@@ -103,3 +103,4 @@ data:
|
|||||||
requestedScopes: ["openid", "profile", "email", "groups"]
|
requestedScopes: ["openid", "profile", "email", "groups"]
|
||||||
requestedIDTokenClaims: {"groups": {"essential": true}}
|
requestedIDTokenClaims: {"groups": {"essential": true}}
|
||||||
enablePKCEAuthentication: true
|
enablePKCEAuthentication: true
|
||||||
|
logoutURL: https://auth.olb42.com/oidc/v1/end_session
|
||||||
|
|||||||
@@ -4,6 +4,7 @@ metadata:
|
|||||||
name: argocd-rbac-cm
|
name: argocd-rbac-cm
|
||||||
namespace: argocd
|
namespace: argocd
|
||||||
data:
|
data:
|
||||||
|
scopes: '[groups]'
|
||||||
policy.csv: |
|
policy.csv: |
|
||||||
p, role:app-manager, applications, *, */*, allow
|
p, role:app-manager, applications, *, */*, allow
|
||||||
p, role:app-viewer, applications, get, */*, allow
|
p, role:app-viewer, applications, get, */*, allow
|
||||||
@@ -12,5 +13,5 @@ data:
|
|||||||
g, argocd_users, role:app-viewer
|
g, argocd_users, role:app-viewer
|
||||||
g, mcpserver, role:app-manager
|
g, mcpserver, role:app-manager
|
||||||
g, homepage, role:app-viewer
|
g, homepage, role:app-viewer
|
||||||
policy.default: role:readonly
|
policy.default: ''
|
||||||
scopes: '[groups]'
|
|
||||||
Reference in New Issue
Block a user