Merge pull request #15 from mbaldessari/fix-argo-policy

Changes around the default argocd policy
validatedpatterns · Oct 16, 2024 · 0134467 · 0134467
2 parents 66ae42a + a8a28cb
commit 0134467
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/templates/plumbing/argocd.yaml b/templates/plumbing/argocd.yaml
@@ -66,7 +66,12 @@ spec:
           memory: 128Mi
   initialSSHKnownHosts: {}
   rbac:
-    defaultPolicy: role:admin
+    defaultPolicy: role:readonly
+    policy: |-
+      g, system:cluster-admins, role:admin
+      g, cluster-admins, role:admin
+      g, admin, role:admin
+    scopes: '[groups, email]'
   repo:
     initContainers:
     - command: