f5a0982222
Argo CD only substitutes $secret:key references from Secrets carrying the label app.kubernetes.io/part-of: argocd. Without it, the server logs "secret key does not exist in secret" and renders placeholders verbatim into the OIDC redirect URL. Adding the label to the SealedSecret template ensures sealed-secrets- controller re-produces the Secret with the label on every restore, so OIDC keeps working after DR / re-seal. Co-Authored-By: Paperclip <noreply@paperclip.ing>
21 lines
1.9 KiB
YAML
21 lines
1.9 KiB
YAML
---
|
|
apiVersion: bitnami.com/v1alpha1
|
|
kind: SealedSecret
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: argocd-oidc-secret
|
|
namespace: argocd
|
|
labels:
|
|
sealedsecrets.bitnami.com/managed: "true"
|
|
spec:
|
|
encryptedData:
|
|
oidc.pocketid.clientId: AgAeLnrnM+S/4qjsJusjir9bDSdZOinnR6UZc4Kz20cJ7zlMf2r5bMKmHR8TnmggSKL7cqeTAT2/7HE9STLsuZtRPgVAxNz0cYx4wcXf11P+/5OoxlvI3+BkXvqc/a26/iELANjcgU6d5ZLohgglXsnCyb/EDb1Az0dsDh1VbGLNN0Fwy2d84SOEw1oI9L/O/axyb6w8evCRJgdsK7sgni+wArrdLGH7vYljMIFr4Bh7iWuCuEGwMGV4rb1XzvSNBH3uOuPeDcJlAT9QVYpy6i3IlaHlATAZN4jG6qH3Tj1E17jruq0ZLJnzOP0P80vfQEKNZqIP49OJImULSsxGgREBVADmQpwx0RbzetGI5F3bSw+uFbg9i2cTZUs1umSgTuJUr9GVvm2fW/1590XVgmE7C12z0UpRrROoNuE7QQX8xD4ytK/KnDT3vNsFKGnczNNqPb8tDMBoAhlW4yjNbAJ+4sH/g2DIbGYTEB4WaDCCviO8cf5Jj+MlIhZZ/IWqONTkM4MAf4Oe8K6IqsoD0ixeK8u5iO8wZ78qXCiOoVIYOwz7T/k8g2G81Tzu4KBQKdYNSCzjRTghfkLkGJqiyGkPHT3cyvFRfbHgBzvsYzJj7j5KMOVTwuFMA4QF9QMeLHnj1Ny/Ub/oJ9Cnl9AFO57Efs8YpZH17dqF+PYu0smnro0U98PY8oGTkugGrpa9USz0NnoBKhfLNKsTqBKPjLMwMXQrSZCaptnbFyTl8mSU4xIB+Uc=
|
|
oidc.pocketid.clientSecret: AgAguhjVxLw0pP6MX97wHWpvHq9HsrCEIq3sgNvsuLCBGSOaynWl2K6dWrRsVj6KVmWCHCt76g9tp+0/zQGo5EfNhNv1dPmXfZ4pZIEylXCCuyeiUEbiYlC9CEa1DUYMOSRoV4hwtWxaSYpIPTEzUU/bNSaYr6UVS5x8KSxQLP1vb521T4xg9pChOo61u4w/U5V6vXeSm7PDaYI+aay10d5vZKmR5iW/KWGBEY5VJLmwJz/vgR7pPSqO4SY/DPiyxqzuV6ROFi3pwbSxfkFDzNn11M0KJ+QMRruN6pJ9FKyMRYrSDmANqvshs9ooc682oV1fNYq0lamH1EHYwisKd21saaxWaZQTFuCpUzYlluIrjYdQRltE9C0H1B8zHC8kuDqmqNcbB0ZTEzJf0YbKOLkIlmCH3sDIDJ7cn1dB42AWwRy9bCFXe56OqmWYCeITzPVsvBPRbJKyGr2EVf2roJAK5XoavqfycGki7JGmSeQqA/gUR7jDXCBJb0dffVZUG8wbZZHlJmrfCrSMRjZwpqF7quWeJaOAkb2LCTFJf8f68NndYr5F8dUPvSqJUIP6zEi12Vjky5Qj0b7aZFmvVkxMP8+WyDscZI6RgwFcU3GylxkHapRptq6UDJ7+4L5h/nc3lcCZsJudcuLGT8z+p6AO71Gl+BeWLgzfEuhvHBxrgN7tiwv1LllVE2iCcAqksU0ArX6QiNVMsmvUOhmMX4WdvExwxWzIRceYKPa1MU1yOg==
|
|
template:
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: argocd-oidc-secret
|
|
namespace: argocd
|
|
labels:
|
|
app.kubernetes.io/part-of: argocd
|
|
type: Opaque
|