21 lines
671 B
YAML
21 lines
671 B
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: argocd-rbac-cm
|
|
namespace: argocd
|
|
data:
|
|
scopes: '[groups, email]'
|
|
policy.csv: |
|
|
p, role:app-manager, applications, *, */*, allow
|
|
p, role:app-viewer, applications, get, */*, allow
|
|
g, ArgoCDAdmins, role:admin
|
|
g, mcpserver, role:admin
|
|
g, homepage, role:readonly
|
|
g, role:admin, role:readonly
|
|
p, role:admin, extensions, invoke, metrics, allow
|
|
p, role:admin, extensions, invoke, networking, allow
|
|
p, role:admin, extensions, invoke, logs, allow
|
|
p, role:admin, extensions, invoke, events, allow
|
|
p, role:admin, extensions, invoke, pod-files, allow
|
|
policy.default: role:readonly
|
|
|