github.com/argoproj/argo-cd/v3@v3.2.1/manifests/base/applicationset-controller/argocd-applicationset-controller-role.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1
     2  kind: Role
     3  metadata:
     4    labels:
     5      app.kubernetes.io/name: argocd-applicationset-controller
     6      app.kubernetes.io/part-of: argocd
     7      app.kubernetes.io/component: applicationset-controller
     8    name: argocd-applicationset-controller
     9  rules:
    10    - apiGroups:
    11        - argoproj.io
    12      resources:
    13        - applications
    14        - applicationsets
    15        - applicationsets/finalizers
    16      verbs:
    17        - create
    18        - delete
    19        - get
    20        - list
    21        - patch
    22        - update
    23        - watch
    24    - apiGroups:
    25        - argoproj.io
    26      resources:
    27        - appprojects
    28      verbs:
    29        - get
    30        - list
    31        - watch
    32    - apiGroups:
    33        - argoproj.io
    34      resources:
    35        - applicationsets/status
    36      verbs:
    37        - get
    38        - patch
    39        - update
    40    - apiGroups:
    41        - ""
    42      resources:
    43        - events
    44      verbs:
    45        - create
    46        - get
    47        - list
    48        - patch
    49        - watch
    50    - apiGroups:
    51        - ""
    52      resources:
    53        - secrets
    54        - configmaps
    55      verbs:
    56        - get
    57        - list
    58        - watch
    59    # argocd-applicationset-controller leader election rules
    60    # Create with resourceNames fails, so use a separate rule for the lease creation
    61    - apiGroups:
    62        - coordination.k8s.io
    63      resources:
    64        - leases
    65      verbs:
    66        - create
    67    - apiGroups:
    68        - coordination.k8s.io
    69      resources:
    70        - leases
    71      resourceNames:
    72        # Defined in `cmd/argocd-applicationset-controller/commands/applicationset_controller.go`
    73        - 58ac56fa.applicationsets.argoproj.io
    74      verbs:
    75        - get
    76        - update
    77        - create