Files
homelab/k8s/core/argocd/external-secrets.yaml
2025-04-06 19:59:14 +01:00

36 lines
832 B
YAML

---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
name: oidc-creds
namespace: argocd
spec:
target:
name: oidc-creds
deletionPolicy: Delete
template:
type: Opaque
data:
dex.authentik.clientID: |-
{{ .client-id }}
dex.authentik.clientSecret: |-
{{ .client-secret }}
data:
- secretKey: client-id
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: 1062e5b4-5380-49f1-97c3-340f26f3487e
property: fields[0].value
- secretKey: client-secret
sourceRef:
storeRef:
name: vaultwarden-login
kind: ClusterSecretStore
remoteRef:
key: 1062e5b4-5380-49f1-97c3-340f26f3487e
property: fields[1].value