enable auth gateway in production

charts/dashboard/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: dashboard
 description: A dashboard for Diamond workflows
 type: application
-version: 0.3.32
+version: 0.3.33
 appVersion: 0.1.16
 dependencies:
   - name: common

charts/dashboard/values.yaml

@@ -3,12 +3,12 @@ configuration:
   keycloakRealm: dls
   keycloakClient: workflows-dashboard
   keycloakScope: "openid profile posix-uid email"
-  graphUrl: https://workflows.diamond.ac.uk/graphql
-  graphWsUrl: wss://workflows.diamond.ac.uk/graphql/ws
+  graphUrl: https://workflows.diamond.ac.uk/api
+  graphWsUrl: wss://workflows.diamond.ac.uk/api/ws
   sourceDir: "/usr/share/nginx/html"
-  useAuthGateway: "false"
+  useAuthGateway: "true"
   authGatewayLoginUrl: https://workflows.diamond.ac.uk/auth
-  logoutUrl: https://identity.diamond.ac.uk/realms/dls/protocol/openid-connect/logout
+  logoutUrl: https://workflows.diamond.ac.uk/auth/logout
 
 image:
   registry: ghcr.io

charts/workflows/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: workflows
 description: Data Analysis workflow orchestration
 type: application
-version: 0.13.65
+version: 0.13.66
 dependencies:
   - name: argo-workflows
     repository: https://argoproj.github.io/argo-helm

charts/workflows/values.yaml

@@ -287,7 +287,7 @@ authenticatedWorkflows:
   # Enables auth-broker + Envoy sidecar injection
   # Requires the auth-broker service to be deployed in the auth-broker namespace
   envoy:
-    enabled: false
+    enabled: true
     authBrokerServerUri: http://auth-broker.auth-broker.svc.cluster.local:8080
     authBrokerServerSocketAddress: auth-broker.auth-broker.svc.cluster.local
     authBrokerServerSocketPort: 8080