Add terraform-rancher woodpecker ServiceAccount (#257)

## Why

The new terraform-rancher CI pipeline runs as a pod in the woodpecker namespace; its ServiceAccount token is what Vault binds to the `woodpecker_terraform_rancher` k8s auth role (see terraform-vault#86) for rancher2 provider auth + Consul state.

## Change

- Add `ServiceAccount/terraform-rancher` (woodpecker ns) and wire it into the woodpecker kustomization, mirroring the other terraform-* runner SAs.

## Validation

`kustomize build apps/base/woodpecker` renders it; pre-commit clean.

Reviewed-on: #257
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>

This commit was merged in pull request #257.

This commit is contained in:

Ben Vincent

2026-07-16 22:22:13 +10:00

committed by

BenVincent

parent 421df740ea

commit b1b2112c66

2 changed files with 7 additions and 0 deletions

									
										apps/base/woodpecker/serviceaccount_terraform_rancher.yaml
									
		+6
		
												View File
												
				@@ -0,0 +1,6 @@

				---

				apiVersion: v1

				kind: ServiceAccount

				metadata:

				  name: terraform-rancher

				  namespace: woodpecker