configs.cm.dex.config: staticClients malformed Dex configuration found

[nooperpudd]

Describe the bug

secret:

apiVersion: v1
data:
  # argo-workflows-sso base64
  client-id: YXJnby13b3JrZmxvd3Mtc3Nv
  client-secret: xxx
kind: Secret
metadata:
  annotations:
  name: argo-workflows-sso
  namespace: argocd
type: Opaque

argocd templates:

apiVersion: v1
data:
  admin.enabled: "true"
  application.instanceLabelKey: argocd.argoproj.io/instance
  dex.config: |
    staticClients:
    - id: argo-workflows-sso
      name: Argo Workflow
      redirectURIs:
        - https://workflow.xxx.com/oauth2/callback
      secretEnv: ARGO_WORKFLOWS_SSO_CLIENT_SECRET
  exec.enabled: "true"
  server.rbac.log.enforce.enable: "false"
  statusbadge.enabled: "false"
  timeout.hard.reconciliation: 0s
  timeout.reconciliation: 180s
  url: https://argocd.xxx.com
kind: ConfigMap
metadata:
  annotations:
    meta.helm.sh/release-name: argo-cd
    meta.helm.sh/release-namespace: argocd
  labels:
    app.kubernetes.io/component: server
    app.kubernetes.io/instance: argo-cd
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: argocd-cm
    app.kubernetes.io/part-of: argocd
    app.kubernetes.io/version: v2.13.2
    helm.sh/chart: argo-cd-7.7.11
  name: argocd-cm
  namespace: argocd
  resourceVersion: "14840784"
  uid: 50118cf2-f059-4da1-97ed-b055c07a2df2

dex server

name: dex-server
image: ghcr.io/dexidp/dex:v2.41.1
env:
    - name: ARGO_WORKFLOWS_SSO_CLIENT_SECRET
      valueFrom:
        secretKeyRef:
          key: client-secret
          name: argo-workflows-sso

dex server log

| time="2024-12-27T09:31:53Z" level=info msg="maxprocs: Leaving GOMAXPROCS=4: CPU quota undefined"                                                                                                                                                  
│ time="2024-12-27T09:31:53Z" level=info msg="ArgoCD Dex Server is starting" built="2024-12-11T18:37:15Z" 
| commit=dc43124058130db9a747d141d86d7c2f4aac7bf9 namespace=argocd version=v2.13.2+dc43124                                                  
│ time="2024-12-27T09:31:53Z" level=info msg="Generating self-signed TLS certificate for this session"                                                                                                                                              
│ time="2024-12-27T09:31:53Z" level=info msg="Starting configmap/secret informers"                                                                                                                                                                  
│ time="2024-12-27T09:31:54Z" level=info msg="Configmap/secret informer synced"                                                                                                                                                                     
│ time="2024-12-27T09:31:54Z" level=info msg="0xc0007f2310 subscribed to settings updates"                                                                                                                                                          
│ time="2024-12-27T09:31:54Z" level=fatal msg="malformed Dex configuration found"

Related helm chart

argo-cd

Helm chart version

7.7.11

To Reproduce

argocd config map:

apiVersion: v1
data:
  admin.enabled: "true"
  application.instanceLabelKey: argocd.argoproj.io/instance
  dex.config: |
    staticClients:
    - id: argo-workflows-sso
      name: Argo Workflow
      redirectURIs:
        - https://workflow.xxx.com/oauth2/callback
      secretEnv: ARGO_WORKFLOWS_SSO_CLIENT_SECRET
  exec.enabled: "true"
  server.rbac.log.enforce.enable: "false"
  statusbadge.enabled: "false"
  timeout.hard.reconciliation: 0s
  timeout.reconciliation: 180s
  url: https://argocd.xxx.com
kind: ConfigMap
metadata:
  annotations:
    meta.helm.sh/release-name: argo-cd
    meta.helm.sh/release-namespace: argocd
  labels:
    app.kubernetes.io/component: server
    app.kubernetes.io/instance: argo-cd
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: argocd-cm
    app.kubernetes.io/part-of: argocd
    app.kubernetes.io/version: v2.13.2
    helm.sh/chart: argo-cd-7.7.11
  name: argocd-cm
  namespace: argocd
  resourceVersion: "14840784"
  uid: 50118cf2-f059-4da1-97ed-b055c07a2df2

Expected behavior

what's the right configmap for dex.config?

Screenshots

No response

Additional context

No response

[yu-croco]

Hi @nooperpudd , does argoproj/argo-workflows#6261 help you?

We provide Helm Chart for Argoproj, but we don't focus on the specific feature of them.
If the doc didn't help enough, it's better to open an issue in upstream as well.