add rbac scopes support (#85)
This commit is contained in:
parent
6e108f3aae
commit
c7b415b634
2 changed files with 5 additions and 0 deletions
|
@ -16,3 +16,6 @@ data:
|
||||||
policy.csv:
|
policy.csv:
|
||||||
{{- toYaml .Values.rbac.policyCsv | indent 4 }}
|
{{- toYaml .Values.rbac.policyCsv | indent 4 }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
{{- if .Values.rbac.scopes }}
|
||||||
|
scopes: {{ .Values.rbac.scopes }}
|
||||||
|
{{- end }}
|
||||||
|
|
|
@ -157,6 +157,8 @@ rbac:
|
||||||
# g, your-github-org:your-team, role:org-admin
|
# g, your-github-org:your-team, role:org-admin
|
||||||
# The default role Argo CD will fall back to, when authorizing API requests
|
# The default role Argo CD will fall back to, when authorizing API requests
|
||||||
policyDefault: #role:readonly
|
policyDefault: #role:readonly
|
||||||
|
# Scopes controls which OIDC scopes to examine during rbac enforcement (in addition to `sub` scope).
|
||||||
|
scopes: #[groups]
|
||||||
|
|
||||||
redis:
|
redis:
|
||||||
image:
|
image:
|
||||||
|
|
Loading…
Reference in a new issue