Added the a13labs namespace to scaleway

terraform/iac/scaleway/iam.tf

@@ -96,3 +96,25 @@ resource "scaleway_iam_api_key" "gitea_app_api" {
   application_id = scaleway_iam_application.gitea_app.id
   description    = "gitea access API key"
 }
+
+resource "scaleway_iam_application" "ci_app" {
+  name = "ci_app"
+}
+
+resource "scaleway_iam_policy" "registry_full_access" {
+  name           = "CI Registry full access policy"
+  description    = "Gives CI app full access to container registry in project"
+  application_id = scaleway_iam_application.ci_app.id
+
+  rule {
+    project_ids = [data.scaleway_account_project.default.id]
+    permission_set_names = [
+      "RegistryFullAccess",
+    ]
+  }
+}
+
+resource "scaleway_iam_api_key" "ci_app_api" {
+  application_id = scaleway_iam_application.ci_app.id
+  description    = "CI app API key for registry push"
+}

terraform/iac/scaleway/outputs.tf

@@ -49,3 +49,20 @@ output "gitea_bucket_name" {
   description = "The name of the Gitea bucket."
   value       = scaleway_object_bucket.gitea.name
 }
+
+output "registry_endpoint" {
+  description = "The endpoint of the a13labs container registry."
+  value       = scaleway_registry_namespace.a13labs.endpoint
+}
+
+output "ci_app_api_access_key" {
+  description = "The access key for the CI app API."
+  value       = scaleway_iam_api_key.ci_app_api.access_key
+  sensitive   = true
+}
+
+output "ci_app_api_secret_key" {
+  description = "The secret key for the CI app API."
+  value       = scaleway_iam_api_key.ci_app_api.secret_key
+  sensitive   = true
+}

terraform/iac/scaleway/registry.tf

@@ -1,5 +1,5 @@
 resource "scaleway_registry_namespace" "a13labs" {
   name        = "a13labs"
   description = "A13Labs container registry"
-  is_public   = false
+  is_public   = true
 }