From 1d206444f612be8d69a0c70f51b6a0ac0bad5691 Mon Sep 17 00:00:00 2001 From: Mukul Sharma Date: Wed, 2 Sep 2026 06:31:14 +0530 Subject: [PATCH] Rescope jenkins-ci RBAC policy to webapp/demo-go-app demo-go-app moved from ArgoCD's default project to the new webapp project (devops-argo-config#7de2f8b). ArgoCD RBAC is keyed /, so the jenkins-ci sync/get policy has to move with it or syncArgoApp's scoped token starts getting silent 403s on its next sync. --- .../k8s-admin-prd-ase1/argocd-admin-prd/custom-values.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/helm-overrides/k8s-admin-prd-ase1/argocd-admin-prd/custom-values.yaml b/helm-overrides/k8s-admin-prd-ase1/argocd-admin-prd/custom-values.yaml index 93da853..019afc9 100644 --- a/helm-overrides/k8s-admin-prd-ase1/argocd-admin-prd/custom-values.yaml +++ b/helm-overrides/k8s-admin-prd-ase1/argocd-admin-prd/custom-values.yaml @@ -109,8 +109,8 @@ argo-cd: # emails from the source cluster are dropped here. rbac: policy.csv: | - p, jenkins-ci, applications, sync, default/demo-go-app, allow - p, jenkins-ci, applications, get, default/demo-go-app, allow + p, jenkins-ci, applications, sync, webapp/demo-go-app, allow + p, jenkins-ci, applications, get, webapp/demo-go-app, allow repositories: devops-infra-helm-charts: url: http://gitea.192.168.1.7.nip.io/mukul/devops-infra-helm-charts.git