unkin/terraform-vault
2
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Add auth and state access for terraform-rancher #86

Merged
benvin merged 1 commits from benvin/terraform-rancher into master 2026-07-15 21:37:46 +10:00
Conversation 0 Commits 1 Files Changed 6
+57

1 Commits

Author SHA1 Message Date
unkinben 7f4e79a7e2 Add auth and state access for terraform-rancher
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/plan Pipeline was successful
Details 
Mirrors the terraform-authentik runner setup (#78/#81/#82) for the new
terraform-rancher repo, which manages Rancher's Authentik OIDC auth via the
rancher2 provider.

- AppRole terraform_rancher + k8s auth role woodpecker_terraform_rancher.
- Consul secret backend role + ACL policy granting write to the
  infra/terraform/rancher/ state prefix.
- Vault policies: read the Rancher admin API token
  (kv/service/terraform/rancher) and the keycloakoidc client secret
  (kv/kubernetes/namespace/cattle-system/default/oauth-credentials), plus the
  consul_root state creds.
 2026-07-15 21:29:58 +10:00