Skip to content

Commit

Permalink
Documented the behaviour of default argocd role from v1.10 onwards
Browse files Browse the repository at this point in the history
Signed-off-by: Anand Francis Joseph <[email protected]>
  • Loading branch information
anandf committed Aug 30, 2023
1 parent 1f6fc5b commit e2df544
Showing 1 changed file with 12 additions and 1 deletion.
13 changes: 12 additions & 1 deletion docs/OpenShift GitOps Usage Guide.md
Original file line number Diff line number Diff line change
Expand Up @@ -275,10 +275,21 @@ As an option, You can configure an htpasswd Identity Provider using this [link](

### **Configure Argo CD RBAC**

By default, any user logged into Argo CD using RHSSO will be a read-only user.

For versions upto and not including v1.10, any user logged into Argo CD using RHSSO will be a read-only user by default.

`policy.default: role:readonly`

For versions starting v1.10 and above,

- any user logged into the default Argo CD instance `openshift-gitops` in namespace `openshift-gitops` will have no access by default.

`policy.default: ''`

- any user logged into user managed custom Argo CD instance will have `read-only` access by default.

`policy.default: 'role:readonly'`


This behavior can be modified by updating the *argocd-rbac-cm* configmap data section.

Expand Down

0 comments on commit e2df544

Please sign in to comment.