From 1d14b5ef028a58cd3633dbf34764ad9e2de6eadd Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 21 May 2026 23:55:37 +1000
Subject: [PATCH] feat: add apply workflow

---
 .woodpecker/apply.yaml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 .woodpecker/apply.yaml

diff --git a/.woodpecker/apply.yaml b/.woodpecker/apply.yaml
new file mode 100644
index 0000000..50dbb62
--- /dev/null
+++ b/.woodpecker/apply.yaml
@@ -0,0 +1,22 @@
+when:
+  - event: push
+    branch: master
+
+steps:
+  - name: apply
+    image: git.unkin.net/unkin/almalinux9-opentofu:20260308
+    environment:
+      VAULT_AUTH_METHOD: kubernetes
+    commands:
+      - dnf install vault -y
+      - make apply
+    backend_options:
+      kubernetes:
+        serviceAccountName: terraform-vault
+        resources:
+          requests:
+            memory: 512Mi
+            cpu: 1
+          limits:
+            memory: 2Gi
+            cpu: 2