ArgoCD 使用示例

ArgoCD 使用示例

示例

权限

https://github.com/argoproj/argo-workflows/blob/master/manifests/quick-start/sso/overlays/argo-server-sa.yaml

AppProject

• 创建一个 Project 并指定 role

apiVersion: argoproj.io/v1alpha1
kind: AppProject
metadata:
  name: abc
  namespace: argocd
  finalizers:
  - resources-finalizer.argocd.argoproj.io
spec:
  clusterResourceWhitelist:
  - group: '*'
    kind: '*'
  namespaceResourceWhitelist:
  - group: '*'
    kind: '*'
  description: abc Team AppProject
  destinations:
  - name: in-cluster
    namespace: argocd
    server: https://kubernetes.default.svc
  - name: in-cluster
    namespace: abc
    server: https://kubernetes.default.svc
  roles:
  - name: admin
    description: admin privileges to abc
    groups:
    - <some-group>
    policies:
    - p, proj:abc:admin, applications, *, abc/*, allow
  - name: readonly
    description: Read-only privileges to abc
    groups:
    - <some-group>
    policies:
    - p, proj:abc:readonly, applications, get, abc/*, allow
  sourceRepos:
  - https://github.com/xiexianbin/k8s-manifests.git
source repo / download raw