apiVersion: v1
kind: ConfigMap
metadata:
  name: argocd-rbac-cm
# data:
#   # An RBAC policy .csv file containing additional policy and role definitions.
#   # See https://github.com/argoproj/argo-cd/blob/master/docs/rbac.md on how to write RBAC policies.
#   policy.csv: |
#     # Give all members of "my-org:team-alpha" the ability to sync apps in "my-project"
#     p, my-org:team-alpha, applications, sync, my-project/*, allow
#     # Make all members of "my-org:team-beta" admins
#     g, my-org:team-beta, role:admin
#
#   # The default role ArgoCD will fall back to, when authorizing API requests
#   policy.default: role:readonly
