From 640d40c0282a30f8bf6ae5e92a4b346909e4bb58 Mon Sep 17 00:00:00 2001 From: nick-gorse Date: Wed, 6 May 2026 23:52:10 +0100 Subject: [PATCH] update config --- manifest/overlays/production/argocd-cm-patch.yaml | 11 ++++++----- .../overlays/production/argocd-rbac-cm-patch.yaml | 1 + 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/manifest/overlays/production/argocd-cm-patch.yaml b/manifest/overlays/production/argocd-cm-patch.yaml index f90f005..e0d9f4a 100644 --- a/manifest/overlays/production/argocd-cm-patch.yaml +++ b/manifest/overlays/production/argocd-cm-patch.yaml @@ -96,11 +96,12 @@ data: - UpdateRequest url: https://argocd.olb42.com oidc.config: | - name: Zitadel - issuer: "https://auth.olb42.com" + name: Keycloak + issuer: https://cloak.olb42.com/realms/home-lab clientID: "371517213338829947" clientSecret: $oidc.auth.clientSecret + refreshTokenThreshold: 2m requestedScopes: ["openid", "profile", "email", "groups"] - requestedIDTokenClaims: {"groups": {"essential": true}} - enablePKCEAuthentication: true - logoutURL: https://auth.olb42.com/oidc/v1/end_session + # requestedIDTokenClaims: {"groups": {"essential": true}} + # enablePKCEAuthentication: true + # logoutURL: https://auth.olb42.com/oidc/v1/end_session diff --git a/manifest/overlays/production/argocd-rbac-cm-patch.yaml b/manifest/overlays/production/argocd-rbac-cm-patch.yaml index 48e899b..ee196d4 100644 --- a/manifest/overlays/production/argocd-rbac-cm-patch.yaml +++ b/manifest/overlays/production/argocd-rbac-cm-patch.yaml @@ -11,6 +11,7 @@ data: g, nick@olb42.com, role:admin g, argocd_administrators, role:admin g, argocd_users, role:readonly + g, ArgoCDAdmins, role:admin g, mcpserver, role:admin g, homepage, role:readonly g, role:admin, role:readonly