From f14bcc4d2aa01ba462956901bcb4eef9c29d612e Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 19 Sep 2026 17:32:31 +1000 Subject: [PATCH] Add woodpecker ServiceAccount for jellyfin-plugin-sso CI (#479) The new `unkin/jellyfin-plugin-sso` fork is getting a Woodpecker pipeline, and its build step will set `serviceAccountName: jellyfin-plugin-sso`. Without the SA declared here the pipeline pods fail to schedule. - add a bare ServiceAccount `jellyfin-plugin-sso` in the `woodpecker` namespace - register it in the woodpecker base kustomization The step only builds .NET code, so no Vault kube-auth role or RBAC is needed. Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/479 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- apps/base/woodpecker/kustomization.yaml | 1 + .../base/woodpecker/serviceaccount_jellyfin_plugin_sso.yaml | 6 ++++++ 2 files changed, 7 insertions(+) create mode 100644 apps/base/woodpecker/serviceaccount_jellyfin_plugin_sso.yaml diff --git a/apps/base/woodpecker/kustomization.yaml b/apps/base/woodpecker/kustomization.yaml index 84ca268..627a499 100644 --- a/apps/base/woodpecker/kustomization.yaml +++ b/apps/base/woodpecker/kustomization.yaml @@ -15,6 +15,7 @@ resources: - serviceaccount_mediamark_ci.yaml - serviceaccount_plugin_docker_buildx.yaml - serviceaccount_jellyfin_ha_src.yaml + - serviceaccount_jellyfin_plugin_sso.yaml - serviceaccount_repospawner_ci.yaml - serviceaccount_terraform_artifactapi.yaml - serviceaccount_terraform_authentik.yaml diff --git a/apps/base/woodpecker/serviceaccount_jellyfin_plugin_sso.yaml b/apps/base/woodpecker/serviceaccount_jellyfin_plugin_sso.yaml new file mode 100644 index 0000000..6227542 --- /dev/null +++ b/apps/base/woodpecker/serviceaccount_jellyfin_plugin_sso.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: jellyfin-plugin-sso + namespace: woodpecker