Add terraform-ipam CI Vault access #110

Merged
benvin merged 1 commits from benvin/terraform-ipam-access into master 2026-08-03 00:16:35 +10:00

1 Commits

Author SHA1 Message Date
unkinben dc234233e0 Add terraform-ipam CI Vault access
ci/woodpecker/pr/plan Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
Grant the terraform-ipam Woodpecker pipeline the same Vault footprint as the
other terraform-* runners, plus a KV read for its provider tokens:

- k8s auth role woodpecker_terraform_ipam (SA terraform-ipam / woodpecker ns)
- consul secret backend role + ACL policy writing infra/terraform/ipam/*
- consul creds read policy
- kv read policy for kv/service/terraform/ipam (netbox_token + kea_token)

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
2026-08-03 00:10:31 +10:00