enable oidc support for argocd

2026-01-12 19:38:18 +00:00
parent 8023a0232c
commit 36efafb2aa
3 changed files with 69 additions and 0 deletions
--- a/apps/argocd-config/external-secret.yaml
+++ b/apps/argocd-config/external-secret.yaml
@@ -0,0 +1,27 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: argocd-oidc-secret-source
+  namespace: argocd
+spec:
+  refreshInterval: 1m
+  secretStoreRef:
+    name: vault-backend
+    kind: ClusterSecretStore
+  target:
+    name: argocd-oidc-secret
+    template:
+      engineVersion: v2
+      data:
+        # ArgoCD erwartet diese Keys für OIDC Config
+        oidc.authentik.clientId: "{{ .client_id }}"
+        oidc.authentik.clientSecret: "{{ .client_secret }}"
+  data:
+    - secretKey: client_id
+      remoteRef:
+        key: secret/apps/argocd
+        property: client_id
+    - secretKey: client_secret
+      remoteRef:
+        key: secret/apps/argocd
+        property: client_secret