fix(argocd): preserve roger admin access + set default readonly in RBAC ConfigMap

fix(myorg-assistant): fix CronJob image references to use Gitea registry image
CronJobs were referencing 'myorg-assistant:latest' (a local image that doesn't exist in the cluster), causing ImagePullBackOff on all 4 active CronJob pods. Updated all 5 CronJob manifests to use the same image as the Deployment (git.rogi.casa/roger/myorg-assistant/myorg-assistant:fcf79bf) and added imagePullSecrets: gitea-registry for authentication.
2026-07-06 08:28:25 +00:00 · 2026-07-06 08:28:25 +00:00 · 2026-07-06 08:28:25 +00:00
1 changed files with 2 additions and 1 deletions
--- a/argocd/argocd-rbac-cm.yaml
+++ b/argocd/argocd-rbac-cm.yaml
@@ -7,9 +7,10 @@ metadata:
    app.kubernetes.io/name: argocd-rbac-cm
    app.kubernetes.io/part-of: argocd
 data:
-  policy.default: ""
+  policy.default: role:readonly
  policy.csv: |
    p, role:platform-engineer, applications, get, */*, allow
    p, role:platform-engineer, applications, sync, */*, allow
    p, role:platform-engineer, projects, get, *, allow
    g, platform-engineer, role:platform-engineer
    g, roger, role:admin