unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Add terraform-ipam CI Vault access #110

Merged
benvin merged 1 commits from benvin/terraform-ipam-access into master 2026-08-03 00:16:35 +10:00
Conversation 0 Commits 1 Files Changed 5
+43
unkinben commented 2026-08-03 00:10:42 +10:00
Owner
Copy Link
Copy Source

Grants the terraform-ipam Woodpecker pipeline its Vault footprint, mirroring the terraform-artifactapi set plus a KV read for provider tokens.

  • k8s auth role woodpecker_terraform_ipam (SA terraform-ipam, ns woodpecker)
  • consul secret backend role terraform-ipam + ACL policy writing infra/terraform/ipam/*
  • consul creds read policy
  • kv read policy for kv/service/terraform/ipam (netbox_token + kea_token)

The KV secret itself still needs seeding before the pipeline can auth to NetBox/Kea.

https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT

Grants the `terraform-ipam` Woodpecker pipeline its Vault footprint, mirroring the `terraform-artifactapi` set plus a KV read for provider tokens. - k8s auth role `woodpecker_terraform_ipam` (SA `terraform-ipam`, ns `woodpecker`) - consul secret backend role `terraform-ipam` + ACL policy writing `infra/terraform/ipam/*` - consul creds read policy - kv read policy for `kv/service/terraform/ipam` (`netbox_token` + `kea_token`) The KV secret itself still needs seeding before the pipeline can auth to NetBox/Kea. https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
unkinben added 1 commit 2026-08-03 00:10:42 +10:00
Add terraform-ipam CI Vault access
ci/woodpecker/pr/plan Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
dc234233e0 
Grant the terraform-ipam Woodpecker pipeline the same Vault footprint as the
other terraform-* runners, plus a KV read for its provider tokens:

- k8s auth role woodpecker_terraform_ipam (SA terraform-ipam / woodpecker ns)
- consul secret backend role + ACL policy writing infra/terraform/ipam/*
- consul creds read policy
- kv read policy for kv/service/terraform/ipam (netbox_token + kea_token)

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
benvin merged commit d61e985ef2 into master 2026-08-03 00:16:35 +10:00
benvin deleted branch benvin/terraform-ipam-access 2026-08-03 00:16:35 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/terraform-vault#110
Delete Branch "benvin/terraform-ipam-access"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?