unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 4 Actions Packages Projects Releases Wiki Activity

Add terraform-rancher woodpecker ServiceAccount (#257)

Browse Source 
## Why

The new terraform-rancher CI pipeline runs as a pod in the woodpecker namespace; its ServiceAccount token is what Vault binds to the `woodpecker_terraform_rancher` k8s auth role (see terraform-vault#86) for rancher2 provider auth + Consul state.

## Change

- Add `ServiceAccount/terraform-rancher` (woodpecker ns) and wire it into the woodpecker kustomization, mirroring the other terraform-* runner SAs.

## Validation

`kustomize build apps/base/woodpecker` renders it; pre-commit clean.

Reviewed-on: #257
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>
This commit was merged in pull request #257.
This commit is contained in:
Ben Vincent
2026-07-16 22:22:13 +10:00
committed by BenVincent
parent 421df740ea
commit b1b2112c66
2 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/base/woodpecker/kustomization.yaml
+1
View File
@@ -10,6 +10,7 @@ resources:
- serviceaccount_terraform_authentik.yaml
- serviceaccount_terraform_git.yaml
- serviceaccount_terraform_prowlarr.yaml
- serviceaccount_terraform_rancher.yaml
- serviceaccount_terraform_radarr.yaml
- serviceaccount_terraform_sonarr.yaml
- serviceaccount_terraform_vault.yaml