feat: manage woodpecker-agent-secret in vault

- unkin/terraform-vault#60
2026-03-03 23:34:57 +11:00 · 2026-03-03 23:34:57 +11:00 · 738a674a2f
commit 738a674a2f
parent f9a8dca060
1 changed files with 17 additions and 0 deletions
--- a/apps/base/woodpecker/vaultstaticsecret.yaml
+++ b/apps/base/woodpecker/vaultstaticsecret.yaml
@ -15,3 +15,20 @@ spec:
  refreshAfter: 5m
  type: kv-v2
  vaultAuthRef: default
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultStaticSecret
+metadata:
+  name: woodpecker-agent-secret
+  namespace: woodpecker
+spec:
+  destination:
+    create: true
+    name: woodpecker-agent-secret
+    overwrite: true
+  hmacSecretData: true
+  mount: kv
+  path: service/woodpecker/woodpecker-agent-secret
+  refreshAfter: 5m
+  type: kv-v2
+  vaultAuthRef: default