From 8503a4b7a4a40eaad8c0ace925854ab03b07d428 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Fri, 14 Aug 2026 00:29:34 +1000 Subject: [PATCH] woodpecker: add ghp CI ServiceAccount (#364) ## Why The ghp fork (`unkin/ghp`) now has `.woodpecker` pipelines whose steps run under `serviceAccountName: ghp`. Without this ServiceAccount in the `woodpecker` namespace, pods fail to schedule (`error looking up service account woodpecker/ghp: serviceaccount "ghp" not found`), which fails the required `ci/woodpecker/pr/build` status. ## Change - Add `apps/base/woodpecker/serviceaccount_ghp.yaml` (ServiceAccount `ghp` in namespace `woodpecker`), mirroring the existing per-project SAs (e.g. `jellyfin-ha-src`). - Register it in `apps/base/woodpecker/kustomization.yaml`. Unblocks the ghp CI onboarding for unkin/ghp#1. Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/364 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- apps/base/woodpecker/kustomization.yaml | 1 + apps/base/woodpecker/serviceaccount_ghp.yaml | 6 ++++++ 2 files changed, 7 insertions(+) create mode 100644 apps/base/woodpecker/serviceaccount_ghp.yaml diff --git a/apps/base/woodpecker/kustomization.yaml b/apps/base/woodpecker/kustomization.yaml index baa4838..6f79eb6 100644 --- a/apps/base/woodpecker/kustomization.yaml +++ b/apps/base/woodpecker/kustomization.yaml @@ -8,6 +8,7 @@ resources: - cnpg_backup.yaml - cnpg_pooler.yaml - serviceaccount_autobackup_operator_ci.yaml + - serviceaccount_ghp.yaml - serviceaccount_kea_operator_ci.yaml - serviceaccount_jellyfin_ha_src.yaml - serviceaccount_terraform_artifactapi.yaml diff --git a/apps/base/woodpecker/serviceaccount_ghp.yaml b/apps/base/woodpecker/serviceaccount_ghp.yaml new file mode 100644 index 0000000..a3c8b3a --- /dev/null +++ b/apps/base/woodpecker/serviceaccount_ghp.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: ghp + namespace: woodpecker