From 0a676ddbf300cc6d026bb429dbc7e3c3d8146294 Mon Sep 17 00:00:00 2001
From: Jennifer Weir <contact@jenniferpweir.com>
Date: Sat, 9 May 2026 12:39:42 -0400
Subject: [PATCH] feat(argocd): oidc config

---
 manifests/platform/argocd/operator/components/argocd.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/manifests/platform/argocd/operator/components/argocd.yaml b/manifests/platform/argocd/operator/components/argocd.yaml
index 30c9a78..3d23006 100644
--- a/manifests/platform/argocd/operator/components/argocd.yaml
+++ b/manifests/platform/argocd/operator/components/argocd.yaml
@@ -100,12 +100,13 @@ spec:
         memory: 128Mi
     route:
       enabled: true
+  # https://argocd-operator.readthedocs.io/en/latest/reference/argocd/#oidc-config
   oidcConfig: |
     name: azure
     issuer: https://login.microsoftonline.com/<path:projects/648542105177/secrets/azure_tenant_id#azure_tenant_id>/v2.0
     clientID: <path:projects/648542105177/secrets/azure_client_id#azure_client_id>
     clientSecret: <path:projects/648542105177/secrets/azure_client_secret#azure_client_secret>
     # Optional set of OIDC scopes to request. If omitted, defaults to: ["openid", "profile", "email", "groups"]
-    requestedScopes: ["openid", "profile", "email"]
+    requestedScopes: ["openid", "profile", "email", "groups"]
     # Optional set of OIDC claims to request on the ID token.
     requestedIDTokenClaims: {"groups": {"essential": true}}