From f296d0549a4f9ff859be784d479d5b21119593a7 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Mon, 3 Aug 2026 00:17:11 +1000 Subject: [PATCH] Add terraform-ipam CI ServiceAccount (#334) ServiceAccount `terraform-ipam` in the `woodpecker` namespace for the terraform-ipam pipeline. The Vault k8s auth role `woodpecker_terraform_ipam` (terraform-vault PR) binds it. Mirrors the other terraform-* CI ServiceAccounts and is wired into the woodpecker kustomization. https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/334 Co-authored-by: Ben Vincent Co-committed-by: Ben Vincent --- apps/base/woodpecker/kustomization.yaml | 1 + apps/base/woodpecker/serviceaccount_terraform_ipam.yaml | 6 ++++++ 2 files changed, 7 insertions(+) create mode 100644 apps/base/woodpecker/serviceaccount_terraform_ipam.yaml diff --git a/apps/base/woodpecker/kustomization.yaml b/apps/base/woodpecker/kustomization.yaml index 837cf67..63505d4 100644 --- a/apps/base/woodpecker/kustomization.yaml +++ b/apps/base/woodpecker/kustomization.yaml @@ -12,6 +12,7 @@ resources: - serviceaccount_terraform_authentik.yaml - serviceaccount_terraform_enc.yaml - serviceaccount_terraform_git.yaml + - serviceaccount_terraform_ipam.yaml - serviceaccount_terraform_prowlarr.yaml - serviceaccount_terraform_rancher.yaml - serviceaccount_terraform_radarr.yaml diff --git a/apps/base/woodpecker/serviceaccount_terraform_ipam.yaml b/apps/base/woodpecker/serviceaccount_terraform_ipam.yaml new file mode 100644 index 0000000..14a6816 --- /dev/null +++ b/apps/base/woodpecker/serviceaccount_terraform_ipam.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: terraform-ipam + namespace: woodpecker