stack.basicstack.de/apps/argocd
CTO Agent a95e638f6b Add Argo CD installation manifests with Pocket ID SSO
- Downloaded upstream Argo CD install.yaml from stable branch
- Customized for basicstack.de cluster:
  - Disabled dex deployment (using Pocket ID OIDC instead)
  - Added --insecure flag to argocd-server (TLS at Traefik ingress)
  - Configured OIDC integration with auth.basicstack.de
  - Added RBAC policy mapping argo_admins group to admin role
  - Mounted OIDC client credentials from argocd-oidc-secret
- Created Traefik ingress for argo.basicstack.de with cert-manager TLS

Sealed secrets for OIDC and repository credentials already in place.
Ready for deployment per DEV-249 plan.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-12 09:19:28 +00:00
..
argocd-ingress.yaml Add Argo CD installation manifests with Pocket ID SSO 2026-07-12 09:19:28 +00:00
argocd-install.yaml Add Argo CD installation manifests with Pocket ID SSO 2026-07-12 09:19:28 +00:00
argocd-oidc-secret-sealed.yaml Add Argo CD sealed secrets for OIDC and repository access 2026-07-12 09:19:28 +00:00
repo-basicstack-org-secret-sealed.yaml Add Argo CD sealed secrets for OIDC and repository access 2026-07-12 09:19:28 +00:00
repo-stack-basicstack-de-secret-sealed.yaml Add Argo CD sealed secrets for OIDC and repository access 2026-07-12 09:19:28 +00:00