-
Notifications
You must be signed in to change notification settings - Fork 5.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
docs: clarify Role/ClusterRole uses for exec feature #9354
docs: clarify Role/ClusterRole uses for exec feature #9354
Conversation
Signed-off-by: Michael Crenshaw <michael@crenshaw.dev>
Codecov Report
@@ Coverage Diff @@
## master #9354 +/- ##
==========================================
- Coverage 46.19% 46.17% -0.02%
==========================================
Files 218 218
Lines 25917 25917
==========================================
- Hits 11972 11967 -5
- Misses 12290 12294 +4
- Partials 1655 1656 +1
Continue to review full report at Codecov.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
update line 82
p, role:org-admin, exec, create, *, allow
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
update line 98
p, role:staging-db-admins, exec, create, staging-db-admins/*, allow
also line 103
This example defines a *role* called `staging-db-admins` with *eight permissions* that allow that role to perform the *actions* (`create`/`delete`/`get`/`override`/`sync`/`update` applications, `get` logs, `create` exec and `get` appprojects) against `*` (all) objects in the `staging-db-admins` Argo CD AppProject.
Signed-off-by: Michael Crenshaw <michael@crenshaw.dev>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
* docs: clarify Role/ClusterRole uses for exec feature Signed-off-by: Michael Crenshaw <michael@crenshaw.dev> * fix missed `get`s Signed-off-by: Michael Crenshaw <michael@crenshaw.dev>
Cherry-picked into 2.4. |
Related to #9335