Add oidc actualbudget 3

actual-budget/external-secret.yaml

@@ -11,6 +11,10 @@ spec:
     name: actualbudget-oidc-client-secret
     creationPolicy: Owner
   data:
+    - secretKey: client_id
+      remoteRef:
+        key: kv/actualbudget-oidc
+        property: client_id
     - secretKey: client_secret
       remoteRef:
         key: kv/actualbudget-oidc

actual-budget/helm-actual-budget.yaml

@@ -21,19 +21,21 @@ spec:
         image:
           tag: "26.3.0"
 
-        # OIDC configuration
+        # Authentication configuration
-        env:
+        login:
-          - name: ACTUAL_OPENID_DISCOVERY_URL
+          method: openid
-            value: https://authentik.rubenhensen.nl/application/o/actualbudget/
+          openid:
-          - name: ACTUAL_OPENID_CLIENT_ID
+            enforce: true
-            value: actualbudget
+            providerName: Authentik
-          - name: ACTUAL_OPENID_CLIENT_SECRET
+            discoveryUrl: https://authentik.rubenhensen.nl/application/o/actualbudget/
-            valueFrom:
+            authMethod: openid
-              secretKeyRef:
+            existingSecret:
-                name: actualbudget-oidc-client-secret
+              name: actualbudget-oidc-client-secret
-                key: client_secret
+              clientIdKey: client_id
-          - name: ACTUAL_OPENID_SERVER_HOSTNAME
+              clientSecretKey: client_secret
-            value: https://ynab.rubenhensen.nl
+
+        extraEnvVars:
+          ACTUAL_OPENID_SERVER_HOSTNAME: https://ynab.rubenhensen.nl
 
         # Service configuration
         service: