unkin/argocd-apps
2
0
Fork 0
Code Issues 2 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Add terraform-rancher woodpecker ServiceAccount #257

Merged
benvin merged 1 commits from benvin/woodpecker-terraform-rancher into main 2026-07-16 22:22:14 +10:00
Conversation 0 Commits 1 Files Changed 2
+7
unkinben commented 2026-07-15 21:31:40 +10:00
Owner
Copy Link
Copy Source

Why

The new terraform-rancher CI pipeline runs as a pod in the woodpecker namespace; its ServiceAccount token is what Vault binds to the woodpecker_terraform_rancher k8s auth role (see terraform-vault#86) for rancher2 provider auth + Consul state.

Change

  • Add ServiceAccount/terraform-rancher (woodpecker ns) and wire it into the woodpecker kustomization, mirroring the other terraform-* runner SAs.

Validation

kustomize build apps/base/woodpecker renders it; pre-commit clean.

## Why The new terraform-rancher CI pipeline runs as a pod in the woodpecker namespace; its ServiceAccount token is what Vault binds to the `woodpecker_terraform_rancher` k8s auth role (see terraform-vault#86) for rancher2 provider auth + Consul state. ## Change - Add `ServiceAccount/terraform-rancher` (woodpecker ns) and wire it into the woodpecker kustomization, mirroring the other terraform-* runner SAs. ## Validation `kustomize build apps/base/woodpecker` renders it; pre-commit clean.
unkinben added 1 commit 2026-07-15 21:31:40 +10:00
Add terraform-rancher woodpecker ServiceAccount
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
a227e6778e 
CI ServiceAccount for the terraform-rancher pipeline; the pod's k8s token is
what Vault binds to the woodpecker_terraform_rancher auth role (terraform-vault
PR) for provider auth + Consul state.
benvin merged commit b1b2112c66 into main 2026-07-16 22:22:14 +10:00
benvin deleted branch benvin/woodpecker-terraform-rancher 2026-07-16 22:22:14 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#257
Delete Branch "benvin/woodpecker-terraform-rancher"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?