Allow setting volume mounts for dex container

[SebastianJ91]

Is your feature request related to a problem? Please describe.
For now it's not possible to mount custom root-ca certificates to the dex container for allowing OIDC connections to servers secured by a private CA.

Describe the solution you'd like
Add new parameters in ArgoCD crd for modifying the dex deployment:

• .spec.sso.dex.volumes
• .spec.sso.dex.volumeMounts

Similar settings are already existing for other argocd deployments e.g.

• .spec.controller.volumes and
• .spec.controller.volumeMounts

Describe alternatives you've considered
As a workaround it is possible:

• to disable verifying certificates in the dex config. But this isn't secure.
• Volume mounting is also possible with a manual customization of the deployment manifest, after it was created by the operator. But this could lead to a loss of the mount after changing dex config in the ArgoCD crd

[svghadi]

Hi @SebastianJ91 , I will look into the feasibility and get back to you on this.

[svghadi]

Contributions for this enhancement are welcome. A similar functionality was introduced for the appset-controller deployment in #1563, which can be used as a reference.

[miinsun]

i'm going to handle this issue!

[jacksonporter]

This is a huge missing feature for me as well, and I see the PR is close - anything I can help with?