From 539df114a029e32763a08d41bbcafc29f0412c5b Mon Sep 17 00:00:00 2001
From: alexandrev-tibco <alexandre.vazquez@cloud.com>
Date: Tue, 12 May 2026 15:40:34 +0200
Subject: [PATCH] feat: add Radar K8s dashboard with Authentik OIDC

---
 apps/radar/values.yaml         | 50 ++++++++++++++++++++++++++++++++++
 argocd/applications/radar.yaml | 25 +++++++++++++++++
 2 files changed, 75 insertions(+)
 create mode 100644 apps/radar/values.yaml
 create mode 100644 argocd/applications/radar.yaml

diff --git a/apps/radar/values.yaml b/apps/radar/values.yaml
new file mode 100644
index 0000000..5dfd2e2
--- /dev/null
+++ b/apps/radar/values.yaml
@@ -0,0 +1,50 @@
+replicaCount: 1
+
+rbac:
+  create: true
+  helm: false
+  secrets: true
+  viewRBAC: true
+  podExec: true
+  podLogs: true
+  portForward: false
+  metrics: true
+  crdGroups:
+    argo: true
+    certManager: true
+    grafana: true
+
+auth:
+  mode: oidc
+  cookieTTL: "8h"
+  oidc:
+    issuerURL: "https://authentik.alexandre-vazquez.cloud/application/o/radar/"
+    clientID: "JVGIUVpCbHh6LWIxgCj0msPSiZ6bREEJgqBWav2r"
+    existingSecret: "radar-oidc"
+    clientSecretKey: "client-secret"
+    redirectURL: "https://radar.alexandre-vazquez.cloud/auth/callback"
+    groupsClaim: "groups"
+    postLogoutRedirectURL: "https://authentik.alexandre-vazquez.cloud/application/o/radar/end-session/"
+
+ingress:
+  enabled: true
+  className: "public"
+  annotations:
+    nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
+  hosts:
+    - host: radar.alexandre-vazquez.cloud
+      paths:
+        - path: /
+          pathType: Prefix
+
+resources:
+  limits:
+    cpu: 500m
+    memory: 512Mi
+  requests:
+    cpu: 100m
+    memory: 128Mi
+
+timeline:
+  storage: memory
+  historyLimit: 10000
diff --git a/argocd/applications/radar.yaml b/argocd/applications/radar.yaml
new file mode 100644
index 0000000..b24e691
--- /dev/null
+++ b/argocd/applications/radar.yaml
@@ -0,0 +1,25 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: radar
+  namespace: argocd
+spec:
+  project: default
+  sources:
+  - repoURL: https://skyhook-io.github.io/helm-charts
+    chart: radar
+    targetRevision: "*"
+    helm:
+      releaseName: radar
+      valueFiles:
+      - $values/apps/radar/values.yaml
+  - repoURL: https://gitea.alexandre-vazquez.cloud/baphemot/gitops.git
+    targetRevision: HEAD
+    ref: values
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: radar
+  syncPolicy:
+    syncOptions:
+    - CreateNamespace=true
+    - ServerSideApply=true