github.com/argoproj/argo-cd/v2@v2.10.5/docs/user-guide/commands/argocd_admin_proj_update-role-policy.md (about) 1 # `argocd admin proj update-role-policy` Command Reference 2 3 ## argocd admin proj update-role-policy 4 5 Implement bulk project role update. Useful to back-fill existing project policies or remove obsolete actions. 6 7 ``` 8 argocd admin proj update-role-policy PROJECT_GLOB MODIFICATION ACTION [flags] 9 ``` 10 11 ### Examples 12 13 ``` 14 # Add policy that allows executing any action (action/*) to roles which name matches to *deployer* in all projects 15 argocd admin projects update-role-policy '*' set 'action/*' --role '*deployer*' --resource applications --scope '*' --permission allow 16 17 # Remove policy that which manages running (action/*) from all roles which name matches *deployer* in all projects 18 argocd admin projects update-role-policy '*' remove override --role '*deployer*' 19 20 ``` 21 22 ### Options 23 24 ``` 25 --as string Username to impersonate for the operation 26 --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. 27 --as-uid string UID to impersonate for the operation 28 --certificate-authority string Path to a cert file for the certificate authority 29 --client-certificate string Path to a client certificate file for TLS 30 --client-key string Path to a client key file for TLS 31 --cluster string The name of the kubeconfig cluster to use 32 --context string The name of the kubeconfig context to use 33 --disable-compression If true, opt-out of response compression for all requests to the server 34 --dry-run Dry run (default true) 35 -h, --help help for update-role-policy 36 --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure 37 --kubeconfig string Path to a kube config. Only required if out-of-cluster 38 -n, --namespace string If present, the namespace scope for this CLI request 39 --password string Password for basic authentication to the API server 40 --permission string Action permission 41 --proxy-url string If provided, this URL will be used to connect via proxy 42 --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") 43 --resource string Resource e.g. 'applications' 44 --role string Role name pattern e.g. '*deployer*' (default "*") 45 --scope string Resource scope e.g. '*' 46 --server string The address and port of the Kubernetes API server 47 --tls-server-name string If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used. 48 --token string Bearer token for authentication to the API server 49 --user string The name of the kubeconfig user to use 50 --username string Username for basic authentication to the API server 51 ``` 52 53 ### Options inherited from parent commands 54 55 ``` 56 --auth-token string Authentication token 57 --client-crt string Client certificate file 58 --client-crt-key string Client certificate key file 59 --config string Path to Argo CD config (default "/home/user/.config/argocd/config") 60 --controller-name string Name of the Argo CD Application controller; set this or the ARGOCD_APPLICATION_CONTROLLER_NAME environment variable when the controller's name label differs from the default, for example when installing via the Helm chart (default "argocd-application-controller") 61 --core If set to true then CLI talks directly to Kubernetes instead of talking to Argo CD API server 62 --grpc-web Enables gRPC-web protocol. Useful if Argo CD server is behind proxy which does not support HTTP2. 63 --grpc-web-root-path string Enables gRPC-web protocol. Useful if Argo CD server is behind proxy which does not support HTTP2. Set web root. 64 -H, --header strings Sets additional header to all requests made by Argo CD CLI. (Can be repeated multiple times to add multiple headers, also supports comma separated headers) 65 --http-retry-max int Maximum number of retries to establish http connection to Argo CD server 66 --insecure Skip server certificate and domain verification 67 --kube-context string Directs the command to the given kube-context 68 --logformat string Set the logging format. One of: text|json (default "text") 69 --loglevel string Set the logging level. One of: debug|info|warn|error (default "info") 70 --plaintext Disable TLS 71 --port-forward Connect to a random argocd-server port using port forwarding 72 --port-forward-namespace string Namespace name which should be used for port forwarding 73 --redis-haproxy-name string Name of the Redis HA Proxy; set this or the ARGOCD_REDIS_HAPROXY_NAME environment variable when the HA Proxy's name label differs from the default, for example when installing via the Helm chart (default "argocd-redis-ha-haproxy") 74 --redis-name string Name of the Redis deployment; set this or the ARGOCD_REDIS_NAME environment variable when the Redis's name label differs from the default, for example when installing via the Helm chart (default "argocd-redis") 75 --repo-server-name string Name of the Argo CD Repo server; set this or the ARGOCD_REPO_SERVER_NAME environment variable when the server's name label differs from the default, for example when installing via the Helm chart (default "argocd-repo-server") 76 --server-crt string Server certificate file 77 --server-name string Name of the Argo CD API server; set this or the ARGOCD_SERVER_NAME environment variable when the server's name label differs from the default, for example when installing via the Helm chart (default "argocd-server") 78 ``` 79 80 ### SEE ALSO 81 82 * [argocd admin proj](argocd_admin_proj.md) - Manage projects configuration 83