root 65930ceb1e
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
sec: remove plaintext passwords from realm ConfigMap
Use keycloak-config-cli env var substitution $(env:VAR_NAME) to inject
user passwords from K8s Secret instead of hardcoding them in ConfigMap.

- realm-configmap.yaml: passwords replaced with $(env:KC_INFRA_ADMIN_PASSWORD)
  and $(env:KC_INFRA_CLAUDE_PASSWORD)
- keycloak ArgoCD app: added keycloakConfigCli.extraEnvVarsSecret
- Secrets sourced from OpenBao via create-keycloak-secrets.sh

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 13:24:44 +01:00
2026-02-14 08:46:58 +01:00

k8s-apps

ArgoCD application manifests (Phase 6 PoC)

Description
ArgoCD GitOps manifests — app-of-apps, Helm values, infra configs (production)
Readme 692 KiB
Languages
Smarty 100%