---
apiVersion: codemowers.cloud/v1beta1
kind: OIDCClient
metadata:
  name: argocd
  namespace: argocd
spec:
  displayName: Argo CD
  uri: https://argocd.k-space.ee
  redirectUris:
    - https://argocd.k-space.ee/auth/callback
    - http://localhost:8085/auth/callback
  allowedGroups:
    - k-space:kubernetes:admins
  grantTypes:
    - authorization_code
    - refresh_token
  responseTypes:
    - code
  availableScopes:
    - openid
    - profile
  pkce: false
  secretMetadata:
    labels:
      # Required, else ArgoCD will "Config referenced but key does not exist in secret"
      app.kubernetes.io/part-of: argocd