From 5d22691c3e9441afe82cb93cae945e426bd30b2c Mon Sep 17 00:00:00 2001
From: Rock <locartrock@gmail.com>
Date: Wed, 7 Oct 2026 03:46:01 +0000
Subject: [PATCH] chore(oidc): one-shot bootstrap - restart apiservers to
 initialise the OIDC authenticator

k8s/argocd/apps/99-oidc-bootstrap.yaml
---
 k8s/argocd/apps/99-oidc-bootstrap.yaml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 k8s/argocd/apps/99-oidc-bootstrap.yaml

diff --git a/k8s/argocd/apps/99-oidc-bootstrap.yaml b/k8s/argocd/apps/99-oidc-bootstrap.yaml
new file mode 100644
index 0000000..532d512
--- /dev/null
+++ b/k8s/argocd/apps/99-oidc-bootstrap.yaml
@@ -0,0 +1,20 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: oidc-bootstrap
+  namespace: argocd
+  annotations:
+    argocd.argoproj.io/sync-wave: "5"
+spec:
+  project: homelab
+  source:
+    repoURL: https://forgejo.riotpiao.com/riotpiao-poimen/homelab.git
+    targetRevision: main
+    path: k8s/infra/oidc-bootstrap
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: kube-system
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
\ No newline at end of file