Session
You are not signed in yet.
Go app + Keycloak + Vault + ArgoCD
This page proves the full path: Gitea Actions builds the image, Harbor stores it,
ArgoCD deploys it into demo, Keycloak handles OIDC login,
and the application receives runtime secrets from Vault via External Secrets.
Vault Secret
Vault path: secret/demo/go-app/app
Resolved in pod: 11c4********************************************************97e5
The app never stores this value in git. It is injected at runtime from Vault by External Secrets.
OIDC
Issuer: https://keycloak.crashpoint.ru/realms/homelab
Client: demo-go-app
Base URL: https://demo-go.k8s.crashpoint.ru