From f186c8f060153640cfac13142da68523ed5ab8b3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dani=C3=ABl=20Groothuis?= <daniel.groothuis@trimm.nl>
Date: Thu, 23 Oct 2025 11:41:02 +0200
Subject: [PATCH] fix(argocd): Modified patches to make deployment cluster wide

---
 manifests/artemis/argocd/kustomization.yaml | 34 +++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/manifests/artemis/argocd/kustomization.yaml b/manifests/artemis/argocd/kustomization.yaml
index 639d394..f06dc35 100644
--- a/manifests/artemis/argocd/kustomization.yaml
+++ b/manifests/artemis/argocd/kustomization.yaml
@@ -82,3 +82,37 @@ patches:
         apiGroup: rbac.authorization.k8s.io
         kind: ClusterRole
         name: argocd-application-controller
+  - target:
+      kind: ClusterRole
+      name: argocd-server
+    patch: |-
+      apiVersion: rbac.authorization.k8s.io/v1
+      kind: ClusterRole
+      metadata:
+        name: argocd-server
+      rules:
+        - apiGroups: ["argoproj.io"]
+          resources: ["applications", "applications/status", "applications/finalizers"]
+          verbs: ["get", "list", "watch", "update", "patch", "delete"]
+        - apiGroups: ["argoproj.io"]
+          resources: ["appprojects"]
+          verbs: ["get", "list", "watch"]
+        - apiGroups: ["*"]
+          resources: ["namespaces", "events"]
+          verbs: ["get", "list", "watch"]
+  - target:
+      kind: ClusterRoleBinding
+      name: argocd-server
+    patch: |-
+      apiVersion: rbac.authorization.k8s.io/v1
+      kind: ClusterRoleBinding
+      metadata:
+        name: argocd-server
+      subjects:
+        - kind: ServiceAccount
+          name: argocd-server
+          namespace: argocd
+      roleRef:
+        apiGroup: rbac.authorization.k8s.io
+        kind: ClusterRole
+        name: argocd-server