apps/base/woodpecker/vaultstaticsecret.yaml

@@ -15,3 +15,20 @@ spec:
   refreshAfter: 5m
   type: kv-v2
   vaultAuthRef: default
+---
+apiVersion: secrets.hashicorp.com/v1beta1
+kind: VaultStaticSecret
+metadata:
+  name: woodpecker-agent-secret
+  namespace: woodpecker
+spec:
+  destination:
+    create: true
+    name: woodpecker-agent-secret
+    overwrite: true
+  hmacSecretData: true
+  mount: kv
+  path: service/woodpecker/woodpecker-agent-secret
+  refreshAfter: 5m
+  type: kv-v2
+  vaultAuthRef: default