configurable casbin file

charts/argo-cd/README.md

@@ -222,6 +222,7 @@ Helm v3 has removed the `install-crds` hook so CRDs are now populated by files i
 | server.podLabels | Labels for the server pods | `{}` |
 | server.priorityClassName | Priority class for the server | `""` |
 | server.rbacConfig | [Argo CD RBAC policy](https://argoproj.github.io/argo-cd/operator-manual/rbac/) | `{}` |
+| server.casbinConfig | [Casbin Configuration](https://casbin.org/) | [Default Casbin Configuration](https://github.com/argoproj/argo-cd/blob/master/assets/model.conf) |
 | server.readinessProbe.failureThreshold | [Kubernetes probe configuration](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes) | `3` |
 | server.readinessProbe.initialDelaySeconds | [Kubernetes probe configuration](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes) | `10` |
 | server.readinessProbe.periodSeconds | [Kubernetes probe configuration](https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#container-probes) | `10` |

charts/argo-cd/templates/argocd-configs/argocd-casbin-cm.yaml

@@ -0,0 +1,15 @@
+{{- if .Values.server.casbinConfig }}
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: argocd-casbin-cm
+  labels:
+    app.kubernetes.io/name: {{ include "argo-cd.name" . }}-casbin-cm
+    helm.sh/chart: {{ include "argo-cd.chart" . }}
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/managed-by: {{ .Release.Service }}
+    app.kubernetes.io/part-of: argocd
+    app.kubernetes.io/component: {{ .Values.server.name }}
+data:
+{{- toYaml .Values.server.casbinConfig | nindent 4 }}
+{{- end }}

charts/argo-cd/templates/argocd-server/deployment.yaml

@@ -89,6 +89,10 @@ spec:
         - mountPath: /app/config/tls
           name: tls-certs
         {{- end }}
+        {{- if .Values.server.casbinConfig }}
+        - mountPath: /etc/assets
+          name: argocd-casbin-cm
+        {{- end }}
         ports:
         - name: {{ .Values.server.name }}
           containerPort: {{ .Values.server.containerPort }}
@@ -151,3 +155,8 @@ spec:
           name: argocd-tls-certs-cm
         name: tls-certs
       {{- end }}
+      {{- if .Values.server.casbinConfig }}
+      - configMap:
+          name: argocd-casbin-cm
+        name: argocd-casbin-cm
+      {{- end }}