github.com/verrazzano/verrazzano@v1.7.0/platform-operator/thirdparty/charts/argo-cd/templates/argocd-server/clusterrole.yaml (about)

     1  {{- $config := .Values.server.clusterAdminAccess | default dict -}}
     2  {{- if hasKey $config "enabled" | ternary $config.enabled .Values.createClusterRoles }}
     3  apiVersion: rbac.authorization.k8s.io/v1
     4  kind: ClusterRole
     5  metadata:
     6    name: {{ include "argo-cd.server.fullname" . }}
     7    labels:
     8      {{- include "argo-cd.labels" (dict "context" . "component" .Values.server.name "name" .Values.server.name) | nindent 4 }}
     9  rules:
    10    - apiGroups:
    11        - '*'
    12      resources:
    13        - '*'
    14      verbs:
    15        - delete
    16        - get
    17        - patch
    18    - apiGroups:
    19        - ""
    20      resources:
    21        - events
    22      verbs:
    23        - list
    24    - apiGroups:
    25        - ""
    26      resources:
    27        - pods
    28        - pods/log
    29      verbs:
    30        - get
    31    {{- if eq (toString (index (coalesce .Values.server.config .Values.configs.cm) "exec.enabled")) "true" }}
    32    - apiGroups:
    33        - ""
    34      resources:
    35        - pods/exec
    36      verbs:
    37        - create
    38    {{- end }}
    39    - apiGroups:
    40        - argoproj.io
    41      resources:
    42        - applications
    43      verbs:
    44        - get
    45        - list
    46        - update
    47        - watch
    48    - apiGroups:
    49        - batch
    50      resources:
    51        - jobs
    52      verbs:
    53        - create
    54    - apiGroups:
    55        - argoproj.io
    56      resources:
    57        - workflows
    58      verbs:
    59        - create
    60  {{- end }}