From 1ba6180e962942af4168d0d5e2c9be63cebdff02 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sun, 30 Aug 2026 14:21:42 +1000 Subject: [PATCH] woodpecker: add repospawner-ci ServiceAccount (#442) The new repospawner repo needs a Woodpecker CI pipeline, and every pipeline step must run under its own ServiceAccount in the woodpecker namespace. - Add `apps/base/woodpecker/serviceaccount_repospawner_ci.yaml` (bare SA `repospawner-ci`, ns woodpecker), mirroring the existing mediamark-ci SA. - Register it in the woodpecker kustomization resources list. Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/442 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- apps/base/woodpecker/kustomization.yaml | 1 + apps/base/woodpecker/serviceaccount_repospawner_ci.yaml | 6 ++++++ 2 files changed, 7 insertions(+) create mode 100644 apps/base/woodpecker/serviceaccount_repospawner_ci.yaml diff --git a/apps/base/woodpecker/kustomization.yaml b/apps/base/woodpecker/kustomization.yaml index 6e0df22..bbc2cad 100644 --- a/apps/base/woodpecker/kustomization.yaml +++ b/apps/base/woodpecker/kustomization.yaml @@ -14,6 +14,7 @@ resources: - serviceaccount_mediamark_ci.yaml - serviceaccount_plugin_docker_buildx.yaml - serviceaccount_jellyfin_ha_src.yaml + - serviceaccount_repospawner_ci.yaml - serviceaccount_terraform_artifactapi.yaml - serviceaccount_terraform_authentik.yaml - serviceaccount_terraform_enc.yaml diff --git a/apps/base/woodpecker/serviceaccount_repospawner_ci.yaml b/apps/base/woodpecker/serviceaccount_repospawner_ci.yaml new file mode 100644 index 0000000..d8d1bb0 --- /dev/null +++ b/apps/base/woodpecker/serviceaccount_repospawner_ci.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: repospawner-ci + namespace: woodpecker