From 738a674a2f1c96b183bf158a64edb3915d3ec2d5 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Tue, 3 Mar 2026 23:34:57 +1100
Subject: [PATCH] feat: manage woodpecker-agent-secret in vault

- https://git.unkin.net/unkin/terraform-vault/pulls/60
---
 apps/base/woodpecker/vaultstaticsecret.yaml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/apps/base/woodpecker/vaultstaticsecret.yaml b/apps/base/woodpecker/vaultstaticsecret.yaml
index 763dd74..80f49bc 100644
--- a/apps/base/woodpecker/vaultstaticsecret.yaml
+++ b/apps/base/woodpecker/vaultstaticsecret.yaml
@@ -15,3 +15,20 @@ spec:
   refreshAfter: 5m
   type: kv-v2
   vaultAuthRef: default
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultStaticSecret
+metadata:
+  name: woodpecker-agent-secret
+  namespace: woodpecker
+spec:
+  destination:
+    create: true
+    name: woodpecker-agent-secret
+    overwrite: true
+  hmacSecretData: true
+  mount: kv
+  path: service/woodpecker/woodpecker-agent-secret
+  refreshAfter: 5m
+  type: kv-v2
+  vaultAuthRef: default
-- 
2.47.3