NOTICKET: detected bug in failed rollout helm secret due to missing RBAC permissions

3 years ago · 89d11d1d06
parent 43b77acefd
commit 89d11d1d06
1 changed files with 10 additions and 0 deletions
--- a/roles/kubernetes/argocd/defaults/main.yml
+++ b/roles/kubernetes/argocd/defaults/main.yml
@ -54,6 +54,16 @@ k8s_argocd_helm__release_values:
        additionalLabels:
          release: "{{ k8s_prometheus_helm__name }}"
  repoServer:
+    serviceAccount:
+      create: true
+      name: argo-cd-argocd-repo-server
+    rbac:
+    - apiGroups:
+      - ""
+      resources:
+      - secrets
+      verbs:
+      - get
    logLevel: info
    logFormat: json
    metrics: