gitadmin/devops-infra-helm-charts-gcp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Rescope jenkins-ci RBAC policy to webapp/demo-go-app

Browse Source 
demo-go-app moved from ArgoCD's default project to the new webapp
project (devops-argo-config#7de2f8b). ArgoCD RBAC is keyed
<project>/<app-name>, so the jenkins-ci sync/get policy has to move
with it or syncArgoApp's scoped token starts getting silent 403s on
its next sync.
This commit is contained in:
Mukul Sharma
2026-09-02 06:31:14 +05:30
parent e28e22daaf
commit 1d206444f6
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helm-overrides/k8s-admin-prd-ase1/argocd-admin-prd/custom-values.yaml
+2 -2
View File
@@ -109,8 +109,8 @@ argo-cd:
# emails from the source cluster are dropped here.
rbac:
policy.csv: |
p, jenkins-ci, applications, sync, default/demo-go-app, allow
p, jenkins-ci, applications, get, default/demo-go-app, allow
p, jenkins-ci, applications, sync, webapp/demo-go-app, allow
p, jenkins-ci, applications, get, webapp/demo-go-app, allow
repositories:
devops-infra-helm-charts:
url: http://gitea.192.168.1.7.nip.io/mukul/devops-infra-helm-charts.git