apiVersion: v1
kind: Secret
metadata:
  name: argocd-secret
  labels:
    app.kubernetes.io/name: argocd-secret
    app.kubernetes.io/part-of: argocd
type: Opaque
data:
  # bcrypt hash of the admin password and its last modified time (required).
  # Both encoded in Base64.
  # Autogenerated to be the name of the argocd-server pod when missing.
  admin.password: JDJhJDEyJHJ0NE1QbDFrbmtUY1hNWGFKWkx3Wi5xc1Q0SzhLbjJsUG9Wc2UwUlhoM0lNOHRERjJCNnNP
  admin.passwordMtime: MjAyMS0xMS0xOVQxNzo0ODowNFo=

  # Base64-encoded secret of the Argo CD client in Keycloak.
  # We use it to enable Argo CD SSO with Keycloak.
  # See `argocd-cm.yaml` and `argocd-rbac-cm`.
  oidc.keycloak.clientSecret: S3NxUDBwNVRldkJQdGlITE1YVUpCQ2l1Ykd1dGdwaWI=
