From 436abf378209323ae6a57b753e34531f4d226bef Mon Sep 17 00:00:00 2001
From: Khue Doan <khuedoan98@gmail.com>
Date: Fri, 24 Dec 2021 14:40:29 +0700
Subject: [PATCH] feat(argocd): enable read-only anonymous access

---
 bootstrap/argocd/argocd-cm-patch.yaml      | 1 +
 bootstrap/argocd/argocd-rbac-cm-patch.yaml | 6 ++++++
 bootstrap/argocd/kustomization.yaml        | 1 +
 3 files changed, 8 insertions(+)
 create mode 100644 bootstrap/argocd/argocd-rbac-cm-patch.yaml

diff --git a/bootstrap/argocd/argocd-cm-patch.yaml b/bootstrap/argocd/argocd-cm-patch.yaml
index 4e9700be..f200bd24 100644
--- a/bootstrap/argocd/argocd-cm-patch.yaml
+++ b/bootstrap/argocd/argocd-cm-patch.yaml
@@ -3,6 +3,7 @@ kind: ConfigMap
 metadata:
   name: argocd-cm
 data:
+  users.anonymous.enabled: "true"
   resource.customizations.health.argoproj.io_Application: |
     hs = {}
     hs.status = "Progressing"
diff --git a/bootstrap/argocd/argocd-rbac-cm-patch.yaml b/bootstrap/argocd/argocd-rbac-cm-patch.yaml
new file mode 100644
index 00000000..1877d7d1
--- /dev/null
+++ b/bootstrap/argocd/argocd-rbac-cm-patch.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-rbac-cm
+data:
+  policy.default: role:readonly
diff --git a/bootstrap/argocd/kustomization.yaml b/bootstrap/argocd/kustomization.yaml
index 245ace47..5c7f1844 100644
--- a/bootstrap/argocd/kustomization.yaml
+++ b/bootstrap/argocd/kustomization.yaml
@@ -10,5 +10,6 @@ resources:
 patches:
 - path: argocd-server-deployment-patch.yaml
 - path: argocd-cm-patch.yaml
+- path: argocd-rbac-cm-patch.yaml
 
 namespace: argocd