From 87e9ba9ef11163966aac92e9d1fbc3038196ea30 Mon Sep 17 00:00:00 2001 From: nick-gorse Date: Tue, 5 May 2026 16:36:43 +0100 Subject: [PATCH] oidc changes --- manifest/overlays/production/argocd-cm-patch.yaml | 1 + manifest/overlays/production/argocd-rbac-cm-patch.yaml | 5 +++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/manifest/overlays/production/argocd-cm-patch.yaml b/manifest/overlays/production/argocd-cm-patch.yaml index e2db20e..f90f005 100644 --- a/manifest/overlays/production/argocd-cm-patch.yaml +++ b/manifest/overlays/production/argocd-cm-patch.yaml @@ -103,3 +103,4 @@ data: requestedScopes: ["openid", "profile", "email", "groups"] requestedIDTokenClaims: {"groups": {"essential": true}} enablePKCEAuthentication: true + logoutURL: https://auth.olb42.com/oidc/v1/end_session diff --git a/manifest/overlays/production/argocd-rbac-cm-patch.yaml b/manifest/overlays/production/argocd-rbac-cm-patch.yaml index d7d64fe..4ec74d6 100644 --- a/manifest/overlays/production/argocd-rbac-cm-patch.yaml +++ b/manifest/overlays/production/argocd-rbac-cm-patch.yaml @@ -4,6 +4,7 @@ metadata: name: argocd-rbac-cm namespace: argocd data: + scopes: '[groups]' policy.csv: | p, role:app-manager, applications, *, */*, allow p, role:app-viewer, applications, get, */*, allow @@ -12,5 +13,5 @@ data: g, argocd_users, role:app-viewer g, mcpserver, role:app-manager g, homepage, role:app-viewer - policy.default: role:readonly - scopes: '[groups]' + policy.default: '' + \ No newline at end of file