From ca90f591bd16a18e0292e0336f7f623e2c1502af Mon Sep 17 00:00:00 2001
From: Karan Parashar <whyredfire@gmail.com>
Date: Fri, 25 Sep 2026 03:07:31 +0530
Subject: [PATCH] feat(argocd): Use PKCE for OIDC login

---
 bootstrap/argocd-cm-oidc-patch.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/bootstrap/argocd-cm-oidc-patch.yaml b/bootstrap/argocd-cm-oidc-patch.yaml
index 12fcca1..0381869 100644
--- a/bootstrap/argocd-cm-oidc-patch.yaml
+++ b/bootstrap/argocd-cm-oidc-patch.yaml
@@ -8,6 +8,7 @@ data:
     issuer: https://auth.whyredfire.dev/application/o/argocd/
     clientID: argocd
     clientSecret: $argocd-oidc:clientSecret
+    enablePKCEAuthentication: true
     requestedScopes:
       - openid
       - profile