unkin/terraform-authentik
4
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

ci: move authentik_url ClusterIP override into woodpecker only
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details

Browse Source 
Keep local/default terragrunt runs pointed at the real public URL;
set the goauthentik#954 ClusterIP workaround via TF_VAR_authentik_url
in the CI environment blocks instead of as a terragrunt input.
This commit is contained in:
Unkin Agent
2026-08-23 23:20:32 +10:00
parent 218a640882
commit ae679ab587
3 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.woodpecker/apply.yaml
+2
View File
@@ -8,6 +8,8 @@ steps:
environment: environment:
VAULT_AUTH_METHOD: kubernetes VAULT_AUTH_METHOD: kubernetes
VAULT_VERSION: "1.20.0" VAULT_VERSION: "1.20.0"
# ClusterIP + sessionAffinity pins CI to one replica (goauthentik#954).
TF_VAR_authentik_url: http://authentik-server.authentik.svc.cluster.local
commands: commands:
- curl -fsSL -o /tmp/vault.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/vault/$${VAULT_VERSION}/vault_$${VAULT_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/vault.zip /tmp/ && install -m0755 /tmp/vault /usr/local/bin/vault && rm -f /tmp/vault.zip /tmp/vault /tmp/LICENSE.txt - curl -fsSL -o /tmp/vault.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/vault/$${VAULT_VERSION}/vault_$${VAULT_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/vault.zip /tmp/ && install -m0755 /tmp/vault /usr/local/bin/vault && rm -f /tmp/vault.zip /tmp/vault /tmp/LICENSE.txt
- make plan - make plan
.woodpecker/plan.yaml
+2
View File
@@ -7,6 +7,8 @@ steps:
environment: environment:
VAULT_AUTH_METHOD: kubernetes VAULT_AUTH_METHOD: kubernetes
VAULT_VERSION: "1.20.0" VAULT_VERSION: "1.20.0"
# ClusterIP + sessionAffinity pins CI to one replica (goauthentik#954).
TF_VAR_authentik_url: http://authentik-server.authentik.svc.cluster.local
commands: commands:
- curl -fsSL -o /tmp/vault.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/vault/$${VAULT_VERSION}/vault_$${VAULT_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/vault.zip /tmp/ && install -m0755 /tmp/vault /usr/local/bin/vault && rm -f /tmp/vault.zip /tmp/vault /tmp/LICENSE.txt - curl -fsSL -o /tmp/vault.zip "https://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/hashicorp-releases/vault/$${VAULT_VERSION}/vault_$${VAULT_VERSION}_linux_amd64.zip" && python3 -m zipfile -e /tmp/vault.zip /tmp/ && install -m0755 /tmp/vault /usr/local/bin/vault && rm -f /tmp/vault.zip /tmp/vault /tmp/LICENSE.txt
- make plan - make plan
environments/identity.k8s.syd1.au.unkin.net/terragrunt.hcl
-3
View File
@@ -17,9 +17,6 @@ terraform {
} }
inputs = { inputs = {
# ClusterIP + sessionAffinity pins CI to one replica (goauthentik#954); local
# runs must export TF_VAR_authentik_url=https://identity.k8s.syd1.au.unkin.net
authentik_url = "http://authentik-server.authentik.svc.cluster.local"
groups = local.config.groups groups = local.config.groups
permission_groups = local.config.permission_groups permission_groups = local.config.permission_groups
role_groups = local.config.role_groups role_groups = local.config.role_groups