move to sealed secrets

2026-05-05 01:01:52 +01:00
parent c111a36a03
commit d13564d5e5
21 changed files with 127 additions and 237 deletions
@@ -97,7 +97,9 @@ data:
  url: https://argocd.olb42.com
  oidc.config: |
    name: Zitadel
-    issuer: "https://zitadel.olb42.com"
-    clientID: "370752543384470542"
-    clientSecret: $oidc.zitadel.clientSecret
+    issuer: "https://auth.olb42.com"
+    clientID: "371517213338829947"
+    clientSecret: $oidc.auth.clientSecret
    requestedScopes: ["openid", "profile", "email", "groups"]
+    requestedIDTokenClaims: {"groups": {"essential": true}}
+    enablePKCEAuthentication: true