From 01d4e563f675674fd2a837a3f2eb1980cfc0be0d Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Fri, 24 Jul 2026 23:07:00 +1000 Subject: [PATCH] Add terraform-enc woodpecker ServiceAccount The new terragrunt-enc repo's Woodpecker CI authenticates to Vault via kubernetes auth, which binds to a ServiceAccount in the woodpecker namespace. - Add apps/base/woodpecker/serviceaccount_terraform_enc.yaml. - Register it in the woodpecker kustomization. --- apps/base/woodpecker/kustomization.yaml | 1 + apps/base/woodpecker/serviceaccount_terraform_enc.yaml | 6 ++++++ 2 files changed, 7 insertions(+) create mode 100644 apps/base/woodpecker/serviceaccount_terraform_enc.yaml diff --git a/apps/base/woodpecker/kustomization.yaml b/apps/base/woodpecker/kustomization.yaml index cbc24eb..0289803 100644 --- a/apps/base/woodpecker/kustomization.yaml +++ b/apps/base/woodpecker/kustomization.yaml @@ -8,6 +8,7 @@ resources: - cnpg_pooler.yaml - serviceaccount_terraform_artifactapi.yaml - serviceaccount_terraform_authentik.yaml + - serviceaccount_terraform_enc.yaml - serviceaccount_terraform_git.yaml - serviceaccount_terraform_prowlarr.yaml - serviceaccount_terraform_rancher.yaml diff --git a/apps/base/woodpecker/serviceaccount_terraform_enc.yaml b/apps/base/woodpecker/serviceaccount_terraform_enc.yaml new file mode 100644 index 0000000..364c649 --- /dev/null +++ b/apps/base/woodpecker/serviceaccount_terraform_enc.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: terraform-enc + namespace: woodpecker -- 2.47.3