argo scopes reduced

This commit is contained in:
2024-12-01 16:19:16 +01:00
parent d097dddf7a
commit 78fce20fe5
2 changed files with 4 additions and 4 deletions

View File

@@ -6,4 +6,6 @@ data:
policy.csv: |
# use oidc group apps_admin as admin group in argocd
g, apps_admin, role:admin
policy.default: role:readonly
g, argocd, role:readonly
# all other user that might have entered via oidc, are blocked: deny everything
policy.default: deny