From ace6ee59f96f64f7ceb2d4c7bc3b3f012878eb84 Mon Sep 17 00:00:00 2001
From: root <root@apply.wp-hsvc-3402.woodpecker.svc.cluster.local>
Date: Thu, 4 Jun 2026 14:39:12 +0000
Subject: [PATCH] Woodpecker CI deploy [CI SKIP]

---
 stacks/novelapp/providers.tf | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/stacks/novelapp/providers.tf b/stacks/novelapp/providers.tf
index 012af700..3d0bc2c6 100644
--- a/stacks/novelapp/providers.tf
+++ b/stacks/novelapp/providers.tf
@@ -13,6 +13,17 @@ terraform {
       source  = "goauthentik/authentik"
       version = "~> 2024.10"
     }
+    # kubectl (gavinbunney) — workaround for hashicorp/kubernetes
+    # `kubernetes_manifest` panics on Kyverno CRDs. See beads code-e2dp.
+    # Declared for all stacks but only used where opted-in.
+    kubectl = {
+      source  = "gavinbunney/kubectl"
+      version = "~> 1.14"
+    }
+    proxmox = {
+      source  = "telmate/proxmox"
+      version = "3.0.2-rc07"
+    }
   }
 }
 
@@ -35,3 +46,8 @@ provider "vault" {
   address          = "https://vault.viktorbarzin.me"
   skip_child_token = true
 }
+
+provider "kubectl" {
+  config_path      = var.kube_config_path
+  load_config_file = true
+}