gitea_admin/osmos-infra
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix RBAC: add create permission for workflows

Browse Source 
- Add create and delete verbs to workflows resource in ClusterRole
- Add backstage-argo-workflows ServiceAccount to ClusterRoleBinding

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Vaibhav Pathak 2026-01-16 17:33:43 +05:30
parent 47dd844da6
commit fe8aad6957
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
environment-provisioner/workflow-rbac.yaml
View File

@ -50,10 +50,10 @@ rules:
resources: ["applications"] resources: ["applications"]
verbs: ["create", "get", "list", "patch", "update", "delete"] verbs: ["create", "get", "list", "patch", "update", "delete"]
# Argo Workflows - for labeling workflows # Argo Workflows - for creating and managing workflows
- apiGroups: ["argoproj.io"] - apiGroups: ["argoproj.io"]
resources: ["workflows"] resources: ["workflows"]
verbs: ["get", "list", "patch", "update"] verbs: ["create", "get", "list", "patch", "update", "delete"]
--- ---
# Bind the workflow-executor role to the service accounts in argo-workflows namespace # Bind the workflow-executor role to the service accounts in argo-workflows namespace
@ -75,3 +75,6 @@ subjects:
- kind: ServiceAccount - kind: ServiceAccount
name: argo-workflows-server name: argo-workflows-server
namespace: argo-workflows namespace: argo-workflows
- kind: ServiceAccount
name: backstage-argo-workflows
namespace: argo-workflows