From bd82384eb19b6c6fecc20943c366afe831caedcb Mon Sep 17 00:00:00 2001
From: Daniel Sy <Daniel.Sy@telekom.de>
Date: Mon, 8 Jun 2026 17:11:02 +0200
Subject: [PATCH] =?UTF-8?q?fix(dex):=20=F0=9F=94=90=20correct=20sizer=20cl?=
 =?UTF-8?q?ient=20secret=20to=20match=20sizer-oidc-client?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The deploy hydration created dex-sizer-client with wrong value.
Reverting to the original shared secret that sizer expects
(73eda906... - active for 81 days before hydration overwrote it).

Changes:
- sizer-oidc-client: restore correct shared secret
- dex-sizer-client: add managed manifest to prevent future drift
- dex.yaml: add manifests source for ArgoCD to sync the secret

Broken by stacks rehydration pipeline run.
---
 otc/dev.t09.de/stacks/ci-sizer/sizer-receiver/secret.yaml | 2 +-
 otc/dev.t09.de/stacks/core/dex.yaml                       | 3 +++
 .../stacks/core/dex/manifests/dex-sizer-client.yaml       | 8 ++++++++
 3 files changed, 12 insertions(+), 1 deletion(-)
 create mode 100644 otc/dev.t09.de/stacks/core/dex/manifests/dex-sizer-client.yaml

diff --git a/otc/dev.t09.de/stacks/ci-sizer/sizer-receiver/secret.yaml b/otc/dev.t09.de/stacks/ci-sizer/sizer-receiver/secret.yaml
index 42538da..ac8a37c 100644
--- a/otc/dev.t09.de/stacks/ci-sizer/sizer-receiver/secret.yaml
+++ b/otc/dev.t09.de/stacks/ci-sizer/sizer-receiver/secret.yaml
@@ -6,4 +6,4 @@ metadata:
     app: sizer-receiver
 type: Opaque
 stringData:
-  client-secret: "di4ul3ce6D796q19lVQsjiGBVzluC/J7WCzjNDRZKKMRr/+C"
+  client-secret: "73eda9068bd00dfe67d29f087b5540cb1cd82cc1dd2ac0f838558ac8bbcfcb3a"
diff --git a/otc/dev.t09.de/stacks/core/dex.yaml b/otc/dev.t09.de/stacks/core/dex.yaml
index 5da98f5..b67aa7d 100644
--- a/otc/dev.t09.de/stacks/core/dex.yaml
+++ b/otc/dev.t09.de/stacks/core/dex.yaml
@@ -27,3 +27,6 @@ spec:
     - repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
       targetRevision: HEAD
       ref: values
+    - repoURL: https://edp.buildth.ing/DevFW-CICD/stacks-instances
+      targetRevision: HEAD
+      path: "otc/dev.t09.de/stacks/core/dex/manifests"
diff --git a/otc/dev.t09.de/stacks/core/dex/manifests/dex-sizer-client.yaml b/otc/dev.t09.de/stacks/core/dex/manifests/dex-sizer-client.yaml
new file mode 100644
index 0000000..884df64
--- /dev/null
+++ b/otc/dev.t09.de/stacks/core/dex/manifests/dex-sizer-client.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: dex-sizer-client
+  namespace: dex
+type: Opaque
+stringData:
+  clientSecret: "73eda9068bd00dfe67d29f087b5540cb1cd82cc1dd2ac0f838558ac8bbcfcb3a"