feat(sso): configure sso for ArgoCD

template/stacks/core/argocd/values.yaml

@@ -5,6 +5,16 @@ configs:
   params:
     server.insecure: true
   cm:
+    oidc.config: |
+      name: FORGEJO
+      issuer: https://{{{ .Env.DOMAIN_DEX }}}
+      clientID: controller-argocd-dex
+      clientSecret: $dex-argo-client:clientSecret
+      requestedScopes:
+      - openid
+      - profile
+      - email
+      - groups
     application.resourceTrackingMethod: annotation
     timeout.reconciliation: 60s
     resource.exclusions: |
@@ -18,10 +28,9 @@ configs:
         - CiliumIdentity
         clusters:
         - "*"
-    accounts.provider-argocd: apiKey
     url: https://{{{ .Env.DOMAIN_ARGOCD }}}
   rbac:
-    policy.csv: 'g, provider-argocd, role:admin'
+    policy.csv: 'g, DevFW, role:admin'
 
   tls:
     certificates:

template/stacks/core/dex/values.yaml

@@ -67,7 +67,7 @@ config:
     - id: controller-argocd-dex
       name: ArgoCD Client
       redirectURIs:
-        - "http://{{{ .Env.DOMAIN_ARGOCD }}}/auth/callback"
+        - "https://{{{ .Env.DOMAIN_ARGOCD }}}/auth/callback"
       secretEnv: "OIDC_DEX_ARGO_CLIENT_SECRET"
     - id: grafana
       redirectURIs: