apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-cm
  namespace: argocd
  labels:
    app.kubernetes.io/name: argocd-cm
    app.kubernetes.io/part-of: argocd
data:
  # Serve HTTP (no redirect to HTTPS) so the TLS-terminating Traefik ingress works.
  # Without this, argocd-server redirects HTTP->HTTPS, causing an infinite
  # redirect loop behind the ingress (argocd.rogi.casa unreachable).
  server.insecure: "true"

  # add an additional local user with apiKey and login capabilities
  #   apiKey - allows generating API keys
  #   login - allows to login using UI
  accounts.roger: apiKey, login
  accounts.platform-engineer: apiKey, login