fix(argocd): Migrating from argocd-cm plugins

argocd-cm plugins have been [deprecated since v2.4](https://argo-cd.readthedocs.io/en/stable/operator-manual/config-management-plugins/), though it's still listed as an [example in the offical repos](https://github.com/argoproj/argocd-example-apps/tree/master/plugins/kustomized-helm)

Migrating based on the offical docs at https://argo-cd.readthedocs.io/en/stable/operator-manual/config-management-plugins/

infra/argocd/cm-argocd-plugin.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-plugin-config
+data:
+  plugin.yaml: |
+    apiVersion: argoproj.io/v1alpha1
+    kind: ConfigManagementPlugin
+    metadata:
+      name: kustomize-build-with-helm
+    spec:
+      generate:
+        command: [ "sh", "-c" ]
+        args: [ "kustomize build --enable-helm" ]

infra/argocd/kustomization.yaml

@@ -6,12 +6,13 @@ resources:
   - namespace.yaml
   - https://raw.githubusercontent.com/argoproj/argo-cd/v2.7.11/manifests/install.yaml
   - ingress.yaml
+  - cm-argocd-plugin.yaml
 
 patchesStrategicMerge:
-  # Kustomize --enable-helm plugin for Helm charts
-  - patches/argocd-cm-kustomize-helm-patch.yaml
+  # Plugin to enable Kustomize with Helm
+  - patches/argocd-repo-server-plugin-sidecar.yaml
   # Ignore CiliumIdentity CRDs
   - patches/argocd-cm-resource-exclusion-cilium-identity-patch.yaml
   # Let Traefik manage TLS-termination
-  - patches/argocd-cmd-params-cm-server-insecrure-patch.yaml
+  - patches/argocd-cmd-params-cm-server-insecure-patch.yaml
 

infra/argocd/patches/argocd-cm-kustomize-helm-patch.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: argocd-cm
-data:
-  configManagementPlugins: |
-    - name: kustomize-build-with-helm
-      generate:
-        command: [ "sh", "-c" ]
-        args: [ "kustomize build --enable-helm" ]

infra/argocd/patches/argocd-repo-server-plugin-sidecar.yaml

@@ -0,0 +1,31 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: argocd-repo-server
+spec:
+  selector: {}
+  template:
+    spec:
+      containers:
+        - name: kustomize-build-with-helm
+          command: [/var/run/argocd/argocd-cmp-server]
+          image: quay.io/argoproj/argocd:v2.7.11
+          securityContext:
+            runAsNonRoot: true
+            runAsUser: 999
+          volumeMounts:
+            - name: var-files
+              mountPath: /var/run/argocd
+            - name: plugins
+              mountPath: /home/argocd/cmp-server/plugins
+            - name: argocd-plugin-config
+              mountPath: /home/argocd/cmp-server/config/plugin.yaml
+              subPath: plugin.yaml
+            - mountPath: /tmp
+              name: cmp-tmp
+      volumes:
+        - name: argocd-plugin-config
+          configMap:
+            name: argocd-plugin-config
+        - name: cmp-tmp
+          emptyDir: {}