#!/bin/bash
set -euo pipefail
ZARYA_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
source "${ZARYA_DIR}/lib/common.sh"
unseal_vault
run_isolated bash -c "cd '${REPO_ROOT}/tofu' && tofu apply $*"