update rbac

2026-05-06 10:34:30 +01:00
parent a60747ba04
commit bfd63424b9
1 changed files with 5 additions and 4 deletions
@@ -4,14 +4,15 @@ metadata:
  name: argocd-rbac-cm
  namespace: argocd
 data:
-  scopes: '[groups]'
+  scopes: '[groups, email]'
  policy.csv: |
    p, role:app-manager, applications, *, */*, allow
    p, role:app-viewer, applications, get, */*, allow
    g, [email protected], role:admin
    g, argocd_administrators, role:admin
-    g, argocd_users, role:app-viewer
-    g, mcpserver, role:app-manager
-    g, homepage, role:app-viewer
+    g, argocd_users, role:readonly
+    g, mcpserver, role:admin
+    g, homepage, role:readonly
+    g, role:admin, role:readonly
  policy.default: ''