From 3bb78f45be3c78f089dc1779665f419776f44903 Mon Sep 17 00:00:00 2001
From: Christopher Hase <Christopher.Hase@telekom.de>
Date: Fri, 15 Aug 2025 13:28:07 +0200
Subject: [PATCH] feat(sso): introduce argocd sso config

---
 .../stacks/core/argocd/values.yaml                 | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/otc/observability.t09.de/stacks/core/argocd/values.yaml b/otc/observability.t09.de/stacks/core/argocd/values.yaml
index b94f815..5872f22 100644
--- a/otc/observability.t09.de/stacks/core/argocd/values.yaml
+++ b/otc/observability.t09.de/stacks/core/argocd/values.yaml
@@ -5,6 +5,20 @@ configs:
   params:
     server.insecure: true
   cm:
+    oidc.config: |
+      name: FORGEJO
+      issuer: https://dex.observability.t09.de
+      clientID: controller-argocd-dex
+      clientSecret: $dex-argo-client:clientSecret
+      requestedIDTokenClaims:
+        groups:
+          - DevFW
+        essential: true
+      requestedScopes:
+      - openid
+      - profile
+      - email
+      - groups
     application.resourceTrackingMethod: annotation
     timeout.reconciliation: 60s
     resource.exclusions: |