Deploy monitoring stack

cluster/argocd/values.yaml

@@ -83,14 +83,6 @@ configs:
       g, argocd-admins, role:admin
       g, argocd-viewers, role:readonly
 
-  # Secret reference for OIDC credentials
-  # ArgoCD reads $oidc.authentik.clientID and $oidc.authentik.clientSecret
-  # from the argocd-secret Kubernetes secret. We patch it via the ExternalSecret.
-  secret:
-    extra:
-      oidc.authentik.clientID: $argocd-oidc-secret:client-id
-      oidc.authentik.clientSecret: $argocd-oidc-secret:client-secret
-
   # Repository credentials — Gitea SSH
   repositories:
     homelab-repo:
@@ -116,3 +108,7 @@ applicationSet:
 # Disabled — using Authentik as the native OIDC provider
 dex:
   enabled: false
+
+# Disable default admin user
+admin:
+  enabled: false