unkinben
739de129e1
The new **terragrunt-enc** repo (single source of truth for encapi ENC data) runs its Terraform apply/plan in Woodpecker and authenticates to Vault via kubernetes auth. The Vault k8s role `woodpecker_terraform_enc` (terraform-vault PR #98) binds to a ServiceAccount named `terraform-enc` in the `woodpecker` namespace, which must exist for that auth to work. Changes: - Add `apps/base/woodpecker/serviceaccount_terraform_enc.yaml` (SA `terraform-enc` in namespace `woodpecker`). - Register it in the woodpecker kustomization. Reviewed-on: #274 Co-authored-by: Ben Vincent <ben@unkin.net> Co-committed-by: Ben Vincent <ben@unkin.net>
20 lines
561 B
YAML
20 lines
561 B
YAML
---
|
|
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- cnpg_cluster.yaml
|
|
- cnpg_pooler.yaml
|
|
- serviceaccount_terraform_artifactapi.yaml
|
|
- serviceaccount_terraform_authentik.yaml
|
|
- serviceaccount_terraform_enc.yaml
|
|
- serviceaccount_terraform_git.yaml
|
|
- serviceaccount_terraform_prowlarr.yaml
|
|
- serviceaccount_terraform_rancher.yaml
|
|
- serviceaccount_terraform_radarr.yaml
|
|
- serviceaccount_terraform_sonarr.yaml
|
|
- serviceaccount_terraform_vault.yaml
|
|
- vaultauth.yaml
|
|
- vaultstaticsecret.yaml
|