change(argocd): reenabled authentik oidc

projects/argocd/project.yml

@@ -15,7 +15,7 @@ apps:
     keys:
     - admin.password
     - server.secretkey
-    - oidc.auth0.clientSecret
+    - dex.authentik.clientSecret
     - webhook.gogs.secret
   - name: ca-cert
     keys:

projects/argocd/values/argocd.yaml

@@ -111,26 +111,32 @@ server:
 
     oidc.config: |
       name: Authentik
+      type: oidc
+      id: authentik
       issuer: https://auth.dc/application/o/argocd/
-      clientID: 0c149045b7b87eb80e41fcdd3e788476472d7316
+      clientID: 3793eb413f1d568b9e9cf82fd4d8d596b2867ec5
-      clientSecret: $oidc.auth0.clientSecret
+      clientSecret: $dex.authentik.clientSecret
-      requestedScopes: ["openid", "profile", "email", "groups"]
+      scopes:
+          - openid
+          - profile
+          - email
+          - groups
 
   rbacConfig:
     policy.csv: |
       g, ArgoCDAdmins, role:admin
 
-  # Mount public CA cert
+  # Mount vault CA cert
-  volumeMounts: []
+  volumeMounts:
-#  - name: certificate
+  - name: certificate
-#    mountPath: /etc/ssl/certs/ca.crt
+    mountPath: /etc/ssl/certs/vault-ca-certificates.crt
-#    subPath: ca
+    subPath: ca
 
-  volumes: []
+  volumes:
-#  - name: certificate
+  - name: certificate
-#    secret:
+    secret:
-#      secretName: ca-cert
+      secretName: ca-cert
-#      defaultMode: 420
+      defaultMode: 420
 
   additionalApplications: []