unkin-agent
4f3036218d
ci/woodpecker/push/apply Pipeline was successful
The new terraform-binarylane repo provisions the BinaryLane mail gateways from Woodpecker and needs an identity, state storage, its provider token and somewhere to keep the WireGuard keypairs it generates. - add the terraform_binarylane approle and woodpecker_terraform_binarylane k8s role - add the terraform-binarylane consul role with write on infra/terraform/binarylane/ - grant the runner read on kv/service/terraform/binarylane (API token) - grant the runner create/read/update/delete on kv/service/wireguard/binarylane/* - let the agents approle seed kv/service/terraform/binarylane (no delete) Needs the terraform-binarylane woodpecker ServiceAccount in argocd-apps before CI can auth. Reviewed-on: #164 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>