tailscale-policy: runner needs auto_approve=True for non-interactive coily exec #141

New issue

Closed

opened 2026-05-26 19:34:23 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-05-26 19:34:23 +00:00

Owner

Problem

coily exec terraform-tailscale-policy action=apply failed at the approval prompt because auto_approve=False was set in the runner but coily exec runs non-interactively (Error: error asking for approval: EOF).

The sibling terraform_tailscale_devices.py already uses auto_approve=True; this one was tighter-than-the-pattern out of caution about ACL writes.

Change

scripts/k8s/terraform_tailscale_policy.py flips auto_approve to True to match the sibling convention. Safety still comes from the plan-then-apply two-step workflow Kai runs by hand (action=plan first, then action=apply only after reviewing).

Filed by Claude.

**Problem** `coily exec terraform-tailscale-policy action=apply` failed at the approval prompt because `auto_approve=False` was set in the runner but coily exec runs non-interactively (`Error: error asking for approval: EOF`). The sibling `terraform_tailscale_devices.py` already uses `auto_approve=True`; this one was tighter-than-the-pattern out of caution about ACL writes. **Change** `scripts/k8s/terraform_tailscale_policy.py` flips `auto_approve` to `True` to match the sibling convention. Safety still comes from the plan-then-apply two-step workflow Kai runs by hand (`action=plan` first, then `action=apply` only after reviewing). Filed by Claude.

coilysiren referenced this issue from a commit

2026-05-26 19:36:21 +00:00

fix: tailscale-policy runner auto_approve True

coilysiren closed this issue

2026-05-26 19:36:21 +00:00