alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 8 Actions Packages Projects Releases Wiki Activity

enable auth

Browse Source
This commit is contained in:
Alex Lebens
2025-03-03 11:08:11 -06:00
parent 8eee848700
commit 3c8ecb008d
2 changed files with 83 additions and 83 deletions
Download Patch File Download Diff File Expand all files Collapse all files

138
clusters/cl01tl/deployment/argocd/templates/external-secret.yaml
View File

@@ -1,70 +1,70 @@
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: argocd-oidc-secret name: argocd-oidc-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: argocd-oidc-secret app.kubernetes.io/name: argocd-oidc-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: server app.kubernetes.io/component: server
# app.kubernetes.io/part-of: argocd app.kubernetes.io/part-of: argocd
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# data: data:
# - secretKey: secret - secretKey: secret
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /authentik/oidc/argocd key: /authentik/oidc/argocd
# metadataPolicy: None metadataPolicy: None
# property: secret property: secret
# - secretKey: client - secretKey: client
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /authentik/oidc/argocd key: /authentik/oidc/argocd
# metadataPolicy: None metadataPolicy: None
# property: client property: client
# --- ---
# apiVersion: external-secrets.io/v1beta1 apiVersion: external-secrets.io/v1beta1
# kind: ExternalSecret kind: ExternalSecret
# metadata: metadata:
# name: argocd-gitea-repo-infrastructure-secret name: argocd-gitea-repo-infrastructure-secret
# namespace: {{ .Release.Namespace }} namespace: {{ .Release.Namespace }}
# labels: labels:
# app.kubernetes.io/name: argocd-gitea-repo-infrastructure-secret app.kubernetes.io/name: argocd-gitea-repo-infrastructure-secret
# app.kubernetes.io/instance: {{ .Release.Name }} app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/version: {{ .Chart.AppVersion }} app.kubernetes.io/version: {{ .Chart.AppVersion }}
# app.kubernetes.io/component: repo app.kubernetes.io/component: repo
# app.kubernetes.io/part-of: argocd app.kubernetes.io/part-of: argocd
# argocd.argoproj.io/secret-type: repository argocd.argoproj.io/secret-type: repository
# spec: spec:
# secretStoreRef: secretStoreRef:
# kind: ClusterSecretStore kind: ClusterSecretStore
# name: vault name: vault
# data: data:
# - secretKey: type - secretKey: type
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/argocd/credentials/repo/infrastructure key: /cl01tl/argocd/credentials/repo/infrastructure
# metadataPolicy: None metadataPolicy: None
# property: type property: type
# - secretKey: url - secretKey: url
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/argocd/credentials/repo/infrastructure key: /cl01tl/argocd/credentials/repo/infrastructure
# metadataPolicy: None metadataPolicy: None
# property: url property: url
# - secretKey: sshPrivateKey - secretKey: sshPrivateKey
# remoteRef: remoteRef:
# conversionStrategy: Default conversionStrategy: Default
# decodingStrategy: None decodingStrategy: None
# key: /cl01tl/argocd/credentials/repo/infrastructure key: /cl01tl/argocd/credentials/repo/infrastructure
# metadataPolicy: None metadataPolicy: None
# property: sshPrivateKey property: sshPrivateKey

28
clusters/cl01tl/deployment/argocd/values.yaml
View File

@@ -17,20 +17,20 @@ argo-cd:
timeout.reconciliation.jitter: 60s timeout.reconciliation.jitter: 60s
url: https://argocd.alexlebens.net url: https://argocd.alexlebens.net
statusbadge.enabled: true statusbadge.enabled: true
# dex.config: | dex.config: |
# connectors: connectors:
# - config: - config:
# issuer: https://auth-cl01tl.boreal-beaufort.ts.net/application/o/argocd/ issuer: https://auth.alexlebens.dev/application/o/argocd/
# clientID: $argocd-oidc-secret:client clientID: $argocd-oidc-secret:client
# clientSecret: $argocd-oidc-secret:secret clientSecret: $argocd-oidc-secret:secret
# insecureEnableGroups: true insecureEnableGroups: true
# scopes: scopes:
# - openid - openid
# - profile - profile
# - email - email
# name: authentik name: authentik
# type: oidc type: oidc
# id: authentik id: authentik
rbac: rbac:
policy.csv: | policy.csv: |
g, ArgoCD Admins, role:admin g, ArgoCD Admins, role:admin