fix dex secret

GiganticMinecraft · Dec 21, 2023 · be6a43c · be6a43c
1 parent f195e59
commit be6a43c
Show file tree

Hide file tree

Showing 2 changed files with 23 additions and 0 deletions.
diff --git a/seichi-onp-k8s/manifests/seichi-kubernetes/argocd-helm-chart-values.yaml b/seichi-onp-k8s/manifests/seichi-kubernetes/argocd-helm-chart-values.yaml
@@ -92,6 +92,12 @@ controller:
         release: prometheus
 
 dex:
+  env:
+    - name: ARGO_WORKFLOWS_SSO_CLIENT_SECRET
+      valueFrom:
+        secretKeyRef:
+          name: argo-workflows-sso
+          key: client-secret
   resources:
     limits:
       cpu: 100m

diff --git a/terraform/onp_cluster_secrets.tf b/terraform/onp_cluster_secrets.tf
@@ -57,6 +57,23 @@ resource "kubernetes_secret" "onp_argocd_applicationset_controller_github_app_se
 
   type = "Opaque"
 }
+
+resource "kubernetes_secret" "onp_argocd_workflows_sso" {
+  depends_on = [kubernetes_namespace.onp_argocd]
+
+  metadata {
+    name      = "argo-workflows-sso"
+    namespace = "argocd"
+  }
+
+  data = {
+    client-id     = "argo-workflows-sso"
+    client-secret = var.onp_k8s_argo_workflows_sso_client_secret
+  }
+
+  type = "Opaque"
+}
+
 resource "kubernetes_secret" "onp_argo_workflows_sso" {
   depends_on = [kubernetes_namespace.onp_argo]