Files
applications/headlamp/manifests/external-secret.yaml
Mayne0213 779724b9f7 FIX(headlamp): update Vault secret path for OIDC
- Change path from cluster-infrastructure/authelia to authelia
- Fix ExternalSecret sync error
2026-01-07 01:02:30 +09:00

28 lines
722 B
YAML

apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: headlamp-oidc
namespace: headlamp
spec:
refreshInterval: 1h
secretStoreRef:
kind: ClusterSecretStore
name: vault-backend
target:
name: headlamp-oidc
creationPolicy: Owner
template:
engineVersion: v2
data:
OIDC_CLIENT_ID: headlamp
OIDC_CLIENT_SECRET: "{{ .clientSecret }}"
OIDC_ISSUER_URL: https://auth0213.kro.kr
OIDC_SCOPES: "openid profile email groups"
OIDC_VALIDATOR_CLIENT_ID: headlamp
OIDC_VALIDATOR_ISSUER_URL: https://auth0213.kro.kr
data:
- secretKey: clientSecret
remoteRef:
key: authelia
property: HEADLAMP_CLIENT_SECRET