k8s-kaisers-info/gitops-kaisers-info/templates/argo-cd.yaml

apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: "argo-cd"
  namespace: {{ .Values.spec.namespace }}
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  destination:
    namespace: {{ .Values.spec.namespace }}
    name: {{ .Values.spec.destination.name }}
  project: {{ .Values.spec.project }}
  syncPolicy:
    automated:
      prune: true
      selfHeal: true
  source:
    chart: "argo-cd"
    repoURL: "https://argoproj.github.io/argo-helm"
    targetRevision: "3.33.6"
    helm:
      releaseName: "argo-cd"
      values: |
        server:
          ingress: 
            enabled: "true"
            hosts: 
              - "argo-cd.kaisers.info"
            paths:
              - /
            pathType: "Prefix"
            annotations:
              cert-manager.io/cluster-issuer: "letsencrypt-prod"
              traefik.ingress.kubernetes.io/redirect-entry-point: "https"
            tls: 
              - secretName: "argo-cd-kaisers-info-tls"
                hosts:
                - "argo-cd.kaisers.info"
          
          extraArgs:
            - --insecure

          config:
            oidc.config: |
              name: Authentik
              issuer: https://authentik.kaisers.info/TENANT_ID/v2.0
              clientID: $argocd-kaisers-info-secrets:oidc.auth0.clientID
              clientSecret: $argocd-kaisers-info-secrets:oidc.auth0.clientSecret
          #    requestedIDTokenClaims:
          #      groups:
          #        essential: true
          #   requestedScopes:
          #     - openid
          #     - profile
          #     - email