#
# See:
# - https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/keycloak/
# - argocd-rbac-cm.yaml
# - argocd-secret.yaml
#
apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-cm
  labels:
    app.kubernetes.io/name: argocd-cm
    app.kubernetes.io/part-of: argocd
data:
  url: http://kitt4sme.collab-cloud.eu/argocd
  oidc.config: |
    name: Keycloak
    issuer: http://kitt4sme.collab-cloud.eu/auth/realms/master
    clientID: argocd
    clientSecret: $oidc.keycloak.clientSecret
    requestedScopes: ["openid", "profile", "email", "groups"]

# NOTE
# 1. Client secret lookup. Argo CD looks up any key starting with `$`
# in the `argocd-secret` K8s secret.
# See:
# - https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/#sso-further-reading
