---
apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-cm
  labels:
    app.kubernetes.io/name: argocd-cm
    app.kubernetes.io/part-of: argocd
data:
  dex.config: |
    connectors:
    - name: authentik
      id: authentik
      type: argocd-cm
      config:
        issuer: $argocd-authentik-provider:dex.authentik.issuer
        clientID: $argocd-authentik-app:dex.authentik.clientID
        clientSecret: $argocd-authentik-app:dex.authentik.clientSecret
        scopes:
          - openid
          - profile
          - email
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-rbac-cm
  labels:
    app.kubernetes.io/part-of: argocd
data:
  policy.default: role:readonly
  policy.csv: |
    g, ArgoCD Admins, role:admin