Add auth and state access for terraform-authentik
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/plan Pipeline failed

- K8s auth role for Woodpecker CI (terraform-authentik SA)
- AppRole for local runs
- Consul secret backend role for state storage
- Consul ACL policy for infra/terraform/authentik/ key prefix
- Vault policy granting creds access to both auth methods
This commit is contained in:
2026-06-28 00:58:12 +10:00
parent be9bd96cf3
commit 7d9e76bf74
5 changed files with 39 additions and 0 deletions
@@ -0,0 +1,7 @@
key_prefix "infra/terraform/authentik/" {
policy = "write"
}
session_prefix "" {
policy = "write"
}