fix(infra): pin FileBrowser version to a release tag (PLAT-77)

The version is interpolated into the boot script. Reject anything that is not a vX.Y.Z tag.
This commit is contained in:
Adam Moussa 2026-09-28 16:40:23 -04:00
parent 7cb3f6510f
commit dadcf1c5ce
No known key found for this signature in database

View file

@ -14,6 +14,11 @@ variable "filebrowser_version" {
description = "Pinned FileBrowser release. Do not track releases/latest."
type = string
default = "v2.63.23"
validation {
condition = can(regex("^v[0-9]+\\.[0-9]+\\.[0-9]+$", var.filebrowser_version))
error_message = "filebrowser_version must look like v2.63.23."
}
}
variable "smb_password_secret_arn" {