Initial argo deployment

cluster/platform/argocd/argocd-server-patch.yaml

@@ -0,0 +1,23 @@
+# ------------------------------------------------------------------------------
+# ArgoCD Server — Insecure Mode Patch
+#
+# When TLS is terminated at the Gateway (not at argocd-server itself),
+# argocd-server must run in --insecure mode. Without this, it tries to
+# do double TLS and the Gateway connection fails.
+#
+# This patches the argocd-server Deployment to add the --insecure flag.
+# Applied as part of the argocd-config Application (same path/namespace).
+# ------------------------------------------------------------------------------
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: argocd-server
+  namespace: argocd
+spec:
+  template:
+    spec:
+      containers:
+        - name: argocd-server
+          command:
+            - argocd-server
+            - --insecure