Add a first version of CI

.woodpecker/helmfile.yaml

@@ -0,0 +1,41 @@
+when:
+  event:
+    - push
+matrix:
+  include:
+    - NAME: badhouseplants
+      ENV: badhouseplants
+steps:
+  test:
+    image: ghcr.io/helmfile/helmfile:latest
+    commands:
+      - kubectl get all -A
+    backend_options:
+      kubernetes:
+        serviceAccountName: woodpecker-ci
+        resources:
+          requests:
+            memory: 500Mi
+            cpu: 200m
+          limits:
+            memory: 500Mi
+            cpu: 200m
+  build:
+    image: ghcr.io/helmfile/helmfile:latest
+    commands:
+      - mkdir ~/.kube
+      - echo $K8S_CONFIG | base64 -d > ~/.kube/config
+      - helmfile -e "${ENV}" diff
+    secrets:
+      - k8s_config
+      - sops_age_key
+    backend_options:
+      kubernetes:
+        serviceAccountName: woodpecker-ci
+        resources:
+          requests:
+            memory: 500Mi
+            cpu: 200m
+          limits:
+            memory: 500Mi
+            cpu: 200m

charts/roles/templates/sa.yaml

@@ -1,5 +1,5 @@
 {{- if .Values.sa }}
-{{- range $sa := .Values.roles }}
+{{- range $sa := .Values.sa }}
 ---
 apiVersion: v1
 kind: ServiceAccount

values/badhouseplants/values.roles.yaml

@@ -13,11 +13,12 @@ bindings:
     kind: ClusterRoleBinding
     subjects:
       - kind: ServiceAccount
-        name: pipelines
+        namespace: pipelines
-        namespace: woodpecker-ci
+        name: woodpecker-ci
     roleRef:
       kind: ClusterRole
       name: cluster-admin
       apiGroup: rbac.authorization.k8s.io
 sa:
   - name: woodpecker-ci
+    namespace: pipelines