DevFW-CICD/stacks-instances
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(sso): using secret references in dex to not put secrets in git

Browse source
This commit is contained in:
Richard Robert Reitz 2025-08-14 16:03:39 +02:00
parent bab179a272
commit cbc8752fa1
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
otc/observability.t09.de/stacks/core/dex/values.yaml
View file

@ -68,9 +68,9 @@ config:
name: ArgoCD Client name: ArgoCD Client
redirectURIs: redirectURIs:
- "http://argocd.observability.t09.de/auth/callback" - "http://argocd.observability.t09.de/auth/callback"
secret: "{{`{{ .Env.OIDC_DEX_ARGO_CLIENT_SECRET }}`}}" secretEnv: "OIDC_DEX_ARGO_CLIENT_SECRET"
- id: grafana - id: grafana
redirectURIs: redirectURIs:
- "https://grafana.observability.t09.de/login/generic_oauth" - "https://grafana.observability.t09.de/login/generic_oauth"
name: "Grafana" name: "Grafana"
secret: "thisisasecret" secretEnv: "OIDC_DEX_GRAFANA_CLIENT_SECRET"

2
otc/observability.t09.de/stacks/observability/grafana-operator/manifests/grafana.yaml
View file

@ -53,7 +53,7 @@ spec:
allow_sign_up: "true" allow_sign_up: "true"
use_refresh_token: "true" use_refresh_token: "true"
client_id: grafana client_id: grafana
client_secret: "thisisasecret" # $__file{/etc/secrets/auth_generic_oauth/client_secret} client_secret: "grafana123" # $__file{/etc/secrets/auth_generic_oauth/client_secret}
scopes: openid email profile offline_access groups scopes: openid email profile offline_access groups
auth_url: https://dex.observability.t09.de/auth auth_url: https://dex.observability.t09.de/auth
token_url: https://dex.observability.t09.de/token token_url: https://dex.observability.t09.de/token