gitea_admin/osmos-infra
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix RBAC: add argo-workflow SA, pods/exec, and nodes permissions

Browse Source
This commit is contained in:
Vaibhav Pathak 2026-01-19 16:20:23 +05:30
parent 8ecd75b53d
commit 6ce7116c4b
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
environment-provisioner/workflow-rbac.yaml
View File

@ -42,8 +42,13 @@ rules:
# Pods for verification and workflow execution # Pods for verification and workflow execution
- apiGroups: [""] - apiGroups: [""]
resources: ["pods", "pods/log"] resources: ["pods", "pods/log", "pods/exec"]
verbs: ["get", "list", "watch", "patch", "update"] verbs: ["get", "list", "watch", "create", "patch", "update"]
# Nodes - for getting node IPs for IP registration
- apiGroups: [""]
resources: ["nodes"]
verbs: ["get", "list"]
# ArgoCD Applications (CRDs) # ArgoCD Applications (CRDs)
- apiGroups: ["argoproj.io"] - apiGroups: ["argoproj.io"]
@ -69,6 +74,9 @@ subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: default name: default
namespace: argo-workflows namespace: argo-workflows
- kind: ServiceAccount
name: argo-workflow
namespace: argo-workflows
- kind: ServiceAccount - kind: ServiceAccount
name: argo-workflows name: argo-workflows
namespace: argo-workflows namespace: argo-workflows