From 4bc3c27b2053789617f5653f2edd1db9780799eb Mon Sep 17 00:00:00 2001 From: ssttehrani Date: Sun, 14 Jul 2024 19:19:09 +0330 Subject: [PATCH] refactor: limit exec permission to project --- controllers/argocduser_controller.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/controllers/argocduser_controller.go b/controllers/argocduser_controller.go index 37c5b0d..a7a57cb 100644 --- a/controllers/argocduser_controller.go +++ b/controllers/argocduser_controller.go @@ -199,7 +199,7 @@ func (r *ArgocdUserReconciler) AddArgocdRBACPolicy(ctx context.Context, argocdus "p, role:" + argocduser.Name + "-admin, repositories, update, " + argocduser.Name + "/*, allow", "p, role:" + argocduser.Name + "-view, repositories, get, " + argocduser.Name + "/*, allow", "p, role:" + argocduser.Name + "-view, applications, get, " + argocduser.Name + "/*, allow", - "p, role:" + argocduser.Name + "-admin, exec, create, *, allow", + "p, role:" + argocduser.Name + "-admin, exec, create, " + argocduser.Name + "/*, allow", } //add argocd rbac policy