# Members of this group get ArgoCD role:admin (mapped in argocd-rbac-cm).
# Everyone else who logs in via Authentik gets role:readonly.
name: argocd-admins