From fcec50f08b23c08500d96579ef3b20e798c76df9 Mon Sep 17 00:00:00 2001
From: JonaKl <jona.klaess@rh-campus.de>
Date: Tue, 17 Mar 2026 15:28:15 +0100
Subject: [PATCH] init argo config

---
 argocd/argocd-cm.yaml               | 12 +++++++++
 argocd/argocd-istio.yaml            | 38 +++++++++++++++++++++++++++++
 argocd/argocd-self-application.yaml | 18 ++++++++++++++
 argocd/kustomization.yaml           |  8 ++++++
 4 files changed, 76 insertions(+)
 create mode 100644 argocd/argocd-cm.yaml
 create mode 100644 argocd/argocd-istio.yaml
 create mode 100644 argocd/argocd-self-application.yaml
 create mode 100644 argocd/kustomization.yaml

diff --git a/argocd/argocd-cm.yaml b/argocd/argocd-cm.yaml
new file mode 100644
index 0000000..0188893
--- /dev/null
+++ b/argocd/argocd-cm.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-cm
+  namespace: argocd
+data:
+  url: https://argo.k8s.bittehackmichnicht.de
+  oidc.config: |
+    name: Keycloak
+    issuer: https://keycloak.controller.bittehackmichnicht.de
+    clientID: argocd
+    # clientSecret is provided via Secret argocd-oidc-secret in namespace argocd
diff --git a/argocd/argocd-istio.yaml b/argocd/argocd-istio.yaml
new file mode 100644
index 0000000..4c0ee1b
--- /dev/null
+++ b/argocd/argocd-istio.yaml
@@ -0,0 +1,38 @@
+apiVersion: networking.istio.io/v1beta1
+kind: Gateway
+metadata:
+  name: argocd-gateway
+  namespace: argocd
+spec:
+  selector:
+    istio: ingressgateway
+  servers:
+    - port:
+        number: 443
+        name: https-argocd
+        protocol: HTTPS
+      hosts:
+        - argo.k8s.bittehackmichnicht.de
+      tls:
+        mode: PASSTHROUGH
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: argocd-vs
+  namespace: argocd
+spec:
+  hosts:
+    - argo.k8s.bittehackmichnicht.de
+  gateways:
+    - argocd-gateway
+  tls:
+    - match:
+        - port: 443
+          sniHosts:
+            - argo.k8s.bittehackmichnicht.de
+      route:
+        - destination:
+            host: argocd-server.argocd.svc.cluster.local
+            port:
+              number: 443
diff --git a/argocd/argocd-self-application.yaml b/argocd/argocd-self-application.yaml
new file mode 100644
index 0000000..11b1592
--- /dev/null
+++ b/argocd/argocd-self-application.yaml
@@ -0,0 +1,18 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: argocd-self
+  namespace: argocd
+spec:
+  project: default
+  source:
+    repoURL: https://gitea.controller.bittehackmichnicht.de/argocd/kubernetes-config.git
+    targetRevision: main
+    path: argocd
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: argocd
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
diff --git a/argocd/kustomization.yaml b/argocd/kustomization.yaml
new file mode 100644
index 0000000..2e17bd8
--- /dev/null
+++ b/argocd/kustomization.yaml
@@ -0,0 +1,8 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml
+  - argocd-cm.yaml
+  - argocd-istio.yaml
+  - argocd-self-application.yaml