add oauth

2026-04-29 18:01:52 +01:00
parent 142adb2194
commit 78d6e8fbd5
2 changed files with 10 additions and 1 deletions
@@ -5,5 +5,5 @@
 *.swo

 # Local plaintext twins for sync-managed secrets. Keep these untracked.
-manifest/overlays/**/secret.yaml
+manifest/overlays/*/secret.yaml
 manifest/components/**/secret.yaml
@@ -94,3 +94,12 @@ data:
      - BackgroundScanReport
      - ClusterBackgroundScanReport
      - UpdateRequest
+  url: https://argocd.olb42.com
+  oidc.config: |
+    name: ZITADEL
+    issuer: https://zitadel.olb42.com
+    clientID: 370752543384470542
+    clientSecret: $oidc.zitadel.clientSecret
+    requestedScopes: ["openid", "profile", "email", "groups"]
+    requestedIDTokenClaims: {"groups": {"essential": true}}
+    enablePKCEAuthentication: true