argo-cd:

  global:
    revisionHistoryLimit: 1
    image:
      repository: registry.durp.info/argoproj/argocd
      imagePullPolicy: Always

  configs:
    cm:
      create: true
      annotations: {}
      url: http://argocd.internal.durp.info
      dex.config: |
        connectors:
          - config:
              issuer: https://authentik.durp.info/application/o/argocd
              clientID: dbb8ffc06104fb6e7fac3e4ae7fafb1d90437625
              clientSecret: $client-secret:clientSecret
              insecureEnableGroups: true
              scopes:
                - openid
                - profile
                - email
                - groups
            name: authentik
            type: oidc
            id: authentik

    rbac:
      create: true
      policy.csv: |
        g, ArgoCD Admins, role:admin 
      scopes: "[groups]"