Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-8783

Auto respect RBAC Feature is broken with OpenShift Gitops Operator

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • None
    • GitOps
    • None
    • Product / Portfolio Work
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      1. Proposed title of this feature request

      • Auto respect RBAC Feature maybe broken with OpenShift Gitops Operator.

      2. What is the nature and description of the request?

      ArgoCD has a feature called respect rbac, which it checks if it should add to autodiscovery based on if it can "list" an object.

      Now in the openshift version of the operator, the operator appears to create a custom clusterrole/rolebinding, which is mapped to //list

      Which means this feature no longer works since the operator is automatically creating a permissions to list all objects on the cluster.

      3. Why does the customer need this? (List the business requirements here)

      • To use the full capability of respect rbac feature of ArgoCD.

      4. List any affected packages or components.

      • Openshift Gitops operator

      Slack Thread for discussion: https://redhat-internal.slack.com/archives/CMP95ST2N/p1770160621464469

              showeimer Sho Weimer
              rhn-support-shupadhy Shivam Upadhyay
              None
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                None
                None