github.com/argoproj/argo-cd/v3@v3.2.1/manifests/cluster-rbac/server/argocd-server-clusterrole.yaml (about)

     1  apiVersion: rbac.authorization.k8s.io/v1
     2  kind: ClusterRole
     3  metadata:
     4    labels:
     5      app.kubernetes.io/name: argocd-server
     6      app.kubernetes.io/part-of: argocd
     7      app.kubernetes.io/component: server
     8    name: argocd-server
     9  rules:
    10  - apiGroups:
    11    - '*'
    12    resources:
    13    - '*'
    14    verbs:
    15    - delete  # supports deletion a live object in UI
    16    - get     # supports viewing live object manifest in UI
    17    - patch   # supports `argocd app patch`
    18  - apiGroups:
    19    - ""
    20    resources:
    21    - events
    22    verbs:
    23    - list    # supports listing events in UI
    24  - apiGroups:
    25    - ""
    26    resources:
    27    - pods
    28    - pods/log
    29    verbs:
    30    - get     # supports viewing pod logs from UI
    31  - apiGroups:
    32    - "argoproj.io"
    33    resources:
    34    - "applications"
    35    - "applicationsets"
    36    verbs:
    37    - get
    38    - list
    39    - watch
    40  - apiGroups:
    41    - batch
    42    resources:
    43    - jobs
    44    verbs:
    45    - create   # supports triggering jobs from UI
    46  - apiGroups:
    47    - argoproj.io
    48    resources:
    49    - workflows
    50    verbs:
    51    - create   # supports triggering workflows from UI