Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Separate RBAC permission for pruning #6295

Open
sfc-gh-jelsesiy opened this issue May 21, 2021 · 0 comments
Open

Separate RBAC permission for pruning #6295

sfc-gh-jelsesiy opened this issue May 21, 2021 · 0 comments
Labels
enhancement New feature or request
Projects
Argo CD Proposals

Comments

@sfc-gh-jelsesiy
Copy link

Summary

It would be great to have a separate RBAC permission for pruning that can be granted on the application level.

Motivation

Today for auto prune to work, any application needs the delete permission. However, this also allows users to delete any resource manually via the Argo UI. Instead, pruning based on a git revision change should work without granting users the delete permission.

Proposal

p, role:staging-db-admins, applications, prune, staging-db-admins/*, allow

The issue is closely related to the concerns expressed in #3593
@sfc-gh-jelsesiy sfc-gh-jelsesiy added the enhancement New feature or request label May 21, 2021
@alexmt alexmt added this to Incoming in Argo CD Proposals via automation Jun 9, 2021
@jannfis jannfis moved this from Incoming to Active in Argo CD Proposals Jun 23, 2021
@agaudreault agaudreault mentioned this issue Apr 26, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement New feature or request
Projects
Argo CD Proposals
Active
Milestone
No milestone
Development

No branches or pull requests
1 participant
@sfc-gh-jelsesiy