$ kubectl edit cm argocd-cm
apiVersion: v1
data:
accounts.dev: login
accounts.qa: login # 계정 추가
kind: ConfigMap
metadata:
annotations:
...
$ kubectl edit cm argocd-rbac-cm
apiVersion: v1
kind: ConfigMap
metadata:
name: argocd-rbac-cm
namespace: argocd
data:
policy.default: role:readonly
policy.csv: |
p, role:org-admin, applications, *, */*, allow
p, role:org-admin, clusters, get, *, allow
p, role:org-admin, repositories, get, *, allow
p, role:org-admin, repositories, create, *, allow
p, role:org-admin, repositories, update, *, allow
p, role:org-admin, repositories, delete, *, allow
p, role:org-admin, logs, get, *, allow
p, role:org-admin, exec, create, */*, allow
g, your-github-org:your-team, role:org-admin
p, <role/user/group>, <resource>, <action>, <object>
p, <role/user/group>, <resource>, <action>, <appproject>/<object>
Resources
Actions
$ argocd login $ARGOCD_DOMAIN --username $USER_NAME --password $PASSWORD
$ argocd account list
$ argocd account update-password --account $USER_NAME --new-password $PASSWORD
https://argo-cd.readthedocs.io/en/stable/operator-manual/rbac/