From fe8aad695756f7456618eccf3cb1b56b39eb63e2 Mon Sep 17 00:00:00 2001 From: Vaibhav Pathak Date: Fri, 16 Jan 2026 17:33:43 +0530 Subject: [PATCH] Fix RBAC: add create permission for workflows - Add create and delete verbs to workflows resource in ClusterRole - Add backstage-argo-workflows ServiceAccount to ClusterRoleBinding Co-Authored-By: Claude Opus 4.5 --- environment-provisioner/workflow-rbac.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/environment-provisioner/workflow-rbac.yaml b/environment-provisioner/workflow-rbac.yaml index 1263a55..4f93f96 100644 --- a/environment-provisioner/workflow-rbac.yaml +++ b/environment-provisioner/workflow-rbac.yaml @@ -50,10 +50,10 @@ rules: resources: ["applications"] verbs: ["create", "get", "list", "patch", "update", "delete"] - # Argo Workflows - for labeling workflows + # Argo Workflows - for creating and managing workflows - apiGroups: ["argoproj.io"] resources: ["workflows"] - verbs: ["get", "list", "patch", "update"] + verbs: ["create", "get", "list", "patch", "update", "delete"] --- # Bind the workflow-executor role to the service accounts in argo-workflows namespace @@ -75,3 +75,6 @@ subjects: - kind: ServiceAccount name: argo-workflows-server namespace: argo-workflows + - kind: ServiceAccount + name: backstage-argo-workflows + namespace: argo-workflows