diff --git a/argocd/cm.yaml b/argocd/cm.yaml
index ac7cc39..8c643d6 100644
--- a/argocd/cm.yaml
+++ b/argocd/cm.yaml
@@ -22,6 +22,15 @@ data:
        - CiliumIdentity
      clusters:
        - "*"
+  oidc.config: |
+    name: aaronID
+    issuer: https://auth.ar21.de/application/o/vcluster-argocd/
+    clientID: PaYnOPK9WlGlHe6BRdB20lJVUFwbJAKslLkEMk22
+    clientSecret: $oidc.aaronid.clientSecret
+
+    # Optional set of OIDC scopes to request. If omitted, defaults to: ["openid", "profile", "email", "groups"]
+    requestedScopes: ["openid", "profile", "email"]
+    logoutURL: https://auth.ar21.de/application/o/vcluster-argocd/end-session/
 ---
 kind: ConfigMap
 apiVersion: v1
@@ -33,3 +42,16 @@ metadata:
     app.kubernetes.io/part-of: argocd
 data:
   server.insecure: "true"
+---
+kind: ConfigMap
+apiVersion: v1
+metadata:
+  name: argocd-rbac-cm
+  namespace: argocd
+  labels:
+    app.kubernetes.io/instance: argocd-ingress
+    app.kubernetes.io/name: argocd-cm
+    app.kubernetes.io/part-of: argocd
+data:
+  policy.csv: |
+    g, ar21-general, role:admin