feat: Enable argo client auth mode and add service account for argo api usage

components/argo-events/argo-api-user.yaml

@@ -0,0 +1,53 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: argoapi
+  namespace: argo-events
+rules:
+- apiGroups:
+  - argoproj.io
+  resources:
+  - workflows
+  verbs:
+  - list
+  - update
+  - create
+  - patch
+- apiGroups:
+  - argoproj.io
+  resources:
+  - workflowtemplates
+  verbs:
+  - list
+  - update
+  - create
+  - patch
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: argoapi
+  namespace: argo-events
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: argoapi
+  namespace: argo-events
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: argoapi
+subjects:
+- kind: ServiceAccount
+  name: argoapi
+  namespace: argo-events
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: argoapi.service-account-token
+  annotations:
+    kubernetes.io/service-account.name: argoapi
+type: kubernetes.io/service-account-token

components/argo-events/kustomization.yaml

@@ -22,3 +22,6 @@ resources:
   - workflow-role.yaml
 
   - configmaps.yaml
+
+  # adds argoapi service account user
+  - argo-api-user.yaml

components/argo-workflows/patch-server-deployment.yaml

@@ -4,6 +4,7 @@
   value:
     - server
     - --auth-mode=sso
+    - --auth-mode=client
     - --namespaced
     - --managed-namespace
     - argo-events