From e08447b28fb996a444b3a0e91db9d93077fd90b3 Mon Sep 17 00:00:00 2001 From: Tim Collins Date: Fri, 14 Apr 2023 08:28:15 +0100 Subject: [PATCH] Remove NS qualifier to cover clusterroles Signed-off-by: Tim Collins --- charts/argo-workflows/README.md | 2 +- charts/argo-workflows/values.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/charts/argo-workflows/README.md b/charts/argo-workflows/README.md index 60056468..463fa485 100644 --- a/charts/argo-workflows/README.md +++ b/charts/argo-workflows/README.md @@ -174,7 +174,7 @@ Fields to note: | controller.podLabels | object | `{}` | Optional labels to add to the controller pods | | controller.podSecurityContext | object | `{}` | SecurityContext to set on the controller pods | | controller.priorityClassName | string | `""` | Leverage a PriorityClass to ensure your pods survive resource shortages. | -| controller.rbac.accessAllSecrets | bool | `false` | Allows controller to get, list and watch all k8s secrets in the namespace. Can only be used if secretWhitelist is empty. | +| controller.rbac.accessAllSecrets | bool | `false` | Allows controller to get, list and watch all k8s secrets. Can only be used if secretWhitelist is empty. | | controller.rbac.create | bool | `true` | Adds Role and RoleBinding for the controller. | | controller.rbac.secretWhitelist | list | `[]` | Allows controller to get, list, and watch certain k8s secrets | | controller.rbac.writeConfigMaps | bool | `false` | Allows controller to create and update ConfigMaps. Enables memoization feature | diff --git a/charts/argo-workflows/values.yaml b/charts/argo-workflows/values.yaml index f0bac56c..4783e0a6 100644 --- a/charts/argo-workflows/values.yaml +++ b/charts/argo-workflows/values.yaml @@ -74,7 +74,7 @@ controller: create: true # -- Allows controller to get, list, and watch certain k8s secrets secretWhitelist: [] - # -- Allows controller to get, list and watch all k8s secrets in the namespace. Can only be used if secretWhitelist is empty. + # -- Allows controller to get, list and watch all k8s secrets. Can only be used if secretWhitelist is empty. accessAllSecrets: false # -- Allows controller to create and update ConfigMaps. Enables memoization feature writeConfigMaps: false