Commit Graph

8 Commits

Author SHA1 Message Date
Platform Engineer
6f1826761e fix(argocd): preserve roger admin access + set default readonly in RBAC ConfigMap 2026-07-06 08:28:25 +00:00
Platform Engineer
792380b631 fix(argocd): add RBAC ConfigMap granting platform-engineer account read+sync access
The platform-engineer ArgoCD account was created (argocd-cm.yaml) with
apiKey capability, but no argocd-rbac-cm ConfigMap existed, so the account
had default (empty) RBAC and every API call returned 403.

This adds the RBAC policy granting the platform-engineer role:
- get applications (all projects/namespaces)
- sync applications (all projects/namespaces)
- get projects

Needed for the platform-engineer cron jobs to read app health and trigger
syncs via the ArgoCD API.
2026-07-06 08:28:25 +00:00
Roger Oriol
440fcf858f new argocd user platform-engineer 2026-07-05 17:39:54 +02:00
Roger Oriol
9fd7d02c7c loki + promtail new monitoring services 2026-07-05 17:32:15 +02:00
Roger Oriol
7faaa53855 searxng 2026-07-04 00:10:23 +02:00
Roger Oriol
6e02d9a885 new platform engineer agent 2026-06-27 00:09:39 +02:00
Roger Oriol
f6562df066 create argocd apps declaratively 2026-06-23 01:03:06 +02:00
Roger Oriol
fe2f1b85f8 argocd and cert-manager 2026-06-22 23:40:37 +02:00