What is the nature and description of the request?

The default instance of ArgoCD openshift-gitops in namespace openshift-gitops has the default role set to role:readonly. The Role should be set to "" instead.

Why does the customer need this?

This is a potential security risk as any user (Without nay privileges) that is able to login to OCP can see all resources managed by the ArgoCD instance (secrets, network policies, routes, ...). This ArgoCD instance is intended for Cluster management so there is high chance of potential misuse us sensitive data.

List any affected packages or components.

GitOps operator