Enabled dex for argocd

k8s/core/argocd/values.yaml

@@ -23,14 +23,22 @@ configs:
     admin.enabled: false
     statusbadge.enabled: true
     timeout.reconciliation: 60s
-    oidc.config: |
+    dex.config: |
-      name: Keycloak
+      connectors:
-      issuer: https://auth.hexor.cy/auth/realms/hexor
+      - type: oidc
-      clientID: $oidc-creds:id
+        id: keycloak
-      clientSecret: $oidc-creds:secret
+        name: Keycloak
-      requestedScopes: ["openid", "profile", "email", "offline_access"]
+        config:
-      requestedIDTokenClaims: {"groups": {"essential": true}}
+          issuer: https://auth.hexor.cy/auth/realms/hexor
-      refreshTokenThreshold: 2m
+          clientID: $oidc-creds:id
+          clientSecret: $oidc-creds:secret
+          insecureEnableGroups: true
+          scopes:
+            - openid
+            - profile
+            - email
+            - offline_access
+          getUserInfo: true
   rbac:
     create: true
     policy.default: ""
@@ -64,7 +72,7 @@ dex:
   replicas: 1
   nodeSelector:
     <<: *nodeSelector
-  enabled: false
+  enabled: true
 
 # Standard Redis disabled because Redis HA is enabled
 redis: