From a227e6778ed13c90b0466c0c24de9eb1c34105a6 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Wed, 15 Jul 2026 21:31:22 +1000 Subject: [PATCH] Add terraform-rancher woodpecker ServiceAccount CI ServiceAccount for the terraform-rancher pipeline; the pod's k8s token is what Vault binds to the woodpecker_terraform_rancher auth role (terraform-vault PR) for provider auth + Consul state. --- apps/base/woodpecker/kustomization.yaml | 1 + apps/base/woodpecker/serviceaccount_terraform_rancher.yaml | 6 ++++++ 2 files changed, 7 insertions(+) create mode 100644 apps/base/woodpecker/serviceaccount_terraform_rancher.yaml diff --git a/apps/base/woodpecker/kustomization.yaml b/apps/base/woodpecker/kustomization.yaml index b9c7e42..cbc24eb 100644 --- a/apps/base/woodpecker/kustomization.yaml +++ b/apps/base/woodpecker/kustomization.yaml @@ -10,6 +10,7 @@ resources: - serviceaccount_terraform_authentik.yaml - serviceaccount_terraform_git.yaml - serviceaccount_terraform_prowlarr.yaml + - serviceaccount_terraform_rancher.yaml - serviceaccount_terraform_radarr.yaml - serviceaccount_terraform_sonarr.yaml - serviceaccount_terraform_vault.yaml diff --git a/apps/base/woodpecker/serviceaccount_terraform_rancher.yaml b/apps/base/woodpecker/serviceaccount_terraform_rancher.yaml new file mode 100644 index 0000000..7c6640e --- /dev/null +++ b/apps/base/woodpecker/serviceaccount_terraform_rancher.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: terraform-rancher + namespace: woodpecker