feat(k8s-peterg): Add Authentik authentication to ArgoCD

This commit is contained in:
Peter 2025-11-10 14:01:55 +01:00
parent e529e5c255
commit 11fe8a40b2
Signed by: Peter
SSH key fingerprint: SHA256:B5tYaxBExaDm74r1px9iVeZ6F/ZDiyiy9SbBqfZYrvg
4 changed files with 71 additions and 7 deletions

View file

@ -0,0 +1,33 @@
---
apiVersion: v1
kind: ConfigMap
metadata:
name: argocd-cm
labels:
app.kubernetes.io/name: argocd-cm
app.kubernetes.io/part-of: argocd
data:
dex.config: |
connectors:
- name: authentik
id: authentik
type: argocd-cm
config:
issuer: $argocd-authentik-provider:dex.authentik.issuer
clientID: $argocd-authentik-app:dex.authentik.clientID
clientSecret: $argocd-authentik-app:dex.authentik.clientSecret
scopes:
- openid
- profile
- email
---
apiVersion: v1
kind: ConfigMap
metadata:
name: argocd-rbac-cm
labels:
app.kubernetes.io/part-of: argocd
data:
policy.default: role:readonly
policy.csv: |
g, ArgoCD Admins, role:admin