Local Users and RBAC: Give One Teammate One Project
71%
Step 1: Create the Account
Accounts live under accounts. keys in argocd-cm. The value is a comma-separated list of capabilities. The capabilities you can grant in Argo CD are login and apiKey. A bot or CI account usually needs only apiKey, while a human usually needs both.
| Capability | Grants | Use it for |
|---|---|---|
login | UI login and password-based CLI sessions (argocd login) | A human who works in the web UI or runs argocd login |
apiKey | Ability to generate API tokens for the CLI and REST API | A bot, CI job, or script that authenticates with a token |
Let's create an account for alice with both capabilities, while keeping admin around. We edit the existing ConfigMap to add alice without removing admin:
kubectl apply -n argocd -f - <
apiVersion: v1
kind: ConfigMap
metadata:
name: argocd-cm
namespace: argocd
labels:
app.kubernetes.io/name: argocd-cm
app.kubernetes.io/part-of: argocd
data:
# admin already has 'login' built in; only apiKey needs declaring GitOps the Hard Way, with Argo CD
Build Real GitOps Pipelines From Empty Clusters to Automated DeploysEnroll now to unlock all content and receive all future updates for free.