From 40f4ac5a2d7bc1105bd90e66fc99799ebc317fd2 Mon Sep 17 00:00:00 2001
From: nick-gorse <nick@olb42.com>
Date: Sun, 7 Jun 2026 18:19:55 +0100
Subject: [PATCH] pod-files

---
 manifest/overlays/production/argocd-cm-patch.yaml   |  4 ++++
 .../overlays/production/argocd-rbac-cm-patch.yaml   |  2 +-
 .../overlays/production/argocd-server-patch.yaml    | 13 +++++++++++++
 3 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/manifest/overlays/production/argocd-cm-patch.yaml b/manifest/overlays/production/argocd-cm-patch.yaml
index 1908250..c42e05d 100644
--- a/manifest/overlays/production/argocd-cm-patch.yaml
+++ b/manifest/overlays/production/argocd-cm-patch.yaml
@@ -58,6 +58,10 @@ data:
   extension.config.events: |
     services:
       - url: http://argoplane-events-backend.argocd.svc:8085
+  extension.config.pod-files: |
+    services:
+      - url: http://argocd-extension-pod-files.argocd
+
   resource.customizations.ignoreResourceUpdates.discovery.k8s.io_EndpointSlice: |
     jsonPointers:
       - /metadata
diff --git a/manifest/overlays/production/argocd-rbac-cm-patch.yaml b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
index 02aba06..4a9bc3b 100644
--- a/manifest/overlays/production/argocd-rbac-cm-patch.yaml
+++ b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
@@ -16,6 +16,6 @@ data:
     p, role:admin, extensions, invoke, networking, allow
     p, role:admin, extensions, invoke, logs, allow
     p, role:admin, extensions, invoke, events, allow
-    
+    p, role:admin, extensions, invoke, pod-files, allow
   policy.default: role:readonly
   
\ No newline at end of file
diff --git a/manifest/overlays/production/argocd-server-patch.yaml b/manifest/overlays/production/argocd-server-patch.yaml
index 27df341..2dcaee1 100644
--- a/manifest/overlays/production/argocd-server-patch.yaml
+++ b/manifest/overlays/production/argocd-server-patch.yaml
@@ -16,6 +16,19 @@ spec:
           env:
           - name: EXTENSION_URL
             value: https://github.com/argoproj-labs/rollout-extension/releases/download/v0.3.7/extension.tar
+            name:
+          volumeMounts:
+            - name: extensions
+              mountPath: /tmp/extensions/
+          securityContext:
+            runAsUser: 1000
+            allowPrivilegeEscalation: false
+        - name: extension-pod-files
+          image: quay.io/argoprojlabs/argocd-extension-installer:v0.0.8
+          env:
+          - name: EXTENSION_URL
+            value: http://argocd-extension-pod-files.argocd/ui/extension.tar.gz
+            name:
           volumeMounts:
             - name: extensions
               mountPath: /tmp/extensions/