platform-engineer-agent/k3s-cluster
1
0
Fork 0
forked from roger/k3s-cluster
Code Pull Requests Activity

fix(argocd): preserve roger admin access + set default readonly in RBAC ConfigMap

Browse Source
This commit is contained in:
Platform Engineer
2026-07-06 08:28:14 +00:00
parent eacfb48cbf
commit 6f1826761e
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
argocd/argocd-rbac-cm.yaml
View File

@@ -7,9 +7,10 @@ metadata:
app.kubernetes.io/name: argocd-rbac-cm app.kubernetes.io/name: argocd-rbac-cm
app.kubernetes.io/part-of: argocd app.kubernetes.io/part-of: argocd
data: data:
policy.default: "" policy.default: role:readonly
policy.csv: | policy.csv: |
p, role:platform-engineer, applications, get, */*, allow p, role:platform-engineer, applications, get, */*, allow
p, role:platform-engineer, applications, sync, */*, allow p, role:platform-engineer, applications, sync, */*, allow
p, role:platform-engineer, projects, get, *, allow p, role:platform-engineer, projects, get, *, allow
g, platform-engineer, role:platform-engineer g, platform-engineer, role:platform-engineer
g, roger, role:admin