github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/argo-cd/templates/aggregate-roles.yaml (about)

     1  {{- if .Values.createAggregateRoles }}
     2  apiVersion: rbac.authorization.k8s.io/v1
     3  kind: ClusterRole
     4  metadata:
     5    name: {{ include "argo-cd.fullname" . }}-aggregate-to-view
     6    labels:
     7      rbac.authorization.k8s.io/aggregate-to-view: "true"
     8      {{- include "argo-cd.labels" (dict "context" .) | nindent 4 }}
     9  rules:
    10  - apiGroups:
    11    - argoproj.io
    12    resources:
    13    - applications
    14    {{- if .Values.applicationSet.enabled }}
    15    - applicationsets
    16    {{- end }}
    17    {{- if .Values.server.extensions.enabled }}
    18    - argocdextensions
    19    {{- end }}
    20    - appprojects
    21    verbs:
    22    - get
    23    - list
    24    - watch
    25  
    26  ---
    27  apiVersion: rbac.authorization.k8s.io/v1
    28  kind: ClusterRole
    29  metadata:
    30    name: {{ include "argo-cd.fullname" . }}-aggregate-to-edit
    31    labels:
    32      rbac.authorization.k8s.io/aggregate-to-edit: "true"
    33      {{- include "argo-cd.labels" (dict "context" .) | nindent 4 }}
    34  rules:
    35  - apiGroups:
    36    - argoproj.io
    37    resources:
    38    - applications
    39    {{- if .Values.applicationSet.enabled }}
    40    - applicationsets
    41    {{- end }}
    42    {{- if .Values.server.extensions.enabled }}
    43    - argocdextensions
    44    {{- end }}
    45    - appprojects
    46    verbs:
    47    - create
    48    - delete
    49    - deletecollection
    50    - get
    51    - list
    52    - patch
    53    - update
    54    - watch
    55  
    56  ---
    57  apiVersion: rbac.authorization.k8s.io/v1
    58  kind: ClusterRole
    59  metadata:
    60    name: {{ include "argo-cd.fullname" . }}-aggregate-to-admin
    61    labels:
    62      rbac.authorization.k8s.io/aggregate-to-admin: "true"
    63      {{- include "argo-cd.labels" (dict "context" .) | nindent 4 }}
    64  rules:
    65  - apiGroups:
    66    - argoproj.io
    67    resources:
    68    - applications
    69    {{- if .Values.applicationSet.enabled }}
    70    - applicationsets
    71    {{- end }}
    72    {{- if .Values.server.extensions.enabled }}
    73    - argocdextensions
    74    {{- end }}
    75    - appprojects
    76    verbs:
    77    - create
    78    - delete
    79    - deletecollection
    80    - get
    81    - list
    82    - patch
    83    - update
    84    - watch
    85  {{- end }}