add woodpecker ci

2026-04-02 22:18:27 +02:00
parent 0ce1a797fc
commit 670312d75b
9 changed files with 260 additions and 0 deletions
--- a/vault/kubernetes-roles/woodpecker.yaml
+++ b/vault/kubernetes-roles/woodpecker.yaml
@@ -0,0 +1,6 @@
+bound_service_account_names:
+  - woodpecker-secret
+bound_service_account_namespaces:
+  - woodpecker
+token_policies:
+  - woodpecker
--- a/vault/policy/woodpecker.hcl
+++ b/vault/policy/woodpecker.hcl
@@ -0,0 +1,7 @@
+path "secret/data/woodpecker" {
+    capabilities = ["read"]
+}
+
+path "secret/data/container-registry" {
+    capabilities = ["read"]
+}