4e0bf1e19d
add role resourceNames argoproj-labs/argocd-notifications#199 allow configmap/secret list verb argoproj-labs/argocd-notifications#244 Signed-off-by: 1Psy <41047934+1Psy@users.noreply.github.com>
42 lines
No EOL
691 B
YAML
42 lines
No EOL
691 B
YAML
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: Role
|
|
metadata:
|
|
name: {{ include "argocd-notifications.name" . }}-controller
|
|
labels:
|
|
{{- include "argocd-notifications.labels" . | nindent 4 }}
|
|
rules:
|
|
- apiGroups:
|
|
- argoproj.io
|
|
resources:
|
|
- applications
|
|
- appprojects
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- update
|
|
- patch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- configmaps
|
|
- secrets
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- {{ include "argocd-notifications.name" . }}-cm
|
|
resources:
|
|
- configmaps
|
|
verbs:
|
|
- get
|
|
- apiGroups:
|
|
- ""
|
|
resourceNames:
|
|
- {{ include "argocd-notifications.name" . }}-secret
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get |