From af92fb099d61e1d49e337e4173adaa17428627f0 Mon Sep 17 00:00:00 2001 From: jgrusewski Date: Fri, 13 Mar 2026 12:10:55 +0100 Subject: [PATCH] fix(ci): grant argo-workflow SA configmaps + networkpolicies RBAC apply-argo-templates step failed because the service account lacked permissions to manage configmaps (auto-compile-configmap.yaml) and networkpolicies (argo-workflow-netpol.yaml) in the foxhunt namespace. Co-Authored-By: Claude Opus 4.6 --- infra/k8s/argo/ci-deploy-rbac.yaml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/infra/k8s/argo/ci-deploy-rbac.yaml b/infra/k8s/argo/ci-deploy-rbac.yaml index c1592faac..5aff8cef5 100644 --- a/infra/k8s/argo/ci-deploy-rbac.yaml +++ b/infra/k8s/argo/ci-deploy-rbac.yaml @@ -14,7 +14,10 @@ rules: resources: [workflowtemplates, eventsources, sensors, eventbus] verbs: [get, list, create, update, patch] - apiGroups: [""] - resources: [services] + resources: [services, configmaps] + verbs: [get, list, create, update, patch] + - apiGroups: ["networking.k8s.io"] + resources: [networkpolicies] verbs: [get, list, create, update, patch] - apiGroups: ["rbac.authorization.k8s.io"] resources: [roles, rolebindings]