Merge pull request #18 from snapp-incubator/sstt/refactor/exec-rbac

refactor: limit exec permission to project
snapp-incubator · Jul 15, 2024 · 8c55464 · 8c55464
2 parents 4878fe4 + 4bc3c27
commit 8c55464
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/controllers/argocduser_controller.go b/controllers/argocduser_controller.go
@@ -199,7 +199,7 @@ func (r *ArgocdUserReconciler) AddArgocdRBACPolicy(ctx context.Context, argocdus
 		"p, role:" + argocduser.Name + "-admin, repositories, update, " + argocduser.Name + "/*, allow",
 		"p, role:" + argocduser.Name + "-view, repositories, get, " + argocduser.Name + "/*, allow",
 		"p, role:" + argocduser.Name + "-view, applications, get, " + argocduser.Name + "/*, allow",
-		"p, role:" + argocduser.Name + "-admin, exec, create, *, allow",
+		"p, role:" + argocduser.Name + "-admin, exec, create, " + argocduser.Name + "/*, allow",
 	}
 
 	//add argocd rbac policy