feat: pull argoproj-labs/argocd-operator#555 (RH-SSO enhancements)

[iam-veeramalla]

What type of PR is this?

/kind enhancement

What does this PR do / why we need it:

pulls argoproj-labs/argocd-operator#555

This PR adds the below enhancements.

• Upgrades the default version of RH-SSO to 7.5.1
• Adds support to login with kube:admin OpenShift User.
• With this PR, RH-SSO can fetch the group details of OpenShift Users(You should see the group details of the logged in user in the Argo CD console). This will help admins define Group Level RBAC for their OpenShift groups.
  KEYCLOAK-18128 Keycloak cannot fetch group claims from openshift keycloak/keycloak#8381
• Kube:admin by default you only have. Not working previously. not an OS user.
  KEYCLOAK-19079 Add special case for kubeadmin without uid and OCP4 keycloak/keycloak#8428
• RHSSO works in proxy enabled cluster with no additional or manual configuration.
  KEYCLOAK-19080 Simplify the RHSSO setup in an OpenShift Disconnected cluster keycloak/keycloak#8559

More technical details

• Removed hardcoded OIDC client secrets and replaced them by generated random strings. These client secrets do not need to be stored.
• Added KeycloakIdentityProviderMapper to workaround Add support for identityProviderMappers in KeycloakRealm CR keycloak/keycloak-operator#471. Without the workaround, tokens can't be translated to credentials that contain the group identity.
• Propagated proxy environment variables from operator to Keycloak containers so that outbound calls can go through cluster proxy if cluste proxy is configured.
• Delete OAuth client using foreground propagation policy to ensure that the garbage collector removes all instantiated objects before the TemplateInstance itself disappears.
• Add extra Delete OAuth client calls to workaround OAuthClient does not get deleted intermittently. openshift/client-go#209
• Add retries to handle RHSSO image upgrade

For more information please refer
argoproj-labs/argocd-operator#555

[chetan-rns]

/lgtm
/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: chetan-rns

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [chetan-rns]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment