Merge pull request #1565 from GiganticMinecraft/workflows_sso

fix dex secret
GiganticMinecraft · Dec 21, 2023 · 680d100 · 680d100
2 parents 07cbb59 + be6a43c
commit 680d100
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 0 deletions.
diff --git a/seichi-onp-k8s/manifests/seichi-kubernetes/argocd-helm-chart-values.yaml b/seichi-onp-k8s/manifests/seichi-kubernetes/argocd-helm-chart-values.yaml
@@ -92,6 +92,12 @@ controller:
         release: prometheus
 
 dex:
+  env:
+    - name: ARGO_WORKFLOWS_SSO_CLIENT_SECRET
+      valueFrom:
+        secretKeyRef:
+          name: argo-workflows-sso
+          key: client-secret
   resources:
     limits:
       cpu: 100m

diff --git a/terraform/onp_cluster_secrets.tf b/terraform/onp_cluster_secrets.tf
@@ -57,6 +57,23 @@ resource "kubernetes_secret" "onp_argocd_applicationset_controller_github_app_se
 
   type = "Opaque"
 }
+
+resource "kubernetes_secret" "onp_argocd_workflows_sso" {
+  depends_on = [kubernetes_namespace.onp_argocd]
+
+  metadata {
+    name      = "argo-workflows-sso"
+    namespace = "argocd"
+  }
+
+  data = {
+    client-id     = "argo-workflows-sso"
+    client-secret = var.onp_k8s_argo_workflows_sso_client_secret
+  }
+
+  type = "Opaque"
+}
+
 resource "kubernetes_secret" "onp_argo_workflows_sso" {
   depends_on = [kubernetes_namespace.onp_argo]