ArgoCD RBAC

• https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/

Only admin superuser.

• kubectl describe configmap -n argocd argocd-rbac-cm

• The global RBAC config map (See argo-rbac-cm.yaml)
• The AppProject's roles

Two predefined roles:

• role:readonly: read-only access to all resources
• role:admin: unrestricted access to all resources

• Cluster: clusterResourceBlacklist / clusterResourceWhitelist, cluster_resource_whitelist / cluster_resource_blacklist
• Namespace: namespaceResourceBlacklist / namespaceResourceWhitelist

Related

• RBAC
• ArgoCD GnuPG signature verification
• argocd-cm

See also

• ArgoCD RBAC: argocd-rbac-cm, namespaceResourceBlacklist, clusterResourceWhitelist / cluster_resource_whitelist, jwtTokens
• Argo CD, ArgoCD RBAC, GPG argocd, argocd --help, Flux, argoproj.io, kind: Application, kind: AppProject, kind: ApplicationSet, ArgoCD best practices