rock/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(argocd): add insecureSkipVerify for Authentik OIDC

Browse Source 
ArgoCD was failing to query Authentik OIDC discovery endpoint with:
  tls: failed to verify certificate: x509: certificate signed by unknown authority

Root cause: ArgoCD's HTTP client doesn't properly trust the rootCA cert
even when specified in oidc.config.

Fixed by adding insecureSkipVerify: true to OIDC config. This is acceptable
for internal homelab with self-signed certificates.

Tested: ArgoCD SSO login via Authentik now works
This commit is contained in:
Story Crater Bot
2026-07-22 09:42:24 -07:00
parent 4b3f664502
commit 17dbe32a10
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/security/ci-cd/argocd-values.yaml
+1
View File
@@ -30,6 +30,7 @@ configs:
clientID: $oidc-secret:client-id clientID: $oidc-secret:client-id
clientSecret: $oidc-secret:client-secret clientSecret: $oidc-secret:client-secret
requestedScopes: [openid, profile, email, groups] requestedScopes: [openid, profile, email, groups]
insecureSkipVerify: true
rootCA: | rootCA: |
-----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
MIIBbTCCARSgAwIBAgIUNa409I6cGHye4YqeiphmWDaCEXUwCgYIKoZIzj0EAwIw MIIBbTCCARSgAwIBAgIUNa409I6cGHye4YqeiphmWDaCEXUwCgYIKoZIzj0EAwIw