DevFW-CICD/argocd-helm
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: Argo Server Secrets Permissions (#307)

Browse source 
Grant permissions to workflow-controller and server roles to read database secrets
This commit is contained in:
Pablo Osinaga 2020-04-29 22:36:58 +02:00 • committed by GitHub
parent 5add526d0c
commit 1135b1ef18
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 30 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

18
charts/argo/templates/workflow-controller-clusterrole.yaml
View file

@ -78,4 +78,22 @@ rules:
verbs:
- get
- list
{{- if .Values.controller.persistence }}
- apiGroups:
- ""
resources:
- secrets
resourceNames:
{{- if .Values.controller.persistence.postgresql }}
- {{ .Values.controller.persistence.postgresql.userNameSecret.name }}
- {{ .Values.controller.persistence.postgresql.passwordSecret.name }}
{{- end}}
{{- if .Values.controller.persistence.mysql }}
- {{ .Values.controller.persistence.mysql.userNameSecret.name }}
- {{ .Values.controller.persistence.mysql.passwordSecret.name }}
{{- end}}
verbs:
- get
{{- end}}