Files
homelab/k8s/core/argocd/external-secrets.yaml
Ultradesu 10e351b35b
All checks were successful
Update Kubernetes Services Wiki / Generate and Update K8s Wiki (push) Successful in 9s
Check with kubeconform / lint (push) Successful in 10s
Auto-update README / Generate README and Create MR (push) Successful in 9s
Added Argocd OIDC scope offline_access
2026-03-13 10:48:05 +00:00

43 lines
1.0 KiB
YAML

---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: oidc-creds
namespace: argocd
spec:
target:
name: oidc-creds
deletionPolicy: Delete
template:
type: Opaque
metadata:
labels:
app.kubernetes.io/part-of: argocd
data:
id: "{{ .client_id }}"
secret: "{{ .client_secret }}"
data:
- secretKey: client_id
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
key: 1062e5b4-5380-49f1-97c3-340f26f3487e
property: fields[0].value
- secretKey: client_secret
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
conversionStrategy: Default
decodingStrategy: None
metadataPolicy: None
key: 1062e5b4-5380-49f1-97c3-340f26f3487e
property: fields[1].value