From afb46e8d682b6803cf767caf2573b12da8467884 Mon Sep 17 00:00:00 2001
From: Philip Haupt <“der.mad.mob@gmail.com”>
Date: Thu, 8 May 2025 00:00:11 +0200
Subject: [PATCH] argocd

---
 argocd/manifests/base/kustomization.yaml     | 21 ++++++++++++++++++++
 argocd/manifests/ha/kustomization.yaml       | 21 ++++++++++++++++++++
 argocd/manifests/insecure/kustomization.yaml | 10 ++++++++++
 3 files changed, 52 insertions(+)
 create mode 100644 argocd/manifests/base/kustomization.yaml
 create mode 100644 argocd/manifests/ha/kustomization.yaml
 create mode 100644 argocd/manifests/insecure/kustomization.yaml

diff --git a/argocd/manifests/base/kustomization.yaml b/argocd/manifests/base/kustomization.yaml
new file mode 100644
index 0000000..24f97f6
--- /dev/null
+++ b/argocd/manifests/base/kustomization.yaml
@@ -0,0 +1,21 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - https://raw.githubusercontent.com/argoproj/argo-cd/refs/tags/v2.14.11/manifests/install.yaml
+
+configMapGenerator:
+  - name: argocd-cm
+    behavior: merge
+    literals:
+      - "timeout.reconciliation=15s"
+
+patches:
+  # reset the crbs to `subject.namespace: default`, so that argo-cd will later change them to the actual ns
+  - target:
+      group: rbac.authorization.k8s.io
+      version: v1
+      kind: ClusterRoleBinding
+    patch: |-
+      - op: replace
+        path: /subjects/0/namespace
+        value: default
diff --git a/argocd/manifests/ha/kustomization.yaml b/argocd/manifests/ha/kustomization.yaml
new file mode 100644
index 0000000..f0288ba
--- /dev/null
+++ b/argocd/manifests/ha/kustomization.yaml
@@ -0,0 +1,21 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/ha/install.yaml
+
+configMapGenerator:
+  - name: argocd-cm
+    behavior: merge
+    literals:
+      - "timeout.reconciliation=15s"
+
+patches:
+  # reset the crbs to `subject.namespace: default`, so that argo-cd will later change them to the actual ns
+  - target:
+      group: rbac.authorization.k8s.io
+      version: v1
+      kind: ClusterRoleBinding
+    patch: |-
+      - op: replace
+        path: /subjects/0/namespace
+        value: default
diff --git a/argocd/manifests/insecure/kustomization.yaml b/argocd/manifests/insecure/kustomization.yaml
new file mode 100644
index 0000000..7516eb6
--- /dev/null
+++ b/argocd/manifests/insecure/kustomization.yaml
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+ - ../base
+
+configMapGenerator:
+  - name: argocd-cmd-params-cm
+    behavior: merge
+    literals:
+      - "server.insecure=true"