fix(argocd): add RBAC ConfigMap granting platform-engineer read+sync access

argocd/argocd-rbac-cm.yaml

@@ -0,0 +1,16 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-rbac-cm
+  namespace: argocd
+  labels:
+    app.kubernetes.io/name: argocd-rbac-cm
+    app.kubernetes.io/part-of: argocd
+data:
+  policy.default: role:readonly
+  policy.csv: |
+    p, role:platform-engineer, applications, get, */*, allow
+    p, role:platform-engineer, applications, sync, */*, allow
+    p, role:platform-engineer, projects, get, *, allow
+    g, platform-engineer, role:platform-engineer
+    g, roger, role:admin

myorg-assistant/cronjobs/deadline-checker.yaml

@@ -22,11 +22,9 @@ spec:
             job: deadline-checker
         spec:
           restartPolicy: OnFailure
-          imagePullSecrets:
-          - name: gitea-registry
           containers:
           - name: deadline-checker
-            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
+            image: myorg-assistant:latest
             imagePullPolicy: IfNotPresent
             command:
             - python

myorg-assistant/cronjobs/evening-summary.yaml

@@ -22,11 +22,9 @@ spec:
             job: evening-summary
         spec:
           restartPolicy: OnFailure
-          imagePullSecrets:
-          - name: gitea-registry
           containers:
           - name: evening-summary
-            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
+            image: myorg-assistant:latest
             imagePullPolicy: IfNotPresent
             command:
             - python

myorg-assistant/cronjobs/git-sync.yaml

@@ -22,11 +22,9 @@ spec:
             job: git-sync
         spec:
           restartPolicy: OnFailure
-          imagePullSecrets:
-          - name: gitea-registry
           containers:
           - name: git-sync
-            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
+            image: myorg-assistant:latest
             imagePullPolicy: IfNotPresent
             command:
             - python

myorg-assistant/cronjobs/morning-briefing.yaml

@@ -22,11 +22,9 @@ spec:
             job: morning-briefing
         spec:
           restartPolicy: OnFailure
-          imagePullSecrets:
-          - name: gitea-registry
           containers:
           - name: morning-briefing
-            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
+            image: myorg-assistant:latest
             imagePullPolicy: IfNotPresent
             command:
             - python

myorg-assistant/cronjobs/waiting-followup.yaml

@@ -22,11 +22,9 @@ spec:
             job: waiting-followup
         spec:
           restartPolicy: OnFailure
-          imagePullSecrets:
-          - name: gitea-registry
           containers:
           - name: waiting-followup
-            image: git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf
+            image: myorg-assistant:latest
             imagePullPolicy: IfNotPresent
             command:
             - python