argocd-rbac-cm

kubectl describe configmap -n argocd argocd-rbac-cm

Examples

# default out of the box

data:
 policy.default: role:readonly

Customized

g, admin, role:admin                                          ← standard but explicit
g, system:serviceaccount:gitlab-runner:gitlab-runner, role:gitlab-runner  ← custom, GitLab Runner SA
p, role:developer, applications, get, */*, allow             ← custom role
p, role:developer, applications, sync, */*, allow            ← custom role
p, role:gitlab-runner, applications, sync, */*, allow        ← custom role
p, role:gitlab-runner, applications, get, */*, allow         ← custom role
g, developer, role:developer                                 ← custom group mapping

Related

kgcm -n argocd
argocd-cm

See also

• ArgoCD RBAC: argocd-rbac-cm, namespaceResourceBlacklist, clusterResourceWhitelist / cluster_resource_whitelist, jwtTokens
• kubectl get cm -n argocd: [ argocd-cm, argocd-rbac-cm, argocd-gpg-keys-cm ]
• kubectl get cm -n argocd: [ argocd-cm, argocd-rbac-cm, argocd-gpg-keys-cm ]