argo scopes reduced
This commit is contained in:
@@ -6,4 +6,6 @@ data:
|
||||
policy.csv: |
|
||||
# use oidc group apps_admin as admin group in argocd
|
||||
g, apps_admin, role:admin
|
||||
policy.default: role:readonly
|
||||
g, argocd, role:readonly
|
||||
# all other user that might have entered via oidc, are blocked: deny everything
|
||||
policy.default: deny
|
||||
|
Reference in New Issue
Block a user