mirror of
https://github.com/rubenhensen/k8scd.git
synced 2026-11-15 22:29:09 +01:00
Ruben Hensen
7c8cd28f71
Drops the label tracking pin kept through the 3.x upgrades, so Argo CD uses its default argocd.argoproj.io/tracking-id annotation. Labels can be copied by other tools (cert-manager's ingress-shim copied app.kubernetes.io/instance onto Certificates); the annotation names the exact resource. Every app gets synced once right after, so resources removed later are still recognised for pruning.
23 lines
517 B
YAML
23 lines
517 B
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: argocd-cm
|
|
labels:
|
|
app.kubernetes.io/name: argocd-cm
|
|
app.kubernetes.io/part-of: argocd
|
|
data:
|
|
url: https://argocd.rubenhensen.nl
|
|
oidc.config: |
|
|
name: Authentik
|
|
issuer: https://authentik.rubenhensen.nl/application/o/argocd/
|
|
clientID: argocd
|
|
clientSecret: $oidc.authentik.clientSecret
|
|
requestedScopes:
|
|
- openid
|
|
- profile
|
|
- email
|
|
resource.exclusions: |
|
|
- apiGroups:
|
|
- "velero.io"
|
|
kinds:
|
|
- "Backup" |