unkin/terraform-git
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add terraform-rancher repository #28

Merged
benvin merged 1 commits from benvin/terraform-rancher into main 2026-07-15 21:23:58 +10:00
Conversation 0 Commits 1 Files Changed 1
+18
unkinben commented 2026-07-15 21:18:02 +10:00
Owner
Copy Link
Copy Source

Why

Provisions the new terraform-rancher Gitea repo, which will manage Rancher's Authentik OIDC auth (keycloakoidc AuthConfig) declaratively via the rancher2 provider — mirroring the terraform-authentik pattern. First step of onboarding Rancher to Authentik SSO.

Change

  • Add config/git.unkin.net/unkin/repository/terraform-rancher.yaml (private: false, squash merge, main branch protection with pre-commit + plan checks).

Follow-ups (separate PRs)

  • terraform-rancher repo scaffold (rancher2 provider + keycloakoidc auth config).
  • terraform-vault: k8s auth role, approle role, consul secret backend role + state ACL, and vault policies for the runner.
  • argocd-apps: woodpecker ServiceAccount terraform-rancher.
  • Prereq: a Rancher admin API token seeded in Vault (needs Rancher admin).
## Why Provisions the new `terraform-rancher` Gitea repo, which will manage Rancher's Authentik OIDC auth (keycloakoidc AuthConfig) declaratively via the rancher2 provider — mirroring the terraform-authentik pattern. First step of onboarding Rancher to Authentik SSO. ## Change - Add `config/git.unkin.net/unkin/repository/terraform-rancher.yaml` (private: false, squash merge, main branch protection with pre-commit + plan checks). ## Follow-ups (separate PRs) - terraform-rancher repo scaffold (rancher2 provider + keycloakoidc auth config). - terraform-vault: k8s auth role, approle role, consul secret backend role + state ACL, and vault policies for the runner. - argocd-apps: woodpecker ServiceAccount `terraform-rancher`. - Prereq: a Rancher admin API token seeded in Vault (needs Rancher admin).
unkinben added 1 commit 2026-07-15 21:18:02 +10:00
Add terraform-rancher repository
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details
1055ea5c56 
Provision the terraform-rancher Gitea repo, which will manage Rancher's
Authentik OIDC auth (keycloakoidc AuthConfig) via the rancher2 provider,
mirroring the terraform-authentik pattern.
benvin merged commit 312603d714 into main 2026-07-15 21:23:58 +10:00
benvin deleted branch benvin/terraform-rancher 2026-07-15 21:23:58 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
Something is not working
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 invalid
Something is wrong
 question
More information is needed
 wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) repospawner (Repo Spawner) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-git#28
Delete Branch "benvin/terraform-rancher"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?