Files
deploy/manifests/cluster-rbac/server/argocd-server-clusterrole.yaml
Alexander MatyushentsevandGitHub 43cced5a70 fix: API server should not attempt to read secrets in all namespaces (#20950)
* fix: api server is trying to list cluster wide secrets while generating apps

Signed-off-by: Alexander Matyushentsev <[email protected]>

* Revert "fix: Fix argocd appset generate failure due to missing clusterrole (#20162)"

This reverts commit f3ca5ada52.

---------

Signed-off-by: Alexander Matyushentsev <[email protected]>
2024-11-26 10:53:28 +05:30

52 lines
981 B
YAML

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
labels:
app.kubernetes.io/name: argocd-server
app.kubernetes.io/part-of: argocd
app.kubernetes.io/component: server
name: argocd-server
rules:
- apiGroups:
- '*'
resources:
- '*'
verbs:
- delete # supports deletion a live object in UI
- get # supports viewing live object manifest in UI
- patch # supports `argocd app patch`
- apiGroups:
- ""
resources:
- events
verbs:
- list # supports listing events in UI
- apiGroups:
- ""
resources:
- pods
- pods/log
verbs:
- get # supports viewing pod logs from UI
- apiGroups:
- "argoproj.io"
resources:
- "applications"
- "applicationsets"
verbs:
- get
- list
- watch
- apiGroups:
- batch
resources:
- jobs
verbs:
- create # supports triggering jobs from UI
- apiGroups:
- argoproj.io
resources:
- workflows
verbs:
- create # supports triggering workflows from UI