unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

argocd: drop internal-CA rootCA pin from Authentik oidc.config #439

Merged
benvin merged 1 commits from benvin/argocd-oidc-le-trust into main 2026-08-29 21:52:12 +10:00
Conversation 0 Commits 1 Files Changed 1
+2 -27

1 Commits

Author SHA1 Message Date
unkin-agent 8e508c231e argocd: drop internal-CA rootCA pin from Authentik oidc.config
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details 
identity.unkin.net moved from the internal unkin.net CA to the LetsEncrypt
*.unkin.net wildcard, so pinning the internal root made argocd-server reject
the OIDC discovery handshake (x509: certificate signed by unknown authority).
The stock image trust store already carries the public roots.
 2026-08-29 21:26:39 +10:00