init argo config

argocd/argocd-cm.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-cm
+  namespace: argocd
+data:
+  url: https://argo.k8s.bittehackmichnicht.de
+  oidc.config: |
+    name: Keycloak
+    issuer: https://keycloak.controller.bittehackmichnicht.de
+    clientID: argocd
+    # clientSecret is provided via Secret argocd-oidc-secret in namespace argocd

argocd/argocd-istio.yaml

@@ -0,0 +1,38 @@
+apiVersion: networking.istio.io/v1beta1
+kind: Gateway
+metadata:
+  name: argocd-gateway
+  namespace: argocd
+spec:
+  selector:
+    istio: ingressgateway
+  servers:
+    - port:
+        number: 443
+        name: https-argocd
+        protocol: HTTPS
+      hosts:
+        - argo.k8s.bittehackmichnicht.de
+      tls:
+        mode: PASSTHROUGH
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: argocd-vs
+  namespace: argocd
+spec:
+  hosts:
+    - argo.k8s.bittehackmichnicht.de
+  gateways:
+    - argocd-gateway
+  tls:
+    - match:
+        - port: 443
+          sniHosts:
+            - argo.k8s.bittehackmichnicht.de
+      route:
+        - destination:
+            host: argocd-server.argocd.svc.cluster.local
+            port:
+              number: 443

argocd/argocd-self-application.yaml

@@ -0,0 +1,18 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: argocd-self
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://gitea.controller.bittehackmichnicht.de/argocd/kubernetes-config.git
+    targetRevision: main
+    path: argocd
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: argocd
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

argocd/kustomization.yaml

@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
+  - argocd-cm.yaml
+  - argocd-istio.yaml
+  - argocd-self-application.yaml