[EPIC] Secret Handling

[sylus]

Overview

Even though some components that have secrets are merged in. This section is just to highlight some of the secret interpolation handling we still have to do and not forget about.

• Common Component: oidc-authservice #115 (configmap)

[blairdrummond]

Where secrets like this are needed, I think it might not be crazy just to create them in terraform. What do you think @sylus ?

[sylus]

Yeah so i run this kustomize and then afterwards I apply this configmap manually but argo can do it and will ignore this confgmap on future syncs.

apiVersion: v1
kind: ConfigMap
metadata:
  name: oidc-authservice-parameters
  namespace: istio-system
  annotations:
    argocd.argoproj.io/compare-options: IgnoreExtraneous

[sylus]

So I think all we need to do know is call the following in ArgoCD and it should just work:

https://github.com/StatCan/aaw-kubeflow-manifests/blob/main/kustomize/stacks/argo/kubeflow.yaml

[sylus]

@blairdrummond ^ something next week to look at.

[sylus]

This should work for now and can revisit with Vault in the future!