Add OIDC to argocd

argocd/overlays/argocd-cm.patch.yaml

@@ -6,7 +6,16 @@ metadata:
     app.kubernetes.io/name: argocd-cm
     app.kubernetes.io/part-of: argocd
 data:
-  # kustomize.buildOptions: "--enable-helm" 
+  url: https://argocd.rubenhensen.nl
+  oidc.config: |
+    name: Authentik
+    issuer: https://authentik.rubenhensen.nl/application/o/argocd/
+    clientID: argocd
+    clientSecret: $oidc.authentik.clientSecret
+    requestedScopes:
+      - openid
+      - profile
+      - email
   resource.exclusions: |
     - apiGroups:
       - "velero.io"

argocd/overlays/argocd-rbac-cm.patch.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-rbac-cm
+  labels:
+    app.kubernetes.io/name: argocd-rbac-cm
+    app.kubernetes.io/part-of: argocd
+data:
+  policy.csv: |
+    g, ik@rubenhensen.nl, role:admin
+  scopes: "[email]"