github.com/argoproj/argo-cd/v2@v2.10.5/docs/user-guide/commands/argocd_admin_settings_rbac_can.md (about) 1 # `argocd admin settings rbac can` Command Reference 2 3 ## argocd admin settings rbac can 4 5 Check RBAC permissions for a role or subject 6 7 ### Synopsis 8 9 10 Check whether a given role or subject has appropriate RBAC permissions to do 11 something. 12 13 14 ``` 15 argocd admin settings rbac can ROLE/SUBJECT ACTION RESOURCE [SUB-RESOURCE] [flags] 16 ``` 17 18 ### Examples 19 20 ``` 21 22 # Check whether role some:role has permissions to create an application in the 23 # 'default' project, using a local policy.csv file 24 argocd admin settings rbac can some:role create application 'default/app' --policy-file policy.csv 25 26 # Policy file can also be K8s config map with data keys like argocd-rbac-cm, 27 # i.e. 'policy.csv' and (optionally) 'policy.default' 28 argocd admin settings rbac can some:role create application 'default/app' --policy-file argocd-rbac-cm.yaml 29 30 # If --policy-file is not given, the ConfigMap 'argocd-rbac-cm' from K8s is 31 # used. You need to specify the argocd namespace, and make sure that your 32 # current Kubernetes context is pointing to the cluster Argo CD is running in 33 argocd admin settings rbac can some:role create application 'default/app' --namespace argocd 34 35 # You can override a possibly configured default role 36 argocd admin settings rbac can someuser create application 'default/app' --default-role role:readonly 37 38 39 ``` 40 41 ### Options 42 43 ``` 44 --as string Username to impersonate for the operation 45 --as-group stringArray Group to impersonate for the operation, this flag can be repeated to specify multiple groups. 46 --as-uid string UID to impersonate for the operation 47 --certificate-authority string Path to a cert file for the certificate authority 48 --client-certificate string Path to a client certificate file for TLS 49 --client-key string Path to a client key file for TLS 50 --cluster string The name of the kubeconfig cluster to use 51 --context string The name of the kubeconfig context to use 52 --default-role string name of the default role to use 53 --disable-compression If true, opt-out of response compression for all requests to the server 54 -h, --help help for can 55 --insecure-skip-tls-verify If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure 56 --kubeconfig string Path to a kube config. Only required if out-of-cluster 57 -n, --namespace string If present, the namespace scope for this CLI request 58 --password string Password for basic authentication to the API server 59 --policy-file string path to the policy file to use 60 --proxy-url string If provided, this URL will be used to connect via proxy 61 -q, --quiet quiet mode - do not print results to stdout 62 --request-timeout string The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0") 63 --server string The address and port of the Kubernetes API server 64 --strict whether to perform strict check on action and resource names (default true) 65 --tls-server-name string If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used. 66 --token string Bearer token for authentication to the API server 67 --use-builtin-policy whether to also use builtin-policy (default true) 68 --user string The name of the kubeconfig user to use 69 --username string Username for basic authentication to the API server 70 ``` 71 72 ### Options inherited from parent commands 73 74 ``` 75 --argocd-cm-path string Path to local argocd-cm.yaml file 76 --argocd-secret-path string Path to local argocd-secret.yaml file 77 --auth-token string Authentication token 78 --client-crt string Client certificate file 79 --client-crt-key string Client certificate key file 80 --config string Path to Argo CD config (default "/home/user/.config/argocd/config") 81 --controller-name string Name of the Argo CD Application controller; set this or the ARGOCD_APPLICATION_CONTROLLER_NAME environment variable when the controller's name label differs from the default, for example when installing via the Helm chart (default "argocd-application-controller") 82 --core If set to true then CLI talks directly to Kubernetes instead of talking to Argo CD API server 83 --grpc-web Enables gRPC-web protocol. Useful if Argo CD server is behind proxy which does not support HTTP2. 84 --grpc-web-root-path string Enables gRPC-web protocol. Useful if Argo CD server is behind proxy which does not support HTTP2. Set web root. 85 -H, --header strings Sets additional header to all requests made by Argo CD CLI. (Can be repeated multiple times to add multiple headers, also supports comma separated headers) 86 --http-retry-max int Maximum number of retries to establish http connection to Argo CD server 87 --insecure Skip server certificate and domain verification 88 --kube-context string Directs the command to the given kube-context 89 --load-cluster-settings Indicates that config map and secret should be loaded from cluster unless local file path is provided 90 --logformat string Set the logging format. One of: text|json (default "text") 91 --loglevel string Set the logging level. One of: debug|info|warn|error (default "info") 92 --plaintext Disable TLS 93 --port-forward Connect to a random argocd-server port using port forwarding 94 --port-forward-namespace string Namespace name which should be used for port forwarding 95 --redis-haproxy-name string Name of the Redis HA Proxy; set this or the ARGOCD_REDIS_HAPROXY_NAME environment variable when the HA Proxy's name label differs from the default, for example when installing via the Helm chart (default "argocd-redis-ha-haproxy") 96 --redis-name string Name of the Redis deployment; set this or the ARGOCD_REDIS_NAME environment variable when the Redis's name label differs from the default, for example when installing via the Helm chart (default "argocd-redis") 97 --repo-server-name string Name of the Argo CD Repo server; set this or the ARGOCD_REPO_SERVER_NAME environment variable when the server's name label differs from the default, for example when installing via the Helm chart (default "argocd-repo-server") 98 --server-crt string Server certificate file 99 --server-name string Name of the Argo CD API server; set this or the ARGOCD_SERVER_NAME environment variable when the server's name label differs from the default, for example when installing via the Helm chart (default "argocd-server") 100 ``` 101 102 ### SEE ALSO 103 104 * [argocd admin settings rbac](argocd_admin_settings_rbac.md) - Validate and test RBAC configuration 105