@@ -0,0 +1,12 @@
|
|||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRole
|
||||||
|
metadata:
|
||||||
|
name: argocd-headlamp-plugin
|
||||||
|
rules:
|
||||||
|
- apiGroups: ["argoproj.io"]
|
||||||
|
resources: ["applications"]
|
||||||
|
verbs: ["get", "list", "watch", "patch"]
|
||||||
|
- apiGroups: [""]
|
||||||
|
resources: ["configmaps"]
|
||||||
|
resourceNames: ["argocd-cm"]
|
||||||
|
verbs: ["get"]
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
kind: ClusterRoleBinding
|
||||||
|
metadata:
|
||||||
|
name: remote-admin-argocd-plugin
|
||||||
|
roleRef:
|
||||||
|
apiGroup: rbac.authorization.k8s.io
|
||||||
|
kind: ClusterRole
|
||||||
|
name: argocd-headlamp-plugin
|
||||||
|
subjects:
|
||||||
|
- kind: User
|
||||||
|
name: remote-admin
|
||||||
@@ -16,4 +16,3 @@ configMapGenerator:
|
|||||||
behavior: merge
|
behavior: merge
|
||||||
envs:
|
envs:
|
||||||
- ./config/conf.env
|
- ./config/conf.env
|
||||||
|
|
||||||
@@ -18,4 +18,3 @@ data:
|
|||||||
p, role:admin, extensions, invoke, events, allow
|
p, role:admin, extensions, invoke, events, allow
|
||||||
p, role:admin, extensions, invoke, pod-files, allow
|
p, role:admin, extensions, invoke, pod-files, allow
|
||||||
policy.default: role:readonly
|
policy.default: role:readonly
|
||||||
|
|
||||||
Reference in New Issue
Block a user