From 2ee6fa49fd6034df94157e7f66483542f43084da Mon Sep 17 00:00:00 2001
From: nutcas3 <mauricee423@gmail.com>
Date: Fri, 17 Apr 2026 17:19:06 +0300
Subject: [PATCH] feat: Add ArgoCD operator installation manifests with OIDC
 authentication and namespace configuration

- Add ArgoCD custom resource with server route enabled and annotation-based resource tracking
- Configure Dex SSO provider with OIDC connector for OpenID Connect authentication
- Add OIDC client configuration with openid, profile, email, groups scopes
- Add argocd-secret with placeholder for OIDC client secret
- Add argocd namespace with telecom-platform labels and gitops component annotation
- Configure namespace with gitops managed-by annotation for platform integration
---
 deployments/argocd/argocd-install.yaml   | 36 ++++++++++++++++++++++++
 deployments/argocd/argocd-namespace.yaml | 10 +++++++
 2 files changed, 46 insertions(+)
 create mode 100644 deployments/argocd/argocd-install.yaml
 create mode 100644 deployments/argocd/argocd-namespace.yaml

diff --git a/deployments/argocd/argocd-install.yaml b/deployments/argocd/argocd-install.yaml
new file mode 100644
index 0000000..fe7ada1
--- /dev/null
+++ b/deployments/argocd/argocd-install.yaml
@@ -0,0 +1,36 @@
+apiVersion: argoproj.io/v1alpha1
+kind: ArgoCD
+metadata:
+  name: argocd
+  namespace: argocd
+spec:
+  server:
+    route:
+      enabled: true
+  controller:
+    processors: {}
+    resourceTrackingMethod: annotation
+  repo:
+    mtls: {}
+  sso:
+    provider: dex
+    dex:
+      config: |
+        connectors:
+        - type: oidc
+          id: oidc
+          name: OpenID Connect
+          config:
+            issuer: https://your-oidc-provider.com
+            clientID: argocd
+            clientSecret: $oidc.clientSecret
+            requestedScopes: ["openid", "profile", "email", "groups"]
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: argocd-secret
+  namespace: argocd
+type: Opaque
+stringData:
+  oidc.clientSecret: "your-oidc-client-secret"
diff --git a/deployments/argocd/argocd-namespace.yaml b/deployments/argocd/argocd-namespace.yaml
new file mode 100644
index 0000000..a2b5058
--- /dev/null
+++ b/deployments/argocd/argocd-namespace.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: argocd
+  labels:
+    name: argocd
+    app.kubernetes.io/part-of: telecom-platform
+    app.kubernetes.io/component: gitops
+  annotations:
+    telecom-platform.io/managed-by: "gitops"