basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

fix(argocd): label argocd-oidc-secret so Argo CD reads its keys (DEV-523)

Browse source 
Argo CD only substitutes $secret:key references from Secrets carrying
the label app.kubernetes.io/part-of: argocd. Without it, the server
logs "secret key does not exist in secret" and renders placeholders
verbatim into the OIDC redirect URL.

Adding the label to the SealedSecret template ensures sealed-secrets-
controller re-produces the Secret with the label on every restore, so
OIDC keeps working after DR / re-seal.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-08-23 10:37:01 +00:00
parent 2cf6c65d23
commit f5a0982222
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apps/argocd/argocd-oidc-secret-sealed.yaml
View file

@ -16,4 +16,6 @@ spec:
creationTimestamp: null creationTimestamp: null
name: argocd-oidc-secret name: argocd-oidc-secret
namespace: argocd namespace: argocd
labels:
app.kubernetes.io/part-of: argocd
type: Opaque type: Opaque