RBAC using Argo CD app of apps for dedicated cluster
nicklasfrahm opened this issue · comments
Currently, when deploying an app of apps for a dedicated cluster, we need to rely on the user to only deploy to the designated project. There is however no enforcement at the moment. We need to identify a better way so that the user of a dedicated cluster can't deploy to an arbitrary project.
Trust is good, but control is better.
This has been fixed by using an ApplicationSet. No more app of apps for dedicated clusters. For reference, see deploy/argocd/root/templates/apps/moos.yaml.