加用戶步驟:
修改argocd-cm,添加data
data:
accounts.linyanzhi: login /添加linyanzhi登錄賬號
# disables user. User is enabled by default
accounts.linyanzhi.enabled: "enable" /啟用linyanzhi賬號

修改密碼:
argocd account update-password --account linyanzhi --current-password argocd-server-ABCDEFG --new-password linyanzhi123
用戶權限控制:修改cm下的argocd-rbac-cm
data:
policy.csv: |
p, linyanzhi, *, *, lixian/*, allow -----p是policy,用戶名,要使用的資源,要使用的方法,項目,allow或deny
#policy.default: role:readonly -----默認策略
scopes: '[accounts]'
線上例子參考:
data:
policy.csv: |
p, hub, applications, get, lixian/*, deny
p, hub_viewer, applications, get, */*, allow
p, hub_admin, *, *, */*, allow
p, hub_admin, projects, *, *, allow
p, lixian_admin, applications, *, lixian/*, allow
p, lixian_admin, certificates, *, *, allow
p, lixian_admin, clusters, *, *, allow
p, lixian_admin, repositories, *, *, allow
p, lixian_admin, projects, *, lixian, allow
p, lixian_admin, accounts, *, *, allow
p, lixian_admin, gpgkeys, get, *, allow
p, lixian_readonly, applications, get, lixian/*, allow
參考文檔:
用戶管理:https://argoproj.github.io/argo-cd/operator-manual/user-management/
RBAC控制:https://argoproj.github.io/argo-cd/operator-manual/rbac/
