fix: 🐛 Fix Argo CD rbac policy

cloud-pi-native · Mar 21, 2024 · d9f03f1 · d9f03f1
1 parent 16a944d
commit d9f03f1
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/roles/argocd/templates/values/00-main.j2 b/roles/argocd/templates/values/00-main.j2
@@ -14,7 +14,16 @@ config:
   rbac:
     policy.csv: |
       p, role:admin, *, *, */*, allow
-      p, role:nada, *, *, */*, deny
+      p, role:nada, applicationsets, , */, deny
+      p, role:nada, applications, , */, deny
+      p, role:nada, certificates, , */, deny
+      p, role:nada, accounts, , */, deny
+      p, role:nada, gpgkeys, , */, deny
+      p, role:nada, logs, , */, deny
+      p, role:nada, exec, , */, deny
+      p, role:nada, projects, , */, deny
+      p, role:nada, cluster, get, /, allow
+      p, role:nada, repositories, get, *, allow
       g, system:cluster-admins, role:admin
       g, cluster-admins, role:admin
       g, /ArgoCDAdmins, role:admin