fix(dex): remove hard coded values

system/monitoring-system/templates/secret.yaml

@@ -0,0 +1,16 @@
+apiVersion: external-secrets.io/v1beta1
+kind: ExternalSecret
+metadata:
+  name: grafana-secrets
+  namespace: {{ .Release.Namespace }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    name: grafana-secrets
+  data:
+    - secretKey: GRAFANA_SSO_CLIENT_SECRET
+      remoteRef:
+        key: /dex/grafana
+        property: client_secret

system/monitoring-system/values.yaml

@@ -18,18 +18,16 @@ kube-prometheus-stack:
       - name: Loki
         type: loki
         url: http://loki.loki:3100
+    envFromSecret: grafana-secrets
     grafana.ini:
       server:
         root_url: https://grafana.khuedoan.com
-      # TODO disable basic auth
-      # auth.basic:
-      #   disable_login_form: true
       auth.generic_oauth:
         enabled: true
         allow_sign_up: true
         name: Dex
         client_id: grafana-sso
-        client_secret: klZ0sU1EXA5il68lwCOW9kAjCoFFMVINdSuvG951B3Pr
+        client_secret: $__env{GRAFANA_SSO_CLIENT_SECRET}
         scopes: openid profile email groups
         auth_url: https://dex.khuedoan.com/auth
         token_url: https://dex.khuedoan.com/token