github.com/argoproj/argo-cd@v1.8.7/docs/operator-manual/server-commands/argocd-util_projects_update-role-policy.md (about)

     1  ## argocd-util projects update-role-policy
     2  
     3  Implement bulk project role update. Useful to back-fill existing project policies or remove obsolete actions.
     4  
     5  ### Synopsis
     6  
     7  Implement bulk project role update. Useful to back-fill existing project policies or remove obsolete actions.
     8  
     9  ```
    10  argocd-util projects update-role-policy PROJECT_GLOB MODIFICATION ACTION [flags]
    11  ```
    12  
    13  ### Examples
    14  
    15  ```
    16    # Add policy that allows executing any action (action/*) to roles which name matches to *deployer* in all projects  
    17    argocd-util projects update-role-policy '*' set 'action/*' --role '*deployer*' --resource applications --scope '*' --permission allow
    18  
    19    # Remove policy that which manages running (action/*) from all roles which name matches *deployer* in all projects
    20    argocd-util projects update-role-policy '*' remove override --role '*deployer*'
    21  
    22  ```
    23  
    24  ### Options
    25  
    26  ```
    27        --as string                      Username to impersonate for the operation
    28        --as-group stringArray           Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
    29        --certificate-authority string   Path to a cert file for the certificate authority
    30        --client-certificate string      Path to a client certificate file for TLS
    31        --client-key string              Path to a client key file for TLS
    32        --cluster string                 The name of the kubeconfig cluster to use
    33        --context string                 The name of the kubeconfig context to use
    34        --dry-run                        Dry run (default true)
    35    -h, --help                           help for update-role-policy
    36        --insecure-skip-tls-verify       If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
    37        --kubeconfig string              Path to a kube config. Only required if out-of-cluster
    38    -n, --namespace string               If present, the namespace scope for this CLI request
    39        --password string                Password for basic authentication to the API server
    40        --permission string              Action permission
    41        --request-timeout string         The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
    42        --resource string                Resource e.g. 'applications'
    43        --role string                    Role name pattern e.g. '*deployer*' (default "*")
    44        --scope string                   Resource scope e.g. '*'
    45        --server string                  The address and port of the Kubernetes API server
    46        --tls-server-name string         If provided, this name will be used to validate server certificate. If this is not provided, hostname used to contact the server is used.
    47        --token string                   Bearer token for authentication to the API server
    48        --user string                    The name of the kubeconfig user to use
    49        --username string                Username for basic authentication to the API server
    50  ```
    51  
    52  ### SEE ALSO
    53  
    54  * [argocd-util projects](argocd-util_projects.md)	 - Utility commands operate on ArgoCD Projects
    55