From 2c9999600c989b21c6e4b603a4fa958430154c0c Mon Sep 17 00:00:00 2001
From: Karan Parashar <whyredfire@gmail.com>
Date: Fri, 25 Sep 2026 02:16:04 +0530
Subject: [PATCH] feat(argocd): Disable local admin account

---
 bootstrap/argocd-cm-admin-disabled-patch.yaml | 6 ++++++
 bootstrap/kustomization.yaml                  | 4 ++++
 2 files changed, 10 insertions(+)
 create mode 100644 bootstrap/argocd-cm-admin-disabled-patch.yaml

diff --git a/bootstrap/argocd-cm-admin-disabled-patch.yaml b/bootstrap/argocd-cm-admin-disabled-patch.yaml
new file mode 100644
index 0000000..1fae7af
--- /dev/null
+++ b/bootstrap/argocd-cm-admin-disabled-patch.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-cm
+data:
+  admin.enabled: "false"
diff --git a/bootstrap/kustomization.yaml b/bootstrap/kustomization.yaml
index 22b6e1d..4fd8ff2 100644
--- a/bootstrap/kustomization.yaml
+++ b/bootstrap/kustomization.yaml
@@ -21,6 +21,10 @@ patches:
       kind: ConfigMap
       name: argocd-cm
     path: argocd-cm-oidc-patch.yaml
+  - target:
+      kind: ConfigMap
+      name: argocd-cm
+    path: argocd-cm-admin-disabled-patch.yaml
   - target:
       kind: ConfigMap
       name: argocd-rbac-cm