Configure Github SSO login for ArgoCD

.gitignore

@@ -1,2 +1,3 @@
 certs
-spicy-secrets/**
+spicy-secrets/**
+**/charts

app-set-prod.yaml

@@ -33,8 +33,8 @@ spec:
         helm:
           ignoreMissingValueFiles: true
           valueFiles:
-          - /config/prod.yaml
-
+          - '/config/prod.yaml'
+          - '/{{path}}/values-prod.yaml'
 
 ---
 apiVersion: argoproj.io/v1alpha1
@@ -72,4 +72,4 @@ spec:
           ignoreMissingValueFiles: true
           valueFiles:
           - '/config/prod.yaml'
-          - '{{path}}/values.yaml'
+          - '/{{path}}/values-prod.yaml'

app-set-test.yaml

@@ -34,6 +34,7 @@ spec:
           ignoreMissingValueFiles: true
           valueFiles:
           - /config/test.yaml
+          - '/{{path}}/values-test.yaml'
 
 
 ---
@@ -71,5 +72,5 @@ spec:
         helm:
           ignoreMissingValueFiles: true
           valueFiles:
-          - '/config/test.yaml'
-          - '{{path}}/values.yaml'
+          - /config/test.yaml
+          - '/{{path}}/values-test.yaml'

cluster/argocd/templates/secret.yaml

@@ -0,0 +1,17 @@
+apiVersion: secrets.infisical.com/v1alpha1
+kind: InfisicalSecret
+metadata:
+  name: dex-github
+  namespace: faf-ops
+spec:
+  authentication:
+    serviceToken:
+      serviceTokenSecretReference:
+        secretName: infisical-service-token
+        secretNamespace: faf-ops
+      secretsScope:
+        envSlug: {{.Values.infisicalSlug}}
+        secretsPath: "/argocd"
+  managedSecretReference:
+    secretName: argocd
+    secretNamespace: dex-github

cluster/argocd/values-prod.yaml

@@ -0,0 +1,19 @@
+argocd:
+  dex.config: |
+    connectors:
+    - type: gitlab
+      # Required field for connector id.
+      id: github
+      # Required field for connector name.
+      name: GitHub
+      config:
+        clientID: 838e6d390d5cf6932ca5
+        clientSecret: $dex-github:GITHUB_CLIENT_SECRET
+        orgs:
+          - name: FAForever
+            # A white list of teams. Only include group claims for these teams.
+            teams:
+              - argocd-test
+          # Flag which indicates that all user groups and teams should be loaded.
+          loadAllGroups: false
+          useLoginAsID: false

cluster/argocd/values.yaml

@@ -0,0 +1,3 @@
+argocd:
+  podAnnotations:
+    reloader.stakater.com/auto: "true"