From e8c4d6836265232179974e93dc63820c8f335290 Mon Sep 17 00:00:00 2001
From: outductor <inductor.kela+seichi@gmail.com>
Date: Thu, 21 Dec 2023 17:31:51 +0900
Subject: [PATCH] define scope

---
 .../app-of-other-apps/argo-workflows.yaml                  | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/argo-workflows.yaml b/seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/argo-workflows.yaml
index 173506255..8e3c0fd36 100644
--- a/seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/argo-workflows.yaml
+++ b/seichi-onp-k8s/manifests/seichi-kubernetes/apps/cluster-wide-apps/app-of-other-apps/argo-workflows.yaml
@@ -18,14 +18,11 @@ spec:
             - argo-events
         server:
           secure: true
-          rbac:
-            enabled: true
           extraArgs:
             - --auth-mode=sso
           sso:
             enabled: true
             issuer: https://argocd.onp-k8s.admin.seichi.click/api/dex
-            # sessionExpiry defines how long your login is valid for in hours. (optional, default: 10h)
             sessionExpiry: 240h
             clientId:
               name: argo-workflows-sso
@@ -34,8 +31,8 @@ spec:
               name: argo-workflows-sso
               key: client-secret
             redirectUrl: https://argo-workflows.onp-k8s.admin.seichi.click/oauth2/callback
-            rbac:
-              enabled: true
+            scopes:
+              - groups
   destination:
     server: https://kubernetes.default.svc
     namespace: argo