fix: add missing argocdprojectrole applicationset resource

api/v1alpha1/argocdprojectrole_types.go

@@ -31,7 +31,7 @@ type ArgoCDProjectRoleSpec struct {
 
 // Rules define the desired set of permissions.
 type ProjectRule struct {
-	// +kubebuilder:validation:Enum=clusters;applications;repositories;logs;exec;projects
+	// +kubebuilder:validation:Enum=clusters;applications;applicationsets;repositories;logs;exec;projects
 	// +kubebuilder:validation:example=applications
 	// Target resource type.
 	Resource string `json:"resource"`

config/crd/bases/rbac-operator.argoproj-labs.io_argocdprojectroles.yaml

@@ -58,6 +58,7 @@ spec:
                       enum:
                       - clusters
                       - applications
+                      - applicationsets
                       - repositories
                       - logs
                       - exec

config/rbac/role.yaml

@@ -20,6 +20,7 @@ rules:
   - get
   - list
   - patch
+  - watch
 - apiGroups:
   - rbac-operator.argoproj-labs.io
   resources:

helm/argocd-rbac-operator/README.md

@@ -166,7 +166,7 @@ metadata:
   name: test-project-role-binding
   namespace: test-ns
 spec:
-  argocdProjectRoleRef: 
+  argocdProjectRoleRef:
     name: test-project-role
   subjects:
   - appProjectRef: test-appproject-1
@@ -273,7 +273,7 @@ After the deletion of the Role or RoleBinding, the Role will also be deleted in
 | containerSecurityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | image.repository | string | `"quay.io/argoprojlabs/argocd-rbac-operator"` |  |
-| image.tag | string | `"v0.1.6"` |  |
+| image.tag | string | `""` |  |
 | imagePullSecrets | list | `[]` |  |
 | livenessProbe.httpGet.path | string | `"/healthz"` |  |
 | livenessProbe.httpGet.port | int | `8081` |  |
@@ -282,7 +282,6 @@ After the deletion of the Role or RoleBinding, the Role will also be deleted in
 | namespace.create | bool | `true` |  |
 | namespace.nameOverride | string | `""` |  |
 | nodeSelector | object | `{}` |  |
-| tolerations | object | `[]` |  |
 | readinessProbe.httpGet.path | string | `"/readyz"` |  |
 | readinessProbe.httpGet.port | int | `8081` |  |
 | readinessProbe.initialDelaySeconds | int | `5` |  |
@@ -295,6 +294,7 @@ After the deletion of the Role or RoleBinding, the Role will also be deleted in
 | securityContext.runAsNonRoot | bool | `true` |  |
 | securityContext.seccompProfile.type | string | `"RuntimeDefault"` |  |
 | serviceAccountAnnotations | list | `[]` |  |
+| tolerations | list | `[]` |  |
 
 ----------------------------------------------
-Autogenerated from chart metadata using [helm-docs](https://github.com/norwoodj/helm-docs)
+Autogenerated from chart metadata using [helm-docs](https://github.com/norwoodj/helm-docs)

helm/argocd-rbac-operator/templates/manager_role.yaml

@@ -20,6 +20,7 @@ rules:
   - get
   - list
   - patch
+  - watch
 - apiGroups:
   - rbac-operator.argoproj-labs.io
   resources:

helm/argocd-rbac-operator/values.yaml

@@ -16,11 +16,12 @@ argocd:
   cmName: argocd-rbac-cm
 
 # Specify the Operator container image to use for the deployment.
-# For example, the following sets the image to the ``quay.io/argoprojlabs/argocd-rbac-operator`` repo and the v0.1.8 tag.
+# For example, the following sets the image to the ``quay.io/argoprojlabs/argocd-rbac-operator`` repo.
 # The container pulls the image if not already present
 image:
   repository: quay.io/argoprojlabs/argocd-rbac-operator
-  tag: v0.1.9
+  # Overrides the global tag whose default is the chart appVersion
+  tag: ""
   pullPolicy: IfNotPresent
 
 # An array of additional annotations to be applied to the operator service account

internal/controller/argocdprojectrolebinding_controller.go

@@ -43,7 +43,7 @@ type ArgoCDProjectRoleBindingReconciler struct {
 // +kubebuilder:rbac:groups=rbac-operator.argoproj-labs.io,resources=argocdprojectrolebindings/finalizers,verbs=*
 // +kubebuilder:rbac:groups=rbac-operator.argoproj-labs.io,resources=argocdprojectroles,verbs=get;list
 // +kubebuilder:rbac:groups=rbac-operator.argoproj-labs.io,resources=argocdprojectroles/status,verbs=get;list;update
-// +kubebuilder:rbac:groups=argoproj.io,resources=appprojects,verbs=get;list;patch
+// +kubebuilder:rbac:groups=argoproj.io,resources=appprojects,verbs=get;list;patch;watch
 
 // Reconcile is part of the main kubernetes reconciliation loop which aims to
 // move the current state of the cluster closer to the desired state.