From 5d5d9723e92a8a53e46edadc68d342b8fe4a9e5d Mon Sep 17 00:00:00 2001 From: jgrusewski Date: Wed, 11 Mar 2026 00:01:28 +0100 Subject: [PATCH] fix(ci): add eventbus, services, RBAC permissions for argo self-apply apply-argo-templates failed because ci-deploy role was missing permissions for eventbus (argoproj.io), services (core), and roles/rolebindings (rbac) needed to apply events/*.yaml files. Co-Authored-By: Claude Opus 4.6 --- infra/k8s/argo/ci-deploy-rbac.yaml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/infra/k8s/argo/ci-deploy-rbac.yaml b/infra/k8s/argo/ci-deploy-rbac.yaml index 52ec2336b..c1592faac 100644 --- a/infra/k8s/argo/ci-deploy-rbac.yaml +++ b/infra/k8s/argo/ci-deploy-rbac.yaml @@ -11,8 +11,14 @@ rules: resources: [deployments] verbs: [get, list, patch] - apiGroups: ["argoproj.io"] - resources: [workflowtemplates, eventsources, sensors] + resources: [workflowtemplates, eventsources, sensors, eventbus] verbs: [get, list, create, update, patch] + - apiGroups: [""] + resources: [services] + verbs: [get, list, create, update, patch] + - apiGroups: ["rbac.authorization.k8s.io"] + resources: [roles, rolebindings] + verbs: [get, list, create, update, patch, bind, escalate] --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding