{{- if and .Values.commons.auth.enabled (eq .Values.commons.auth.type "authentik") }}
---
apiVersion: v1
kind: Secret
metadata:
  name: monitoring-grafana-auth-generic-oauth
data:
  client_id: {{ .Values.grafana.auth.authentik.clientID | default (derivePassword 1 "long" .Values.commons.masterPassword "grafana" "clientID") | b64enc }}
  client_secret: {{ .Values.grafana.auth.authentik.clientSecret | default (derivePassword 1 "long" .Values.commons.masterPassword "grafana" "clientSecret") | b64enc }}
{{- end }}