argocd-helm/charts/argo-workflows/templates/controller/workflow-role.yaml
sondre engen 0869e629f4
fix(argo-workflows): Add missing workflow permission (#1247)
* feat(argo-events): Adding additional RBAC for leader election (#1242)

* Issue 1565: Adding additional RBAC for leader election

Signed-off-by: David Collom <david.collom@jetstack.io>

* Adding Additional RBAC for Events

Signed-off-by: David Collom <david.collom@jetstack.io>

* Use consistent indent style

Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>

* Bump minor chart version and add changelog

Signed-off-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>

Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Signed-off-by: Sondre Engen <corastweb94@hotmail.com>

* Add missing permission to workflow sa

Signed-off-by: Sondre Engen <corastweb94@hotmail.com>

* chore(argo-cd): Document how to upgrade CRDs (#1251)

* chore(argo-cd): Document how to upgrade CRDs

Signed-off-by: Petr Drastil <petr.drastil@gmail.com>

* feat(argo-cd): Update chart version and changelog

Signed-off-by: Petr Drastil <petr.drastil@gmail.com>
Signed-off-by: Sondre Engen <corastweb94@hotmail.com>

* Update chart version

Signed-off-by: Sondre Engen <corastweb94@hotmail.com>

* Added changelog

Signed-off-by: Sondre Engen <corastweb94@hotmail.com>

Co-authored-by: David Collom <david@collom.co.uk>
Co-authored-by: Marco Kilchhofer <mkilchhofer@users.noreply.github.com>
Co-authored-by: Petr Drastil <petr.drastil@gmail.com>
2022-05-01 13:44:32 +02:00

35 lines
759 B
YAML

{{- if .Values.workflow.rbac.create -}}
{{- range $namespace := or .Values.singleNamespace false | ternary (list "") (append .Values.controller.workflowNamespaces (coalesce .Values.workflow.namespace .Release.Namespace) | uniq) }}
---
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
name: {{ template "argo-workflows.fullname" $ }}-workflow
{{- with $namespace }}
namespace: {{ . }}
{{- end }}
rules:
- apiGroups:
- ""
resources:
- pods
verbs:
- get
- watch
- patch
- apiGroups:
- ""
resources:
- pods/log
verbs:
- get
- watch
- apiGroups:
- argoproj.io
resources:
- workflowtaskresults
verbs:
- create
{{- end }}
{{- end }}