global:
    domain: cd.brunner.ninja
    hostAliases:
    - ip: 10.97.126.146
      hostnames:
      - brunner.ninja
      - code.brunner.ninja

crds:
    install: true

configs:
    cm:
      oidc.config: |
        name: Authentik
        issuer: https://auth.brunner.ninja/application/o/argocd/
        clientID: argocd
        clientSecret: $argocd-oidc:client-secret
        requestedScopes: ["openid", "profile", "email", "groups"]
        requestedIDTokenClaims:
          groups:
            essential: true
    rbac:
      policy.csv: |
        g, authentik Admins, role:admin
      policy.default: ''
      scopes: '[groups]'
    secret:
      createSecret: false
    params:
      server.insecure: true

notifications:
    secret:
      create: false

redisSecretInit:
    enabled: false

server:
    ingress:
      enabled: true
      annotations:
        traefik.ingress.kubernetes.io/router.entrypoints: websecure