Secret for Argo

gitops-kaisers-info/templates/argo-cd.yaml

@@ -38,4 +38,18 @@ spec:
                 - "argo-cd.kaisers.info"
           
           extraArgs:
-            - --insecure
+            - --insecure
+
+          config:
+            oidc.config: |
+              name: Authentik
+              issuer: https://authentik.kaisers.info/TENANT_ID/v2.0
+              clientID: $oidc.auth0.clientID
+              clientSecret: $oidc.auth0.clientSecret
+          #    requestedIDTokenClaims:
+          #      groups:
+          #        essential: true
+          #   requestedScopes:
+          #     - openid
+          #     - profile
+          #     - email

gitops-kaisers-info/templates/argocd-secret-sealed.yaml

@@ -0,0 +1,22 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    argocd.argoproj.io/sync-wave: "-1"
+  name: argocd-secret
+  namespace: argocd
+  labels:
+    app.kubernetes.io/name: argocd-secret
+    app.kubernetes.io/part-of: argocd
+spec:
+  encryptedData:
+    oidc.auth0.clientID: AgBT4gvpzid8nuM82FkXV81d9+kgopIQ7lLU2rcNK/wxLXNYLEX7wkLGEmigaKf8oxTWZIYmrbivRh58wtwrUDbbjl6Fc52sXPsAMfAgBCbx2skKZ/4ZUApAKwIwtQ15SyGnGOwSiZMLhIMiF/N2zwxKVn59u/8/wFIohIIOOB6xAkpaQOfx3hwsMXh8yPRfqNHFi+eSy/Rd9ta/dG1OI8+UtgG83I5JcEQ26MIsyOLjOoCI0tmPxAcRMp6EqUusLRDaTUGiXx0a+7LII20lFBMyw4FHwraIQrcjKjI/BSG4GLTHGO5KzKG3L2S37xnU+TW4/QSdI5hCsBlbMYV3u6CXwiTwqLIitU9/TXhuS1TBexXcoe3coPaBs27ccizRv0KkHxukgxjR1yqbjRPIWtREY8a4GN5uIJcrJNz3/Fj1uYWY9+gSoyDf0As+ok0J21poMZF8UhKUq5FzkNG4TppzHCNlG6hcRDhuQXW24OJCNvsCtpEbzsM9Ux86Q93+jo9hdeJLcqJd+2kzFjOKzONMLkavRxs0VX6DC+7bJ5VTKudiu0bAxMBr8VvJMPWqgzXNwrmheh1tY9ND6LEA4drjS0+TPdNlTLyCTJLTXFUaEEHoCyCP2lXUOl2GE1mJMm1FsmHxCjLYvAsr4eqZkPbn2dXvTmbr8eejSuTRtWkU6x40feqz0sQXNuppe+4GaoOvYFMpPfBtnR3YEKurFE85MiQq5PjukqeOhfPiooM1PQx0
+    oidc.auth0.clientSecret: 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
+  template:
+    data: null
+    metadata:
+      creationTimestamp: null
+      name: argocd-secret
+      namespace: argocd
+    type: Opaque
+