Fetching id in dex config for staticClients
from ENV (as Secrets)
#13247
Replies: 2 comments 2 replies
-
This sounds like a pure Dex question rather than an Argo question. You need to create another environment variable that holds your client ID. The configuration already has: dex:
env:
- name: ARGO_WORKFLOWS_SSO_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: argo-workflows-sso
key: client-secret you can add another environment variable to represent your client ID: - name: ARGO_WORKFLOWS_SSO_CLIENT_ID
valueFrom:
secretKeyRef:
name: argo-workflows-sso
key: client-id and then you can use it within your config: dex.config: |
staticClients:
- id: $ARGO_WORKFLOWS_SSO_CLIENT_ID
name: Argo Workflow
redirectURIs:
- https://argo-workflows.mydomain.com/oauth2/callback
secretEnv: ARGO_WORKFLOWS_SSO_CLIENT_SECRET with |
Beta Was this translation helpful? Give feedback.
-
Thank you @agilgur5 for your answer. We have tried this way but got an error: |
Beta Was this translation helpful? Give feedback.
-
We are aware that the
id
in dex config forstaticClients
would be the actual client-ID from OIDC provider in plain-text format (inXXXXX..apps.googleusercontent.com
format). The code block would look like this (link to official doc):We tried to fetch this
id
from an ENV (mounted as a secret using External Secret) in the below format but it failed:ExternalSecret is defined as:
Is there any way to get this value instead of hardcoding it in the code and pushing it to the GH?
Any hints/suggestions would be highly appreciated!
Beta Was this translation helpful? Give feedback.
All reactions