fix(argo-cd): Extend K8s RBAC when using UI exec feature (#1326)

Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
2022-06-14 14:31:39 +02:00 · 2022-06-14 14:31:39 +02:00 · 99f97cafd9
commit 99f97cafd9
parent 04f4cb0ba1
3 changed files with 15 additions and 7 deletions
--- a/charts/argo-cd/templates/argocd-server/clusterrole.yaml
+++ b/charts/argo-cd/templates/argocd-server/clusterrole.yaml
@ -27,4 +27,12 @@ rules:
      - pods/log
    verbs:
      - get
-{{- end }}
+  {{- if eq (index .Values.server.config "exec.enabled") "true" }}
+  - apiGroups:
+    - ""
+    resources:
+    - pods/exec
+    verbs:
+    - create
+  {{- end }}
+{{- end }}