fix: Make Renewal Token Expiry Feature Configurable

akhilnittala · akhilnittala · commit ff34d06a3079 · 2026-07-09T13:00:13.000+05:30
Signed-off-by: akhil nittala &lt;nakhil@redhat.com&gt;
diff --git a/controllers/argocd/dex.go b/controllers/argocd/dex.go
@@ -79,10 +79,10 @@ func needsDexTokenRenewal(secret *corev1.Secret) bool {
 // isDexTokenExpiryFeatureEnabled returns true if Dex token renewal expiry is enabled.
 // Users can set enableDexTokenExpiry: false (default) in the ArgoCD CR to use the legacy non-expiring token approach.
 func isDexTokenExpiryFeatureEnabled(cr *argoproj.ArgoCD) bool {
-	if cr.Spec.EnableDexTokenExpiry == nil {
+	if cr.Spec.SSO.Dex.EnableDexTokenExpiry == nil {
 		return false // Disabled by default (old behavior with non-expiring tokens)
 	}
-	return *cr.Spec.EnableDexTokenExpiry
+	return *cr.Spec.SSO.Dex.EnableDexTokenExpiry
 }
 
 // getDexOAuthClientSecret returns a time-limited Dex OAuth client token via the TokenRequest API.

Original file line number	Diff line number	Diff line change
`@@ -79,10 +79,10 @@ func needsDexTokenRenewal(secret *corev1.Secret) bool {`
`79`	`79`	`// isDexTokenExpiryFeatureEnabled returns true if Dex token renewal expiry is enabled.`
`80`	`80`	`// Users can set enableDexTokenExpiry: false (default) in the ArgoCD CR to use the legacy non-expiring token approach.`
`81`	`81`	`func isDexTokenExpiryFeatureEnabled(cr *argoproj.ArgoCD) bool {`
`82`		`- if cr.Spec.EnableDexTokenExpiry == nil {`
	`82`	`+ if cr.Spec.SSO.Dex.EnableDexTokenExpiry == nil {`
`83`	`83`	`return false // Disabled by default (old behavior with non-expiring tokens)`
`84`	`84`	`}`
`85`		`- return *cr.Spec.EnableDexTokenExpiry`
	`85`	`+ return *cr.Spec.SSO.Dex.EnableDexTokenExpiry`
`86`	`86`	`}`
`87`	`87`
`88`	`88`	`// getDexOAuthClientSecret returns a time-limited Dex OAuth client token via the TokenRequest API.`