Terraform apply
    → manually copy RDS endpoint
    → paste into Helm values.yaml
    → commit, push, wait for ArgoCD

# Provision an RDS instance
unit "aws_rds_instance" "db" {
  engine         = "postgres"
  instance_class = "db.t3.micro"
  username       = "admin"
  password       = secret("aws_secrets_manager", "prod/db/password")
}

# Deploy a Helm chart — db endpoint flows in automatically
deploy "helm" "backend" {
  chart     = "my-backend"
  namespace = "backend"
  values = {
    database = {
      host = ~unit.aws_rds_instance.db.endpoint  # Pending<string>
    }
  }
}

# Export the endpoint for other stacks
output "db_endpoint" {
  value       = ~unit.aws_rds_instance.db.endpoint
  description = "RDS connection endpoint"
}