commit 21ebd9127655d843634ec79a72ced3552d0a90c2
parent ae81314adb852f2a956ff83ba48fcd70d5c553ad
Author: MTRNord <mtrnord1@gmail.com>
Date: Fri, 17 Mar 2023 00:26:24 +0100
Switch to password auth
Diffstat:
3 files changed, 5 insertions(+), 37 deletions(-)
diff --git a/infrastructure/controllers/kustomization.yaml b/infrastructure/controllers/kustomization.yaml
@@ -1,5 +1,4 @@
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- - oidc-secret.yaml
- weave-gitops.yaml
diff --git a/infrastructure/controllers/oidc-secret.yaml b/infrastructure/controllers/oidc-secret.yaml
@@ -1,33 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
- name: oidc-auth
- namespace: flux-system
-type: Opaque
-stringData:
- issuerURL: ENC[AES256_GCM,data:+f0O5ELWCbVNcRNV5Aq0/IncFkhD/kVYIIfOrkVkNnTLTVgCn81P2kOPB81vk1w4lIL/As8=,iv:J/N82Tjb7KDPUIqJhAllIS3VfPO8TvDgvfSGuCRWTkM=,tag:d60vMdl4UJyiKqwm0SrOyw==,type:str]
- clientID: ENC[AES256_GCM,data:8+lUSY4=,iv:ltu3X1+k3V/hXcPARPuti8D4a3qeD48LUb/A13yoyOs=,tag:D756jLBeRLs+hiPC7fVj0w==,type:str]
- clientSecret: ENC[AES256_GCM,data:iutS5ikcw1RW0quSXEZ4cJr7aP8L97VB3A2+2x800KM=,iv:lydM3STTpvR1aYgwK1woDuP6FFtt0UYugBrmIU0b8Fs=,tag:QaZ+eqC6K8HJxeB+4VNGrQ==,type:str]
- redirectURL: ENC[AES256_GCM,data:BjGT02dG2yYJVu5lh6g0nz49ZjAv6vT5UJPMRJDUaCkNjYZFnUenbgKvs4YyrEzlQOLQ4A==,iv:2GZTQt4MZ0ZVs9YE3j2bfCdb3zUi6jFNdoy6Fg6wGJA=,tag:Sh7VwPuxW4/gPRdMsaDcYQ==,type:str]
- tokenDuration: ENC[AES256_GCM,data:KFNOQzkI,iv:3f+rNkKDsgpvI9VrwDZyusI5QlCLtiU833+hlKOodQ8=,tag:D+4XIW2XnXb9NS0A1sCifw==,type:str]
- customScopes: ENC[AES256_GCM,data:+DMXoXo=,iv:pxGt5QTZcgGziS35yjkZ++8fyt1v+QaJF+JwZiiW22g=,tag:McCUskohBrrdk8pBh4Xwkw==,type:str]
-sops:
- kms: []
- gcp_kms: []
- azure_kv: []
- hc_vault: []
- age:
- - recipient: age1esjyg2qfy49awv0ptkzvpk425adczjr38m37w2mmcahzc4p8n54sll2nzh
- enc: |
- -----BEGIN AGE ENCRYPTED FILE-----
- YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA0MWN6anhNWDVyeFI3cTBO
- RnJTdTNmT1RTQlZGRzVDTHRVZWRTWlFTa0J3CitEeGVKU3l2ZFdlWmgxdm1BdHBD
- MEtoV1RYcmt1RHd5SW5nNTFxMExiRzAKLS0tIFhRSGlpVEFFbUFsMzJDVndNVVEy
- VjFuY2NBQ1lsS09iSUZPbU96OVZieGMKI3Ee5I8IjLl/5i9DvOk8JGEzF2MmsdSW
- DTIhBCXZNfe5ZKYoGQl077Ll9MNsvbJpMkbVtJudF0tP9eOcaPmITg==
- -----END AGE ENCRYPTED FILE-----
- lastmodified: "2023-03-16T23:19:45Z"
- mac: ENC[AES256_GCM,data:c5+1OmcEOQjMCT/FQ+q8YkSMnjrd0wMKKu4L+At/dpVWA/1emDMqEKLoNeiF+5ryW1YC7lwgFK6vGUEfFz457YLnMireJVxT3Iz5oUwi0ObN8p27U5g/7EeVmxKdRzcVR3AacVYIsKlHQtJMEcmPlZsf5FlSUkxrvq846qTYZEY=,iv:bb+hVwDpYlOpM17TfGFB9DeQH0fK0fKth33RLcMyxG8=,tag:j91O45AoTCdqqL1xuOFIbw==,type:str]
- pgp: []
- encrypted_regex: ^(data|stringData)$
- version: 3.7.3
diff --git a/infrastructure/controllers/weave-gitops.yaml b/infrastructure/controllers/weave-gitops.yaml
@@ -34,11 +34,13 @@ spec:
# cpu: 1
# memory: 512Mi
adminUser:
- create: false
+ create: true
+ username: mtrnord
+ passwordHash: $2a$10$smVGWN9U0qRRzMMNLAipYO0wU12ADk/m2g.fLAVmPiw2Y478ohesi
oidcSecret:
create: false
- additionalArgs:
- - --auth-methods=oidc
+ #additionalArgs:
+ # - --auth-methods=oidc
ingress:
enabled: true
annotations: