DevFW-CICD/stacks
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Re-enable dex

Browse source
This commit is contained in:
Martin McCaffery 2026-01-29 11:43:51 +01:00
parent 0effbce5cf
commit 7eb0cdff9d
No known key found for this signature in database
GPG key ID: 7C4D0F375BCEE533
2 changed files with 39 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

22
template/stacks/core/argocd/values.yaml
View file

@ -5,18 +5,16 @@ configs:
params: params:
server.insecure: true server.insecure: true
cm: cm:
# This code never quite worked, always led to 503 errors oidc.config: |
# In theory it allows access to ArgoCD via OIDC through Forgejo name: FORGEJO
# oidc.config: | issuer: https://{{{ .Env.DOMAIN_DEX }}}
# name: FORGEJO clientID: controller-argocd-dex
# issuer: https://{{{ .Env.DOMAIN_DEX }}} clientSecret: $dex-argo-client:clientSecret
# clientID: controller-argocd-dex requestedScopes:
# clientSecret: $dex-argo-client:clientSecret - openid
# requestedScopes: - profile
# - openid - email
# - profile - groups
# - email
# - groups
application.resourceTrackingMethod: annotation application.resourceTrackingMethod: annotation
timeout.reconciliation: 60s timeout.reconciliation: 60s
resource.exclusions: | resource.exclusions: |

60
template/stacks/core/dex.yaml
View file

@ -1,31 +1,29 @@
# NOTE Dex is disabled as it never quite worked, and was taking up pods which caused us to hit node capacity. apiVersion: argoproj.io/v1alpha1
kind: Application
# apiVersion: argoproj.io/v1alpha1 metadata:
# kind: Application name: dex
# metadata: namespace: argocd
# name: dex labels:
# namespace: argocd env: dev
# labels: spec:
# env: dev project: default
# spec: syncPolicy:
# project: default automated:
# syncPolicy: selfHeal: true
# automated: syncOptions:
# selfHeal: true - CreateNamespace=true
# syncOptions: retry:
# - CreateNamespace=true limit: -1
# retry: destination:
# limit: -1 name: in-cluster
# destination: namespace: dex
# name: in-cluster sources:
# namespace: dex - repoURL: https://charts.dexidp.io
# sources: chart: dex
# - repoURL: https://charts.dexidp.io targetRevision: 0.23.0
# chart: dex helm:
# targetRevision: 0.23.0 valueFiles:
# helm: - $values/{{{ .Env.CLIENT_REPO_ID }}}/{{{ .Env.DOMAIN }}}/stacks/core/dex/values.yaml
# valueFiles: - repoURL: https://{{{ .Env.CLIENT_REPO_DOMAIN }}}/{{{ .Env.CLIENT_REPO_ORG_NAME }}}
# - $values/{{{ .Env.CLIENT_REPO_ID }}}/{{{ .Env.DOMAIN }}}/stacks/core/dex/values.yaml targetRevision: HEAD
# - repoURL: https://{{{ .Env.CLIENT_REPO_DOMAIN }}}/{{{ .Env.CLIENT_REPO_ORG_NAME }}} ref: values
# targetRevision: HEAD
# ref: values