chore: Configure argo workflows permissions

ansible/roles/firstboot/files/ansible_payload/bootstrap/roles/metacluster/tasks/workflow.yml

@@ -10,6 +10,23 @@
         # - argo-workflows
         - firstboot
 
+    - name: Create ClusterRoleBinding for default serviceaccount
+      kubernetes.core.k8s:
+        state: present
+        kubeconfig: "{{ kubeconfig.path }}"
+        definition: |
+          kind: ClusterRoleBinding
+          metadata:
+            name: argo-workflows-firstboot-clusteradmin
+          roleRef:
+            apiGroup: rbac.authorization.k8s.io
+            kind: ClusterRole
+            name: cluster-admin
+          subjects:
+          - kind: ServiceAccount
+            name: default
+            namespace: firstboot
+
     - name: Install argo-workflows chart
       kubernetes.core.helm:
         name: argo-workflows

ansible/vars/metacluster.yml

@@ -85,11 +85,19 @@ components:
       chart: argo/argo-workflows
       parse_logic: helm template . | yq --no-doc eval '.. | .image? | select(.)' | sort -u | awk '!/ /'
       chart_values: !unsafe |
+        # workflow:
+        #   serviceAccount:
+        #     create: true
+        #     name: "argo-workflows"
+        #   rbac:
+        #     create: true
         controller:
           workflowNamespaces:
             - default
             - firstboot
         server:
+          authModes:
+            - server
           ingress:
             enabled: true
             hosts: