Add auth and state access for terraform-authentik

- K8s auth role for Woodpecker CI (terraform-authentik SA) - AppRole for local runs - Consul secret backend role for state storage - Consul ACL policy for infra/terraform/authentik/ key prefix - Vault policy granting creds access to both auth methods
2026-06-28 00:58:12 +10:00
parent be9bd96cf3
commit 3e771b3783
5 changed files with 39 additions and 0 deletions
@@ -0,0 +1,11 @@
+---
+rules:
+  - path: "consul_root/au/syd1/creds/terraform-authentik"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - terraform_authentik
+  k8s/au/syd1:
+    - woodpecker_terraform_authentik