From 7d7cbde0bfb8608eae60b77e0ea12d241236ede1 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Fri, 3 Jul 2026 15:01:10 +1000
Subject: [PATCH 1/2] Align release pipeline with the standard mechanism

Match terraform-provider-litellmvaultsecret's release flow so both providers
publish the same way.

- Point the upload at the reachable artifactapi host
  (artifactapi.k8s.syd1.au.unkin.net) instead of the unresolvable artifactapi3
- Add kubernetes backend options (serviceAccount + resource requests/limits) to
  the package and upload steps
- Make the upload step explicitly depend_on the package step
---
 .woodpecker/release.yml | 23 ++++++++++++++++++++++-
 1 file changed, 22 insertions(+), 1 deletion(-)

diff --git a/.woodpecker/release.yml b/.woodpecker/release.yml
index 471f34b..9612844 100644
--- a/.woodpecker/release.yml
+++ b/.woodpecker/release.yml
@@ -6,6 +6,16 @@ steps:
     image: git.unkin.net/unkin/almalinux9-gobuilder:20260606
     commands:
       - make package VERSION=${CI_COMMIT_TAG}
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
 
   - name: upload
     image: git.unkin.net/unkin/almalinux9-base:20260606
@@ -14,6 +24,17 @@ steps:
         VERSION=$$(echo ${CI_COMMIT_TAG} | sed 's/^v//')
         FILE="terraform-provider-artifactapi_$${VERSION}_linux_amd64.zip"
         curl -f -X PUT \
-          "https://artifactapi3.k8s.syd1.au.unkin.net/api/v2/remotes/terraform-unkin/files/unkin/artifactapi/$${FILE}" \
+          "https://artifactapi.k8s.syd1.au.unkin.net/api/v2/remotes/terraform-unkin/files/unkin/artifactapi/$${FILE}" \
           -H "Content-Type: application/zip" \
           --data-binary @"$${FILE}"
+    depends_on: [package]
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 128Mi
+            cpu: 100m
+          limits:
+            memory: 512Mi
+            cpu: 500m
-- 
2.47.3


From f82a9900a938239844a55de8a218bfaa417c6218 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Fri, 3 Jul 2026 15:05:00 +1000
Subject: [PATCH 2/2] Add kubernetes backend options to build and test steps

Give the build/lint/test CI steps the same serviceAccount + resource
requests/limits as the pre-commit and release steps, so every step on the k8s
woodpecker backend is scheduled with bounded resources.
---
 .woodpecker/build.yml | 10 ++++++++++
 .woodpecker/test.yml  | 20 ++++++++++++++++++++
 2 files changed, 30 insertions(+)

diff --git a/.woodpecker/build.yml b/.woodpecker/build.yml
index 9c181f7..74123b5 100644
--- a/.woodpecker/build.yml
+++ b/.woodpecker/build.yml
@@ -6,3 +6,13 @@ steps:
     image: golang:1.25
     commands:
       - make build
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
diff --git a/.woodpecker/test.yml b/.woodpecker/test.yml
index bb94e07..8e81e45 100644
--- a/.woodpecker/test.yml
+++ b/.woodpecker/test.yml
@@ -6,8 +6,28 @@ steps:
     image: golang:1.25
     commands:
       - make lint
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
 
   - name: test
     image: golang:1.25
     commands:
       - make test
+    backend_options:
+      kubernetes:
+        serviceAccountName: default
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2
-- 
2.47.3