provide option to disable clusterrolebinding for multitenancy about gitops-operator

[andras-babos]

Upgraded and tested the 1.1.1 version today and it's working as expected, I will close this ticket.

[sbose78]

but it creates a clusterrolebinding for the $argocdinstance-application-controller service account which gives global read rights.

We are aware of this and we are classifying this as a bug which we are working on a fix on priority.

After the fix:

• the cluster config argocd in Openshift config namespace will have cluster-scoped read.
• Any other argocd will not have the cluster scoped read.

Would this help?

[andras-babos]

Thank you for the quick reply!
I don't see this "cluster config argocd in Openshift config namespace" in our system with oc get argocd -A, I suppose this will be a new feature? But as far as I understand this will be an internal, system component which isn't exposed to the end users, this way it will be good for us.

[sbose78]

Thank you!

…

On Fri, May 28, 2021, 03:50 Andras Babos ***@***.***> wrote: Upgraded and tested the 1.1.1 version today and it's working as expected, I will close this ticket. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#121 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAEFEADIOONL6BT7PUR7JDLTP5DLLANCNFSM44VES5IA> .