ab/homelab
1
0
Fork 1
Code Pull Requests Actions Packages Wiki Activity

Update k8s/core/argocd/values.yaml
All checks were successful
Check with kubeconform / lint (push) Successful in 10s
Details

Browse Source
This commit is contained in:
ab
2025-07-16 14:05:57 +00:00
parent 1b04222c3e
commit b9e1b73681
1 changed files with 16 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
k8s/core/argocd/values.yaml
View File

@@ -32,18 +32,22 @@ configs:
create: true
policy.default: ""
policy.csv: |
p, minecraft_manager, applications, get, */minecraft, allow
p, minecraft_manager, applications, update, */minecraft, allow
p, minecraft_manager, applications, sync, */minecraft, allow
p, minecraft_manager, applications, action/*, */minecraft, allow
p, minecraft_manager, logs, get, */minecraft, allow
p, minecraft_manager, applications, *, *, deny
p, minecraft_manager, applications, get, */minecraft, allow
p, minecraft_manager, applications, update, */minecraft, allow
p, minecraft_manager, applications, sync, */minecraft, allow
p, minecraft_manager, applications, action/*, */minecraft, allow
p, minecraft_manager, logs, get, */minecraft, allow
g, Minecraft Manager, role:minecraft-manager
# Policies for "Minecraft Manager" group
# Access to minecraft application in argocd project - view, edit, sync
p, Minecraft Manager, applications, get, argocd/minecraft, allow
p, Minecraft Manager, applications, update, argocd/minecraft, allow
p, Minecraft Manager, applications, sync, argocd/minecraft, allow
# Access to actions on minecraft application resources (including restart)
p, Minecraft Manager, applications, action/*, argocd/minecraft, allow
# Access to minecraft application logs
p, Minecraft Manager, logs, get, argocd/minecraft, allow
# Bind group to minecraft role
g, Minecraft Manager, role:minecraft
g, ArgoCD Admins, role:admin
secret: