argocd.yml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: argocd
  namespace: argocd
  annotations:
    argocd.argoproj.io/sync-options: Prune=true
    argocd.argoproj.io/sync-wave: "-1"
spec:
  project: exphost
  source:
    repoURL: 'https://argoproj.github.io/argo-helm'
    targetRevision: 7.3.9
    chart: argo-cd
    helm:
      values: |
        controller:
          metrics:
            enabled: true
            serviceMonitor:
              enabled: true
        server:
          extraArgs:
            - --insecure
          metrics:
            enabled: true
            serviceMonitor:
              enabled: true
          ingress:
            enabled: true
            hostname: argocd.{{ .Values.domain}}
            tls: true
            #https: false
            annotations:
              cert-manager.io/cluster-issuer: acme-issuer
          ingressGrpc:
            enabled: false
            hostname: argocd.{{ .Values.domain}}
            tls: true
            #https: false
        config:
          cm:
            url: https://argocd.{{ .Values.domain }}
            oidc.config: |
              name: dex
              issuer: "https://auth.{{ .Values.domain }}/dex"
              clientID: argo
              cliClientID: argocli
              clientSecret: nY4pHGFH0dXKARUWwsxh1Q==
              requestedIDTokenClaims:
                groups:
                  essential: true
              requestedScopes:
                - openid
                - profile
                - email
                - groups
          rbac:
            policy.csv: |
              g, argo-admins, role:admin
        repoServer:
          metrics:
            enabled: true
            serviceMonitor:
              enabled: true
  destination:
    server: 'https://kubernetes.default.svc'
    namespace: argocd
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
    syncOptions:
      - CreateNamespace=true