github.com/argoproj/argo-cd/v2@v2.10.9/assets/model.conf (about)

     1  [request_definition]
     2  r = sub, res, act, obj
     3  
     4  [policy_definition]
     5  p = sub, res, act, obj, eft
     6  
     7  [role_definition]
     8  g = _, _
     9  
    10  [policy_effect]
    11  e = some(where (p.eft == allow)) && !some(where (p.eft == deny))
    12  
    13  [matchers]
    14  m = g(r.sub, p.sub) && globOrRegexMatch(r.res, p.res) && globOrRegexMatch(r.act, p.act) && globOrRegexMatch(r.obj, p.obj)