User 'training' added to ArgoCD

tst/argocd-cm.yml

+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-cm
+  namespace: argocd
+  labels:
+    app.kubernetes.io/name: argocd-cm
+    app.kubernetes.io/part-of: argocd
+data:
+  accounts.training: apiKey, login
+  accounts.training.enabled: true
+  accounts.viewer: login
+  accounts.viewer.enabled: true

tst/argocd-rbac-cm.yml

 apiVersion: v1
 data:
+  policy.default: role:readonly
   policy.csv: |
     p, role:admin, applications, create, */*, allow
     p, role:admin, applications, update, */*, allow
@@ -19,13 +20,12 @@ data:
     p, role:admin, projects, create, *, allow
     p, role:admin, projects, update, *, allow
     p, role:admin, projects, delete, *, allow
-    p, role:devqa, applications, update, apps/*, allow
-    p, role:devqa, applications, sync, apps/*, allow
-    p, role:devqa, applications, override, apps/*, allow
-    p, role:devqa, applications, action/*, apps/*, allow
-    p, role:devqa, applications, get, apps/*, allow
+    p, user:training, applications, update, training/*, allow
+    p, user:training, applications, sync, training/*, allow
+    p, user:training, applications, action/*, training/*, allow
+    p, user:training, applications, get, training/*, allow
+    p, user:training, projects, get, *, allow
 
-    g, devqa, role:devqa
     g, kubernetes, role:admin
 kind: ConfigMap
 metadata: