From af25a4e809a565ccb6d1bbdc1d4975ed84e10bb1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?c=C4=83t=C4=83lin?= <catalin@roboces.dev>
Date: Thu, 2 Apr 2026 12:16:42 +0200
Subject: [PATCH] feat: add k8s/woodpecker

---
 k8s/argo-apps/woodpecker.yaml          | 57 ++++++++++++++++++++++++++
 k8s/services/argo/project-roboces.yaml |  3 ++
 2 files changed, 60 insertions(+)
 create mode 100644 k8s/argo-apps/woodpecker.yaml

diff --git a/k8s/argo-apps/woodpecker.yaml b/k8s/argo-apps/woodpecker.yaml
new file mode 100644
index 0000000..1068d21
--- /dev/null
+++ b/k8s/argo-apps/woodpecker.yaml
@@ -0,0 +1,57 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: woodpecker
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-options: Force=true,Replace=true
+spec:
+  destination:
+    name: ''
+    namespace: apps-roboces
+    server: https://kubernetes.default.svc
+  sources:
+    - chart: woodpecker
+      repoURL: ghcr.io/woodpecker-ci/helm
+      targetRevision: 3.5.1
+      helm:
+        valuesObject:
+          agent:
+            persistence:
+              storageClass: truenas-nfs-csi
+              accessModes:
+                - ReadWriteMany
+          server:
+            env:
+              WOODPECKER_ADMIN: 'woodpecker,admin,catalin'
+              WOODPECKER_HOST: 'https://ci.roboces.dev'
+              WOODPECKER_FORGEJO: "true"
+              WOODPECKER_FORGEJO_URL: "https://git.roboces.dev"
+              WOODPECKER_FORGEJO_CLIENT:
+                valueFrom:
+                  secretKeyRef:
+                    name: woodpecker
+                    key: WOODPECKER_FORGEJO_CLIENT
+              WOODPECKER_FORGEJO_SECRET:
+                valueFrom:
+                  secretKeyRef:
+                    name: woodpecker
+                    key: WOODPECKER_FORGEJO_SECRET
+            persistentVolume:
+              storageClass: truenas-nfs-csi
+              accessModes:
+                - ReadWriteMany
+            service:
+              type: LoadBalancer
+            ingress:
+              enabled: true
+              ingressClassName: traefik
+              hosts:
+                - host: ci.roboces.dev
+                  paths:
+                    - path: /
+              tls: []
+  project: roboces
+  syncPolicy:
+    automated: {}
diff --git a/k8s/services/argo/project-roboces.yaml b/k8s/services/argo/project-roboces.yaml
index 9f05403..9b6f364 100644
--- a/k8s/services/argo/project-roboces.yaml
+++ b/k8s/services/argo/project-roboces.yaml
@@ -8,8 +8,11 @@ spec:
   destinations:
     - namespace: apps-roboces
       server: https://kubernetes.default.svc
+    - namespace: woodpecker
+      server: https://kubernetes.default.svc
   sourceRepos:
     - https://git.roboces.dev/catalin/fukuops.git
     - code.forgejo.org/forgejo-helm
     - https://git.roboces.dev/catalin/huesoporro.git
     - https://gitlab.com/api/v4/projects/64552889/packages/helm/release
+    - ghcr.io/woodpecker-ci/helm