diff --git a/.gitignore b/.gitignore index abf0bc1..5dd1faa 100644 --- a/.gitignore +++ b/.gitignore @@ -23,4 +23,7 @@ override.tf.json *.raw *.cert -*.key \ No newline at end of file +*.key + +*.pem +*.crt \ No newline at end of file diff --git a/k8s/infra/auth/authelia/oidc-argocd.yaml b/k8s/infra/auth/authelia/oidc-argocd.yaml index 07c54c9..9d1d79f 100644 --- a/k8s/infra/auth/authelia/oidc-argocd.yaml +++ b/k8s/infra/auth/authelia/oidc-argocd.yaml @@ -5,7 +5,7 @@ metadata: namespace: authelia spec: encryptedData: - clientSecret: AgA+S8MZ6s6BiCwjhrvwH25lsYE5LO1JBtHBz2CRWeL2wZnsInGi+UB5hcaZtVkK1tBrNv0I+Zl2T7IT5V4d/vcFDaW0daAt8gKZBE+QXuY+jWRaFK0Gp+3wkAyW4SezehdAsLoVCiRL6qJ3O+VKyqjg+7pXafkKFRJ42DMuJekOEF2XokSSZnUyPaCXiQ+a/15h2oS4NUF1J0gc1b09S/SKQ8oH6OPVTHbkDqNYghlAcXHjvcumnijWB5NqsV8bFLkoWiypG1re2j0ioSPRCjIivCuZhOB2AEQZcLdtQyaguiUXLjt8hAK2zFfgc10GOIWkYt4RuPuZ3bBnpJashN+9GX+YAvIV67zNkfDflDo62iI/Gbs04KjnZIq5Z26V7qt1fTfEPx5ZD+8ST1bshHL3X59dP63T8XixEEtcfYyfBMBMMXwhYQ6Pa30N5tYGB4laqDZV0aeEP9Bk8E7JE4YRhhLebtcTghv0fwFFBuPfaE6fJKkA94uI9oCddNCOHWSQM5nRVd5/gI2LN2Q+0u9JAo3WqQ3YfM2NZ+mJFSnUJoQmXQeVUGnQNdre78D0eTuKTbWfyeY5eaBoa0pVobkjh1x7k7NwqNkXk4T69pL1s1A0PQvoOYG3TUG7fMaEqaZzcAlLdk6e/pB1cOVCvyOT+MQP3vpPm9CPD1vj2ga+OdlxdrQ5twa3TyDahDlxLmLeEPGE/o2w+4TxqKvDe/UbysByFG9worQkHvb2RnJBcigZoQOgo+QM4AHKiy0sGb4UJe7/9xMJCv5E1rIXo2lUopI48B/Yp/2uZHCu91dOSaYxEd7Xd76Za+Fs6mcpsxJkWnP8N+nwFCe/bmoe5fZjQ+lR5xd4K7spkS1C5NwO0URJZg== + clientSecret: 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 template: metadata: name: oidc-argocd diff --git a/k8s/infra/auth/authelia/oidc-jwks.yaml b/k8s/infra/auth/authelia/oidc-jwks.yaml index fb291ff..18890e5 100644 --- a/k8s/infra/auth/authelia/oidc-jwks.yaml +++ b/k8s/infra/auth/authelia/oidc-jwks.yaml @@ -1,16 +1,14 @@ ---- apiVersion: bitnami.com/v1alpha1 kind: SealedSecret metadata: - creationTimestamp: null name: oidc-jwks namespace: authelia spec: encryptedData: - default.RS256.private.pem: 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 - default.RS256.public.crt: AgAVHs+NqdI7fm0SDSwckmmwTy9qGb2Z24epWv7jR/4O/QbNl9+oGhTbBtdgGQxa1uDGFv6jzFLnrTGCuRdkzHrN+DvHIH1aH5eR04sK7Lm5DgVOAR0mUUwQ9HcKW9Vz9oEyHbbQ4ZohsF+hWO3vzzwjlYPrxFsZ+Rje1RN6wWJJl0+JhuDC6Dsh8iqOoXJ7jlWtpQOxT/YNCGxqEziZGeWe0NssS1mc0NgUHtM2dyoQzIuw6TqwzwjOvvOtAiHp7v1EYMtHRC7honspLQXH3eMn1da7/RAKVpeUhqXd29PgrgsKJzltASr4lr9PRYoS8FmKt5haPmsL/f2AZOWZtKyvHYq9AZ2dnSLmDdYxJheZVN9+OQNgjvmyUfY6bOzXkR4b/nAmKRECiNmCRz6x7J2n3y8nShe6i36Lcn4TU5fbea84cNRBpEi1cQk1QZOcDyk3+4ugL3elwTG18cMZL8/KhyIVoDc9YyHoIctDtaXnSv/Z8J3r30QpyWDwzQk5b9bwidQ+K40KsaKw03hPry2KfsDRnxViUlslARb14thM2oTAxq34fuMx7W2jDqKgnB4xHD6X2tC8Xhnx8DA+JkbCbIzdarZl5jmhIemBW1+YSrJfV59Po9tGVdTzrOs0QqNxkUFF2WKv+kjraeLnmsOaDsIaPhiYf0YRkHl3Aejt7YOeN0dJ2OG8sWS37GfGjgerxzDHNelpxKC3s3A9R49ae0xK7ydch7AwIwPnuCfO/tplIGxmn0dhlqv93STmWr2rHyKEwVF09GTpwezgQEQu03kl24OQfObWFvx7woBbJPFRj39ClnIOdrMmY8PvQrzIvpYhTYWT1iGX4/+wy43jJCPtyjjCGa9aAenMw0zCnxtS+/TAguhqqg8u7k09r/zEZ5SVQ8Sj0AgyygZgeQwuCYZBFaCuupjB3WCcA3yn2+9mwCiUMh8rZOagJQuqL3D/f/UUMU6/zUCYSsjaIuxbKM1McICJw3Y+JviwsGcwAQT/AblDTfQuXmVahurtoqcrun2KglZmmJ0T0/2CxvvubjkIUEO8KorpGKQxJZDvtuMxe8HDDlgd5Mxe6vnY9gvnD7yi1quMKvom0PAoxfFfuMQND/idtgVFGEFq+bq7mYozEHGA9Y1bJ9S/1rSp5I05ZPMiel6aEXvxdyixOphnuBGx0ZYIkyENKfH1bt7LdJvr/Ouv0WAf2SmC0qEaA15+pHgXg3u4n6pclgwPMoMZ93PAmujLTZ+4NolluSQMJp0joawIzojCjy21oJF++Pa5nSnqBmc8X9jn3AV+yiDohlXBHHo2Zo5Aeu/zZ5pIaqff7xBw/pMWXVxW4SDlgcAoJ1mWiokDGe8sX7XLBACIswrAmjn5EmeVVT841wsI/uD/I64FzIGaJwbiRqcoEwG0C3OTaVyWxMTllywBmvGDfwSj0+mu6CztV2mM/WXNK0GBpkHV2cs6dtdf5tYp81RKkDcFHqs/BPfKf2vCnfPv3ZmmVFD8wnN2OPpm9I7Kdn3zPDLY51ksmU6mNsCceYtdVtmO0j4ZiObJdf3T+NJX101oK7I4Pr6Kw8swSoSRHcw0IoKUlpSvwoPCW9g42Pao69yGp/tJJhhRQuBeLx7b5k/DiwT8x72+QQ1vIPSY8HM+INq3425BO/yF9ZpeUr67DFqcYK5wIcWlLqIv7jY/S+D8xhT2uyCyprTYkqMNYpSQK9qpD4UILP34hgVvFtdUg2H2vj5SZpMQf61bMWIcH6GyiberiAag4WVGDhzOD2PQiVYfjDHQ67XUjLy05KOLObvZ2G0jHt1V30LadpqXBejL2EIwGYeCHijvi2XumPTSYasX2FkOr7jO/I2FXY6Z0uFj/+dsuSRhAKoNMoRC5crPOdT+NL/P90VJ8s2MPqnZssjEzlz0NVJ6kNh6COIotpa5j8TrUBhqAI0qlMAjwzuNovT1Dfngfg2KQDtN00hpg2nZlwjA2Cyx0o0+EbuLp0v++TuxrZp3w+YvdPov104AY3osQoZcw+kVFVRrED+1GAZ0t428bgFwbxeoDde5IlYZ72wNco6kDxBNuKDGb5EfR2H8lHXqmwftx6fFIGKUhPv2wxPdMdo8du5DTEZP49ooy2hJ0puo1O7kRh7Qfc06uvcJD3zeUSnRFC48FCeTCARu3h1fnCn8qg5ZEt9iGLIq7KMzMCwjhKC76qSd3PjnubLE7w== + default.RS256.private.pem: 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 + default.RS256.public.crt: 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 + ecdsa.P256.private.pem: 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 template: metadata: - creationTimestamp: null name: oidc-jwks namespace: authelia diff --git a/k8s/infra/auth/authelia/values.yaml b/k8s/infra/auth/authelia/values.yaml index 91ce74c..9a06845 100644 --- a/k8s/infra/auth/authelia/values.yaml +++ b/k8s/infra/auth/authelia/values.yaml @@ -58,14 +58,19 @@ configMap: - key_id: 'default' algorithm: 'RS256' use: 'sig' - # TODO: CHANGE THIS COMPROMISED TEST KEY! key: path: /secrets/oidc-jwks/default.RS256.private.pem certificate_chain: path: /secrets/oidc-jwks/default.RS256.public.crt + - key_id: 'ecdsa' + algorithm: 'ES256' + use: 'sig' + key: + path: /secrets/oidc-jwks/ecdsa.P256.private.pem + cors: + allowed_origins_from_client_redirect_uris: true clients: - client_id: 'argocd' - # TODO: CHANGE THIS COMPROMISED TEST KEY! client_secret: path: '/secrets/oidc-argocd/clientSecret' client_name: 'Argo CD' @@ -101,5 +106,5 @@ secret: path: default.RS256.private.pem - key: default.RS256.public.crt path: default.RS256.public.crt - - + - key: ecdsa.P256.private.pem + path: ecdsa.P256.private.pem diff --git a/k8s/infra/controllers/argocd/oidc.yaml b/k8s/infra/controllers/argocd/oidc.yaml index 6892bde..a7bd979 100644 --- a/k8s/infra/controllers/argocd/oidc.yaml +++ b/k8s/infra/controllers/argocd/oidc.yaml @@ -5,11 +5,10 @@ metadata: namespace: argocd spec: encryptedData: - authelia.clientSecret: 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 + authelia.clientSecret: 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 template: metadata: labels: - # https://github.com/argoproj/argo-cd/issues/13928#issuecomment-2146020186 app.kubernetes.io/part-of: argocd name: oidc namespace: argocd