From a544879f7560e1b1cb303cae96616ad7060c997a Mon Sep 17 00:00:00 2001
From: Matteo Ruina <matteo.ruina@gmail.com>
Date: Tue, 6 Apr 2021 11:20:31 +0200
Subject: [PATCH] Fix RBAC rules

Signed-off-by: Matteo Ruina <matteo.ruina@gmail.com>
---
 .../argo-applicationset/templates/rbac.yaml   | 81 ++++++++-----------
 1 file changed, 33 insertions(+), 48 deletions(-)

diff --git a/charts/argo-applicationset/templates/rbac.yaml b/charts/argo-applicationset/templates/rbac.yaml
index 8610a2f3..a70179ea 100644
--- a/charts/argo-applicationset/templates/rbac.yaml
+++ b/charts/argo-applicationset/templates/rbac.yaml
@@ -6,73 +6,58 @@ metadata:
     {{- include "argo-applicationset.labels" . | nindent 4 }}
 rules:
   - apiGroups:
-      - argoproj.io
+    - argoproj.io
     resources:
-      - applications
-      - applicationsets
-      - applicationsets/finalizers
+    - applications
+    - appprojects
+    - applicationsets
+    - applicationsets/finalizers
     verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
+    - create
+    - delete
+    - get
+    - list
+    - patch
+    - update
+    - watch
   - apiGroups:
-      - argoproj.io
+    - argoproj.io
     resources:
-      - applicationsets/status
+    - applicationsets/status
     verbs:
-      - get
-      - patch
-      - update
+    - get
+    - patch
+    - update
   - apiGroups:
-      - ''
+    - ""
     resources:
-      - events
+    - events
     verbs:
-      - create
-      - delete
-      - get
-      - list
-      - patch
-      - update
-      - watch
+    - create
+    - delete
+    - get
+    - list
+    - patch
+    - update
+    - watch
   - apiGroups:
-      - ''
-    resources:
-      - secrets
-    verbs:
-      - get
-      - list
-      - watch
-  - apiGroups:
-    - ''
+    - ""
     resources:
+    - secrets
     - configmaps
     verbs:
     - get
     - list
     - watch
-    - create
-    - update
-    - patch
-    - delete
   - apiGroups:
-    - ''
+    - apps
+    - extensions
     resources:
-    - configmaps/status
+    - deployments
     verbs:
     - get
-    - update
-    - patch
-  - apiGroups:
-    - ''
-    resources:
-    - events
-    verbs:
-    - create
+    - list
+    - watch
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding