argocd-helm/charts/argo-applicationset/templates/rbac.yaml
Matteo Ruina 4b9c281711
fix(argo-applicationset): Fix deployment issue with AppSet v0.1.0 (#650)
* fix: Add supports for private repos configured using SSH

Signed-off-by: Matteo Ruina <matteo.ruina@gmail.com>

* fix(argo-applicationset): Allow to select with volumes to mount

Signed-off-by: Matteo Ruina <matteo.ruina@gmail.com>

* Fix RBAC rules

Signed-off-by: Matteo Ruina <matteo.ruina@gmail.com>

* Fix linting issue

Signed-off-by: Matteo Ruina <matteo.ruina@gmail.com>

* Fix chart version

Signed-off-by: Matteo Ruina <matteo.ruina@gmail.com>

Co-authored-by: Jonathan West <jgwest@users.noreply.github.com>
2021-04-13 08:59:29 -04:00

74 lines
1.3 KiB
YAML

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: {{ include "argo-applicationset.fullname" . }}
labels:
{{- include "argo-applicationset.labels" . | nindent 4 }}
rules:
- apiGroups:
- argoproj.io
resources:
- applications
- appprojects
- applicationsets
- applicationsets/finalizers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- argoproj.io
resources:
- applicationsets/status
verbs:
- get
- patch
- update
- apiGroups:
- ""
resources:
- events
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- secrets
- configmaps
verbs:
- get
- list
- watch
- apiGroups:
- apps
- extensions
resources:
- deployments
verbs:
- get
- list
- watch
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
name: {{ include "argo-applicationset.fullname" . }}
labels:
{{- include "argo-applicationset.labels" . | nindent 4 }}
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: Role
name: {{ include "argo-applicationset.fullname" . }}
subjects:
- kind: ServiceAccount
name: {{ include "argo-applicationset.serviceAccountName" . }}