@@ -0,0 +1,12 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRole
|
||||
metadata:
|
||||
name: argocd-headlamp-plugin
|
||||
rules:
|
||||
- apiGroups: ["argoproj.io"]
|
||||
resources: ["applications"]
|
||||
verbs: ["get", "list", "watch", "patch"]
|
||||
- apiGroups: [""]
|
||||
resources: ["configmaps"]
|
||||
resourceNames: ["argocd-cm"]
|
||||
verbs: ["get"]
|
||||
@@ -0,0 +1,11 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: remote-admin-argocd-plugin
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: argocd-headlamp-plugin
|
||||
subjects:
|
||||
- kind: User
|
||||
name: remote-admin
|
||||
@@ -16,4 +16,3 @@ configMapGenerator:
|
||||
behavior: merge
|
||||
envs:
|
||||
- ./config/conf.env
|
||||
|
||||
@@ -18,4 +18,3 @@ data:
|
||||
p, role:admin, extensions, invoke, events, allow
|
||||
p, role:admin, extensions, invoke, pod-files, allow
|
||||
policy.default: role:readonly
|
||||
|
||||
Reference in New Issue
Block a user