- Downloaded upstream Argo CD install.yaml from stable branch - Customized for basicstack.de cluster: - Disabled dex deployment (using Pocket ID OIDC instead) - Added --insecure flag to argocd-server (TLS at Traefik ingress) - Configured OIDC integration with auth.basicstack.de - Added RBAC policy mapping argo_admins group to admin role - Mounted OIDC client credentials from argocd-oidc-secret - Created Traefik ingress for argo.basicstack.de with cert-manager TLS Sealed secrets for OIDC and repository credentials already in place. Ready for deployment per DEV-249 plan. Co-Authored-By: Paperclip <noreply@paperclip.ing> |
||
|---|---|---|
| .. | ||
| argocd-ingress.yaml | ||
| argocd-install.yaml | ||
| argocd-oidc-secret-sealed.yaml | ||
| repo-basicstack-org-secret-sealed.yaml | ||
| repo-stack-basicstack-de-secret-sealed.yaml | ||