From 32da5410bc6c47f762097edc01075b7a55d6c9d7 Mon Sep 17 00:00:00 2001
From: Alexandre Pires <c.alexandre.pires@alexpires.me>
Date: Sun, 5 Jul 2026 23:22:32 +0200
Subject: [PATCH] Added the a13labs namespace to scaleway

---
 terraform/iac/scaleway/iam.tf      | 22 ++++++++++++++++++++++
 terraform/iac/scaleway/outputs.tf  | 17 +++++++++++++++++
 terraform/iac/scaleway/registry.tf |  2 +-
 3 files changed, 40 insertions(+), 1 deletion(-)

diff --git a/terraform/iac/scaleway/iam.tf b/terraform/iac/scaleway/iam.tf
index 1be7fb8..fb3d510 100644
--- a/terraform/iac/scaleway/iam.tf
+++ b/terraform/iac/scaleway/iam.tf
@@ -96,3 +96,25 @@ resource "scaleway_iam_api_key" "gitea_app_api" {
   application_id = scaleway_iam_application.gitea_app.id
   description    = "gitea access API key"
 }
+
+resource "scaleway_iam_application" "ci_app" {
+  name = "ci_app"
+}
+
+resource "scaleway_iam_policy" "registry_full_access" {
+  name           = "CI Registry full access policy"
+  description    = "Gives CI app full access to container registry in project"
+  application_id = scaleway_iam_application.ci_app.id
+
+  rule {
+    project_ids = [data.scaleway_account_project.default.id]
+    permission_set_names = [
+      "RegistryFullAccess",
+    ]
+  }
+}
+
+resource "scaleway_iam_api_key" "ci_app_api" {
+  application_id = scaleway_iam_application.ci_app.id
+  description    = "CI app API key for registry push"
+}
diff --git a/terraform/iac/scaleway/outputs.tf b/terraform/iac/scaleway/outputs.tf
index 45f04e6..46556a6 100644
--- a/terraform/iac/scaleway/outputs.tf
+++ b/terraform/iac/scaleway/outputs.tf
@@ -49,3 +49,20 @@ output "gitea_bucket_name" {
   description = "The name of the Gitea bucket."
   value       = scaleway_object_bucket.gitea.name
 }
+
+output "registry_endpoint" {
+  description = "The endpoint of the a13labs container registry."
+  value       = scaleway_registry_namespace.a13labs.endpoint
+}
+
+output "ci_app_api_access_key" {
+  description = "The access key for the CI app API."
+  value       = scaleway_iam_api_key.ci_app_api.access_key
+  sensitive   = true
+}
+
+output "ci_app_api_secret_key" {
+  description = "The secret key for the CI app API."
+  value       = scaleway_iam_api_key.ci_app_api.secret_key
+  sensitive   = true
+}
diff --git a/terraform/iac/scaleway/registry.tf b/terraform/iac/scaleway/registry.tf
index 292205a..2c46229 100644
--- a/terraform/iac/scaleway/registry.tf
+++ b/terraform/iac/scaleway/registry.tf
@@ -1,5 +1,5 @@
 resource "scaleway_registry_namespace" "a13labs" {
   name        = "a13labs"
   description = "A13Labs container registry"
-  is_public   = false
+  is_public   = true
 }