Story (Required)

The default Argo CD instance in the openshift-gitops namespace must switch from passthrough to reencrypt TLS termination policy. The goal of this change is to make use the global ingress certificate instead of the self-signed certificate generated by the operator.

See https://issues.redhat.com/browse/GITOPS-4428 for investigation and link to investigation doc, for details.
 

Approach (Required)

• The GitOps operator should install the Argo CD instance with a reencrypt termination policy.
• It shouldn't update the policy if there is an existing configuration.
• It shouldn't introduce any breaking changes.

Done Checklist

• Code is completed, reviewed, documented and checked in
• Unit and integration test automation have been delivered and running cleanly in continuous integration/staging/canary environment
• Continuous Delivery pipeline(s) is able to proceed with new code included
• Customer facing documentation, API docs etc. are produced/updated, reviewed and published
• Acceptance criteria are met