From 84151b818fc0e4a2e4b3528618b6506d913a0e3b Mon Sep 17 00:00:00 2001 From: Dave Arnold Date: Thu, 9 Jul 2026 16:06:47 -0400 Subject: [PATCH] fix(roles): use HTTPS source URLs for aws-iam-role modules Replace SSH-style git@ source with git::https:// for all three aws-iam-role module references (patch_role, patch_execution_role, patch_execproxy_role). HTTPS is required in environments where SSH agent forwarding is unavailable or not configured. --- roles.tf | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/roles.tf b/roles.tf index aeccc9d..ed2f6c5 100644 --- a/roles.tf +++ b/roles.tf @@ -1,6 +1,6 @@ # patch_role — assumed by patch_execution_role to perform EC2 operations in target accounts module "patch_role" { - source = "git@github.e.it.census.gov:terraform-modules/aws-iam-role.git?ref=tf-upgrade" + source = "git::https://github.e.it.census.gov/terraform-modules/aws-iam-role.git?ref=tf-upgrade" role_name = local.patch_role_name role_description = format("Assumed by %v to execute patching operations on EC2 instances in target accounts", local.patch_execution_role_name) @@ -12,7 +12,7 @@ module "patch_role" { # patch_execution_role — assumed by Lambda functions to orchestrate patching module "patch_execution_role" { - source = "git@github.e.it.census.gov:terraform-modules/aws-iam-role.git?ref=tf-upgrade" + source = "git::https://github.e.it.census.gov/terraform-modules/aws-iam-role.git?ref=tf-upgrade" role_name = local.patch_execution_role_name role_description = format("Assumed by Lambda functions to invoke patch operations, access SQS/RDS, and assume %v in target accounts", local.patch_role_name) @@ -26,7 +26,7 @@ module "patch_execution_role" { # This instance profile is used by the EC2 host running p4proxy to authenticate # to RDS via IAM and to assume patch_execution_role for orchestration tasks. module "patch_execproxy_role" { - source = "git@github.e.it.census.gov:terraform-modules/aws-iam-role.git?ref=tf-upgrade" + source = "git::https://github.e.it.census.gov/terraform-modules/aws-iam-role.git?ref=tf-upgrade" role_name = local.patch_execproxy_role_name role_description = format("Applied to the EC2 host running p4proxy; allows RDS IAM auth and assumption of %v", local.patch_execution_role_name)