forked from roger/k3s-cluster
The platform-engineer ArgoCD account was created in argocd-cm.yaml but had no RBAC role binding, causing 403 permission denied on all API calls to /api/v1/applications/<name>. This adds argocd-rbac-cm.yaml granting the platform-engineer role full access to applications, projects, clusters, and repositories.