect
│ 
│ The following provider development overrides are set in the CLI
│ configuration:
│  - svalabs/forgejo in /tmp/forgejo-provider
│ 
│ The behavior may therefore not match any released version of the provider
│ and applying changes may cause the state to become incompatible with
│ published releases.
╵
garage_key.cdn_cmu-maps_maps: Creating...
garage_bucket.cdn_cmu-maps_maps: Creating...
garage_bucket.cdn_cmu-housing_housing: Modifying... [id=fd591af159cb8f63f760588cdb89afcc6635ef96a8e6873057fe7136c06af9c8]
garage_bucket.cdn_cmu-courses_courses: Modifying... [id=ae979973d1e87e74b6ebfc2f6bf1be3849ec2cc31b2d6aef59cf0151653750cd]
garage_bucket.cdn_quest_quest: Modifying... [id=64aa4193139e15e14a432e2a5016d034a9a746bbf2b6ff056aaa55b3caf20a46]
garage_bucket.cdn_uia_scottylabs_org: Modifying... [id=a0b94d4dab829fe60fdaaa6b8da20c473cfd7bd37faa2c67931ae158682e0629]
garage_bucket.cdn_cmu-courses_courses: Modifications complete after 0s [id=ae979973d1e87e74b6ebfc2f6bf1be3849ec2cc31b2d6aef59cf0151653750cd]
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_public_url: Creating...
garage_bucket.cdn_cmu-housing_housing: Modifications complete after 0s [id=fd591af159cb8f63f760588cdb89afcc6635ef96a8e6873057fe7136c06af9c8]
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_bucket: Creating...
garage_bucket.cdn_uia_scottylabs_org: Modifications complete after 0s [id=a0b94d4dab829fe60fdaaa6b8da20c473cfd7bd37faa2c67931ae158682e0629]
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_bucket: Creating...
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_public_url: Creating...
garage_bucket.cdn_quest_quest: Modifications complete after 0s [id=64aa4193139e15e14a432e2a5016d034a9a746bbf2b6ff056aaa55b3caf20a46]
garage_key.cdn_cmu-maps_maps: Creation complete after 0s [id=GK4568fa439fe547476fc8303c]
garage_bucket.cdn_cmu-maps_maps: Creation complete after 0s [id=e67a474143f9de14904a063365fc83c78e8532d9416601f3d056a600f7060779]
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_bucket: Creating...
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_bucket: Creating...
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_endpoint: Creating...
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_public_url: Creating...
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_public_url: Creating...
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_endpoint: Creating...
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_bucket: Creation complete after 0s [id=secret/data/secretspec/maps/staging/CDN_S3_BUCKET]
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_bucket: Creation complete after 0s [id=secret/data/secretspec/maps/dev/CDN_S3_BUCKET]
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_endpoint: Creating...
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_endpoint: Creating...
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_public_url: Creation complete after 0s [id=secret/data/secretspec/maps/staging/CDN_PUBLIC_URL]
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_public_url: Creation complete after 0s [id=secret/data/secretspec/maps/preview/CDN_PUBLIC_URL]
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_endpoint: Creation complete after 0s [id=secret/data/secretspec/maps/preview/CDN_S3_ENDPOINT]
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_public_url: Creation complete after 0s [id=secret/data/secretspec/maps/prod/CDN_PUBLIC_URL]
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_bucket: Creation complete after 0s [id=secret/data/secretspec/maps/prod/CDN_S3_BUCKET]
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_access_key_id: Creating...
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_public_url: Creation complete after 0s [id=secret/data/secretspec/maps/dev/CDN_PUBLIC_URL]
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_endpoint: Creation complete after 0s [id=secret/data/secretspec/maps/prod/CDN_S3_ENDPOINT]
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_secret_access_key: Creating...
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_secret_access_key: Creating...
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_access_key_id: Creating...
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_secret_access_key: Creating...
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_access_key_id: Creating...
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_access_key_id: Creating...
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_bucket: Creation complete after 0s [id=secret/data/secretspec/maps/preview/CDN_S3_BUCKET]
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_secret_access_key: Creating...
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_endpoint: Creation complete after 0s [id=secret/data/secretspec/maps/dev/CDN_S3_ENDPOINT]
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_endpoint: Creation complete after 0s [id=secret/data/secretspec/maps/staging/CDN_S3_ENDPOINT]
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_access_key_id: Creation complete after 0s [id=secret/data/secretspec/maps/staging/CDN_ACCESS_KEY_ID]
garage_bucket_permission.cdn_cmu-maps_maps: Creating...
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_secret_access_key: Creation complete after 1s [id=secret/data/secretspec/maps/prod/CDN_SECRET_ACCESS_KEY]
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_access_key_id: Creation complete after 1s [id=secret/data/secretspec/maps/dev/CDN_ACCESS_KEY_ID]
vault_kv_secret_v2.cmu-maps_maps_staging_cdn_secret_access_key: Creation complete after 1s [id=secret/data/secretspec/maps/staging/CDN_SECRET_ACCESS_KEY]
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_access_key_id: Creation complete after 1s [id=secret/data/secretspec/maps/preview/CDN_ACCESS_KEY_ID]
vault_kv_secret_v2.cmu-maps_maps_dev_cdn_secret_access_key: Creation complete after 1s [id=secret/data/secretspec/maps/dev/CDN_SECRET_ACCESS_KEY]
vault_kv_secret_v2.cmu-maps_maps_preview_cdn_secret_access_key: Creation complete after 1s [id=secret/data/secretspec/maps/preview/CDN_SECRET_ACCESS_KEY]
vault_kv_secret_v2.cmu-maps_maps_prod_cdn_access_key_id: Creation complete after 1s [id=secret/data/secretspec/maps/prod/CDN_ACCESS_KEY_ID]
garage_bucket_permission.cdn_cmu-maps_maps: Creation complete after 1s [id=e67a474143f9de14904a063365fc83c78e8532d9416601f3d056a600f7060779/GK4568fa439fe547476fc8303c]

Apply complete! Resources: 23 added, 4 changed, 0 destroyed.

Ran Apply for project: `cdn` dir: `tofu/cdn` workspace: `default` <details><summary>Show Output</summary> ```diff Finished `release` profile [optimized] target(s) in 0.05s ╷ │ Warning: Provider development overrides are in effect │ │ The following provider development overrides are set in the CLI │ configuration: │ - svalabs/forgejo in /tmp/forgejo-provider │ │ The behavior may therefore not match any released version of the provider │ and applying changes may cause the state to become incompatible with │ published releases. ╵ garage_key.cdn_cmu-maps_maps: Creating... garage_bucket.cdn_cmu-maps_maps: Creating... garage_bucket.cdn_cmu-housing_housing: Modifying... [id=fd591af159cb8f63f760588cdb89afcc6635ef96a8e6873057fe7136c06af9c8] garage_bucket.cdn_cmu-courses_courses: Modifying... [id=ae979973d1e87e74b6ebfc2f6bf1be3849ec2cc31b2d6aef59cf0151653750cd] garage_bucket.cdn_quest_quest: Modifying... [id=64aa4193139e15e14a432e2a5016d034a9a746bbf2b6ff056aaa55b3caf20a46] garage_bucket.cdn_uia_scottylabs_org: Modifying... [id=a0b94d4dab829fe60fdaaa6b8da20c473cfd7bd37faa2c67931ae158682e0629] garage_bucket.cdn_cmu-courses_courses: Modifications complete after 0s [id=ae979973d1e87e74b6ebfc2f6bf1be3849ec2cc31b2d6aef59cf0151653750cd] vault_kv_secret_v2.cmu-maps_maps_staging_cdn_public_url: Creating... garage_bucket.cdn_cmu-housing_housing: Modifications complete after 0s [id=fd591af159cb8f63f760588cdb89afcc6635ef96a8e6873057fe7136c06af9c8] vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_bucket: Creating... garage_bucket.cdn_uia_scottylabs_org: Modifications complete after 0s [id=a0b94d4dab829fe60fdaaa6b8da20c473cfd7bd37faa2c67931ae158682e0629] vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_bucket: Creating... vault_kv_secret_v2.cmu-maps_maps_preview_cdn_public_url: Creating... garage_bucket.cdn_quest_quest: Modifications complete after 0s [id=64aa4193139e15e14a432e2a5016d034a9a746bbf2b6ff056aaa55b3caf20a46] garage_key.cdn_cmu-maps_maps: Creation complete after 0s [id=GK4568fa439fe547476fc8303c] garage_bucket.cdn_cmu-maps_maps: Creation complete after 0s [id=e67a474143f9de14904a063365fc83c78e8532d9416601f3d056a600f7060779] vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_bucket: Creating... vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_bucket: Creating... vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_endpoint: Creating... vault_kv_secret_v2.cmu-maps_maps_dev_cdn_public_url: Creating... vault_kv_secret_v2.cmu-maps_maps_prod_cdn_public_url: Creating... vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_endpoint: Creating... vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_bucket: Creation complete after 0s [id=secret/data/secretspec/maps/staging/CDN_S3_BUCKET] vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_bucket: Creation complete after 0s [id=secret/data/secretspec/maps/dev/CDN_S3_BUCKET] vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_endpoint: Creating... vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_endpoint: Creating... vault_kv_secret_v2.cmu-maps_maps_staging_cdn_public_url: Creation complete after 0s [id=secret/data/secretspec/maps/staging/CDN_PUBLIC_URL] vault_kv_secret_v2.cmu-maps_maps_preview_cdn_public_url: Creation complete after 0s [id=secret/data/secretspec/maps/preview/CDN_PUBLIC_URL] vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_endpoint: Creation complete after 0s [id=secret/data/secretspec/maps/preview/CDN_S3_ENDPOINT] vault_kv_secret_v2.cmu-maps_maps_prod_cdn_public_url: Creation complete after 0s [id=secret/data/secretspec/maps/prod/CDN_PUBLIC_URL] vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_bucket: Creation complete after 0s [id=secret/data/secretspec/maps/prod/CDN_S3_BUCKET] vault_kv_secret_v2.cmu-maps_maps_staging_cdn_access_key_id: Creating... vault_kv_secret_v2.cmu-maps_maps_dev_cdn_public_url: Creation complete after 0s [id=secret/data/secretspec/maps/dev/CDN_PUBLIC_URL] vault_kv_secret_v2.cmu-maps_maps_prod_cdn_s3_endpoint: Creation complete after 0s [id=secret/data/secretspec/maps/prod/CDN_S3_ENDPOINT] vault_kv_secret_v2.cmu-maps_maps_prod_cdn_secret_access_key: Creating... vault_kv_secret_v2.cmu-maps_maps_preview_cdn_secret_access_key: Creating... vault_kv_secret_v2.cmu-maps_maps_dev_cdn_access_key_id: Creating... vault_kv_secret_v2.cmu-maps_maps_staging_cdn_secret_access_key: Creating... vault_kv_secret_v2.cmu-maps_maps_preview_cdn_access_key_id: Creating... vault_kv_secret_v2.cmu-maps_maps_prod_cdn_access_key_id: Creating... vault_kv_secret_v2.cmu-maps_maps_preview_cdn_s3_bucket: Creation complete after 0s [id=secret/data/secretspec/maps/preview/CDN_S3_BUCKET] vault_kv_secret_v2.cmu-maps_maps_dev_cdn_secret_access_key: Creating... vault_kv_secret_v2.cmu-maps_maps_dev_cdn_s3_endpoint: Creation complete after 0s [id=secret/data/secretspec/maps/dev/CDN_S3_ENDPOINT] vault_kv_secret_v2.cmu-maps_maps_staging_cdn_s3_endpoint: Creation complete after 0s [id=secret/data/secretspec/maps/staging/CDN_S3_ENDPOINT] vault_kv_secret_v2.cmu-maps_maps_staging_cdn_access_key_id: Creation complete after 0s [id=secret/data/secretspec/maps/staging/CDN_ACCESS_KEY_ID] garage_bucket_permission.cdn_cmu-maps_maps: Creating... vault_kv_secret_v2.cmu-maps_maps_prod_cdn_secret_access_key: Creation complete after 1s [id=secret/data/secretspec/maps/prod/CDN_SECRET_ACCESS_KEY] vault_kv_secret_v2.cmu-maps_maps_dev_cdn_access_key_id: Creation complete after 1s [id=secret/data/secretspec/maps/dev/CDN_ACCESS_KEY_ID] vault_kv_secret_v2.cmu-maps_maps_staging_cdn_secret_access_key: Creation complete after 1s [id=secret/data/secretspec/maps/staging/CDN_SECRET_ACCESS_KEY] vault_kv_secret_v2.cmu-maps_maps_preview_cdn_access_key_id: Creation complete after 1s [id=secret/data/secretspec/maps/preview/CDN_ACCESS_KEY_ID] vault_kv_secret_v2.cmu-maps_maps_dev_cdn_secret_access_key: Creation complete after 1s [id=secret/data/secretspec/maps/dev/CDN_SECRET_ACCESS_KEY] vault_kv_secret_v2.cmu-maps_maps_preview_cdn_secret_access_key: Creation complete after 1s [id=secret/data/secretspec/maps/preview/CDN_SECRET_ACCESS_KEY] vault_kv_secret_v2.cmu-maps_maps_prod_cdn_access_key_id: Creation complete after 1s [id=secret/data/secretspec/maps/prod/CDN_ACCESS_KEY_ID] garage_bucket_permission.cdn_cmu-maps_maps: Creation complete after 1s [id=e67a474143f9de14904a063365fc83c78e8532d9416601f3d056a600f7060779/GK4568fa439fe547476fc8303c] Apply complete! Resources: 23 added, 4 changed, 0 destroyed. ``` </details>

xboxbedrock merged commit a93eaf2a86 into main 2026-09-26 00:38:33 +00:00

xboxbedrock deleted branch cdn-maps 2026-09-26 00:38:33 +00:00

xboxbedrock referenced this pull request from a commit 2026-09-26 00:38:34 +00:00

feat: add cdn to maps (#375)

scottylabs-bot commented 2026-09-26 00:38:35 +00:00

Owner

Copy link

Locks and plans deleted for the projects and workspaces modified in this pull request:

• dir: tofu/cdn workspace: default

Locks and plans deleted for the projects and workspaces modified in this pull request: - dir: `tofu/cdn` workspace: `default`

brightz referenced this pull request from a commit 2026-09-26 22:03:28 +00:00

feat: add cdn to maps (#375)

Sign in to join this conversation.

Reviewers

No reviewers

anish

thesuperRL

Labels

Clear labels   

needs/linking

Issue is pending on account linking

  

needs/docs

Must have documentation written

  

needs/research

Discuss the ideal implementation with the tech lead

  

needs/upstream

Needs a contribution to an upstream project

  

type/bug

Something not working as intended

  

type/external

Lives outside of code

  

type/feature

New functionality

  

type/refactor

Improving existing code

  

urgency

high

This is currently causing issues

  

urgency

immediate

This is making a project or feature unusable

  

urgency

low

This can happen whenever

  

urgency

medium

This is expected to cause issues soon

No labels

needs/linking

needs/docs

needs/research

needs/upstream

type/bug

type/external

type/feature

type/refactor

urgency

high

urgency

immediate

urgency

low

urgency

medium

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

ScottyLabs/governance!375

No description provided.