feat: Add ArgoCD operator installation manifests with OIDC authentication and namespace configuration

- Add ArgoCD custom resource with server route enabled and annotation-based resource tracking
- Configure Dex SSO provider with OIDC connector for OpenID Connect authentication
- Add OIDC client configuration with openid, profile, email, groups scopes
- Add argocd-secret with placeholder for OIDC client secret
- Add argocd namespace with telecom-platform labels and gitops component annotation
- Configure namespace with gitops managed-by annotation for platform integration
This commit is contained in:
nutcas3
2026-04-17 17:19:06 +03:00
parent f0da1abcef
commit 2ee6fa49fd
2 changed files with 46 additions and 0 deletions
+36
View File
@@ -0,0 +1,36 @@
apiVersion: argoproj.io/v1alpha1
kind: ArgoCD
metadata:
name: argocd
namespace: argocd
spec:
server:
route:
enabled: true
controller:
processors: {}
resourceTrackingMethod: annotation
repo:
mtls: {}
sso:
provider: dex
dex:
config: |
connectors:
- type: oidc
id: oidc
name: OpenID Connect
config:
issuer: https://your-oidc-provider.com
clientID: argocd
clientSecret: $oidc.clientSecret
requestedScopes: ["openid", "profile", "email", "groups"]
---
apiVersion: v1
kind: Secret
metadata:
name: argocd-secret
namespace: argocd
type: Opaque
stringData:
oidc.clientSecret: "your-oidc-client-secret"
+10
View File
@@ -0,0 +1,10 @@
apiVersion: v1
kind: Namespace
metadata:
name: argocd
labels:
name: argocd
app.kubernetes.io/part-of: telecom-platform
app.kubernetes.io/component: gitops
annotations:
telecom-platform.io/managed-by: "gitops"