feat(argo-cd): add custom roleRules support for application-controller #3500

puretension · 2025-09-19T13:44:52Z

Description

Fixes #3414 - Add possibility to customize Role rules for application-controller when running in namespace-scoped environments with security constraints. This follows the same pattern as the existing clusterRoleRules feature and addresses the need for custom RBAC rules in namespace-scoped deployments.

Changes

Add controller.roleRules array for custom RBAC rules
Update Role template to use with pattern for conditional rules
Maintain backward compatibility with existing default rules
Follow same pattern as existing clusterRoleRules feature

Usage

controller:
  roleRules:
    - apiGroups:
      - ""
      resources:
      - pods
      verbs:
      - get
      - list
      - watch
    - apiGroups:
      - apps
      resources:
      - replicasets
      verbs:
      - get
      - list

Testing

Tested with default configuration (existing behavior preserved)
Tested with custom roleRules enabled
Helm template rendering verified for both scenarios

Checklist:

I have bumped the chart version according to versioning
I have updated the documentation according to documentation
I have updated the chart changelog with all the changes that come with this pull request according to changelog.
Any new values are backwards compatible and/or have sensible default.
I have signed off all my commits as required by DCO.
I have created a separate pull request for each chart according to pull requests
My build is green (troubleshooting builds).

Add possibility to customize Role rules for application-controller when running in namespace-scoped environments with security constraints. This follows the same pattern as the existing clusterRoleRules feature: - controller.roleRules.enabled: Enable custom rules (default: false) - controller.roleRules.rules: List of custom RBAC rules Fixes argoproj#3414 Signed-off-by: puretension <[email protected]>

charts/argo-cd/templates/argocd-application-controller/role.yaml

yu-croco · 2025-09-19T15:21:40Z

charts/argo-cd/values.yaml

+    # -- Enable custom rules for the application controller's Role resource
+    enabled: false


You can remove the enabled flag now.

Thank you I'm on it!

Signed-off-by: puretension <[email protected]>

puretension · 2025-09-19T16:22:26Z

@yu-croco Thanks for guiding me toward the with pattern! Removing the enabled flag made this much simpler and more user-friendly. I learned a lot about Helm best practices through your review - really appreciate it! 🙏

Final push completed with enabled flag removed. Please let me know if anything else needs adjustment!

charts/argo-cd/templates/argocd-application-controller/role.yaml

Co-authored-by: Aikawa <[email protected]> Signed-off-by: DOHYEONG LEE <[email protected]>

yu-croco

Thank you for your contribution. LGTM.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [argo-cd](https://github.com/argoproj/argo-helm) | major | `8.0.17` -> `9.0.5` | --- ### Release Notes <details> <summary>argoproj/argo-helm (argo-cd)</summary> ### [`v9.0.5`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.0.5) [Compare Source](argoproj/argo-helm@argo-cd-9.0.4...argo-cd-9.0.5) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): Add backendRefs group and kind to HTTPRoute by [@cskinfill](https://github.com/cskinfill) in [#3536](argoproj/argo-helm#3536) #### New Contributors - [@cskinfill](https://github.com/cskinfill) made their first contribution in [#3536](argoproj/argo-helm#3536) **Full Changelog**: <argoproj/argo-helm@argo-cd-9.0.4...argo-cd-9.0.5> ### [`v9.0.4`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.0.4) [Compare Source](argoproj/argo-helm@argo-cd-9.0.3...argo-cd-9.0.4) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): Update notification deployment to include checksum by [@jpaulodit](https://github.com/jpaulodit) in [#3549](argoproj/argo-helm#3549) #### New Contributors - [@jpaulodit](https://github.com/jpaulodit) made their first contribution in [#3549](argoproj/argo-helm#3549) **Full Changelog**: <argoproj/argo-helm@argocd-image-updater-0.14.0...argo-cd-9.0.4> ### [`v9.0.3`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.0.3) [Compare Source](argoproj/argo-helm@argo-cd-9.0.2...argo-cd-9.0.3) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - docs(argo-cd): Add context to Changelog in README for v9.0.0 by [@yu-croco](https://github.com/yu-croco) in [#3547](argoproj/argo-helm#3547) **Full Changelog**: <argoproj/argo-helm@argo-cd-9.0.2...argo-cd-9.0.3> ### [`v9.0.2`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.0.2) [Compare Source](argoproj/argo-helm@argo-cd-9.0.1...argo-cd-9.0.2) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): bump github/codeql-action from 4.30.8 to 4.30.9 in the dependencies group by [@dependabot](https://github.com/dependabot)\[bot] in [#3542](argoproj/argo-helm#3542) - chore(deps): update renovatebot/github-action action to v43.0.18 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3544](argoproj/argo-helm#3544) - docs(argo-cd): Correct Changelog in README for v9.0.0 by [@yu-croco](https://github.com/yu-croco) in [#3546](argoproj/argo-helm#3546) **Full Changelog**: <argoproj/argo-helm@argo-cd-9.0.1...argo-cd-9.0.2> ### [`v9.0.1`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.0.1) [Compare Source](argoproj/argo-helm@argo-cd-9.0.0...argo-cd-9.0.1) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update dependency argoproj/argo-cd to v3.1.9 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3541](argoproj/argo-helm#3541) **Full Changelog**: <argoproj/argo-helm@argo-cd-9.0.0...argo-cd-9.0.1> ### [`v9.0.0`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-9.0.0) [Compare Source](argoproj/argo-helm@argo-cd-8.6.4...argo-cd-9.0.0) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): Align default values of argocd-cmd-params-cm ConfigMap to upstream by [@yu-croco](https://github.com/yu-croco) in [#3540](argoproj/argo-helm#3540) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.6.4...argo-cd-9.0.0> ### [`v8.6.4`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.6.4) [Compare Source](argoproj/argo-helm@argo-cd-8.6.3...argo-cd-8.6.4) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update ghcr.io/oliver006/redis\_exporter Docker tag to v1.79.0 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3539](argoproj/argo-helm#3539) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.6.3...argo-cd-8.6.4> ### [`v8.6.3`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.6.3) [Compare Source](argoproj/argo-helm@argo-cd-8.6.2...argo-cd-8.6.3) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): Add extraArgs to secretInit job by [@kabooboo](https://github.com/kabooboo) in [#3533](argoproj/argo-helm#3533) #### New Contributors - [@kabooboo](https://github.com/kabooboo) made their first contribution in [#3533](argoproj/argo-helm#3533) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.6.2...argo-cd-8.6.3> ### [`v8.6.2`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.6.2) [Compare Source](argoproj/argo-helm@argo-cd-8.6.1...argo-cd-8.6.2) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): Add runtimeClassName on redis init job by [@juldrixx](https://github.com/juldrixx) in [#3532](argoproj/argo-helm#3532) #### New Contributors - [@juldrixx](https://github.com/juldrixx) made their first contribution in [#3532](argoproj/argo-helm#3532) **Full Changelog**: <argoproj/argo-helm@argo-workflows-0.45.27...argo-cd-8.6.2> ### [`v8.6.1`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.6.1) [Compare Source](argoproj/argo-helm@argo-cd-8.6.0...argo-cd-8.6.1) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): bump github/codeql-action from 3.30.6 to 4.30.8 by [@dependabot](https://github.com/dependabot)\[bot] in [#3527](argoproj/argo-helm#3527) - chore(deps): update renovatebot/github-action action to v43.0.17 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3528](argoproj/argo-helm#3528) - docs(argo-cd): Add AKS Web Application Routing ingress example by [@downfa11](https://github.com/downfa11) in [#3529](argoproj/argo-helm#3529) #### New Contributors - [@downfa11](https://github.com/downfa11) made their first contribution in [#3529](argoproj/argo-helm#3529) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.6.0...argo-cd-8.6.1> ### [`v8.6.0`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.6.0) [Compare Source](argoproj/argo-helm@argo-cd-8.5.10...argo-cd-8.6.0) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - feat(argo-cd): Add HTTPRoute support for Gateway API by [@lexfrei](https://github.com/lexfrei) in [#3517](argoproj/argo-helm#3517) **Full Changelog**: <argoproj/argo-helm@argocd-image-updater-0.13.0...argo-cd-8.6.0> ### [`v8.5.10`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.10) [Compare Source](argoproj/argo-helm@argo-cd-8.5.9...argo-cd-8.5.10) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): Bump redis version due to CVE-2025-49844 by [@yu-croco](https://github.com/yu-croco) in [#3524](argoproj/argo-helm#3524) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.5.9...argo-cd-8.5.10> ### [`v8.5.9`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.9) [Compare Source](argoproj/argo-helm@argo-cd-8.5.8...argo-cd-8.5.9) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): bump the dependencies group with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#3516](argoproj/argo-helm#3516) - chore(deps): update renovatebot/github-action action to v43.0.15 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3519](argoproj/argo-helm#3519) - chore(argo-cd): Update ghcr.io/oliver006/redis\_exporter Docker tag to v1.78.0 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3521](argoproj/argo-helm#3521) **Full Changelog**: <argoproj/argo-helm@argo-rollouts-2.40.5...argo-cd-8.5.9> ### [`v8.5.8`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.8) [Compare Source](argoproj/argo-helm@argo-cd-8.5.7...argo-cd-8.5.8) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): bump github/codeql-action from 3.30.3 to 3.30.5 in the dependencies group by [@dependabot](https://github.com/dependabot)\[bot] in [#3508](argoproj/argo-helm#3508) - chore(deps): update renovatebot/github-action action to v43.0.14 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3509](argoproj/argo-helm#3509) - chore(argo-cd): Update dependency argoproj/argo-cd to v3.1.8 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3512](argoproj/argo-helm#3512) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.5.7...argo-cd-8.5.8> ### [`v8.5.7`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.7) [Compare Source](argoproj/argo-helm@argo-cd-8.5.6...argo-cd-8.5.7) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - feat(argo-cd): Allow configuring resource requests/limits for copyutil initContainer in repo-server pod by [@puretension](https://github.com/puretension) in [#3507](argoproj/argo-helm#3507) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.5.6...argo-cd-8.5.7> ### [`v8.5.6`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.6) [Compare Source](argoproj/argo-helm@argo-cd-8.5.5...argo-cd-8.5.6) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): Add missing environment variable for v3.1.7 by [@yu-croco](https://github.com/yu-croco) in [#3505](argoproj/argo-helm#3505) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.5.5...argo-cd-8.5.6> ### [`v8.5.5`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.5) [Compare Source](argoproj/argo-helm@argo-cd-8.5.4...argo-cd-8.5.5) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update dependency argoproj/argo-cd to v3.1.7 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3503](argoproj/argo-helm#3503) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.5.4...argo-cd-8.5.5> ### [`v8.5.4`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.4) [Compare Source](argoproj/argo-helm@argo-cd-8.5.3...argo-cd-8.5.4) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): update renovatebot/github-action action to v43.0.13 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3502](argoproj/argo-helm#3502) - fix(argo-cd): Fix repo-server NetworkPolicy to allow metrics port access without requiring separate metrics service by [@puretension](https://github.com/puretension) in [#3501](argoproj/argo-helm#3501) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.5.3...argo-cd-8.5.4> ### [`v8.5.3`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.3) [Compare Source](argoproj/argo-helm@argo-cd-8.5.2...argo-cd-8.5.3) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - feat(argo-cd): add custom roleRules support for application-controller by [@puretension](https://github.com/puretension) in [#3500](argoproj/argo-helm#3500) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.5.2...argo-cd-8.5.3> ### [`v8.5.2`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.2) [Compare Source](argoproj/argo-helm@argo-cd-8.5.1...argo-cd-8.5.2) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update dependency argoproj/argo-cd to v3.1.6 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3495](argoproj/argo-helm#3495) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.5.1...argo-cd-8.5.2> ### [`v8.5.1`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.1) [Compare Source](argoproj/argo-helm@argo-cd-8.5.0...argo-cd-8.5.1) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - ci(argo-cd): Replace Bitnami redis with simple YAML file by [@mkilchhofer](https://github.com/mkilchhofer) in [#3497](argoproj/argo-helm#3497) **Full Changelog**: <argoproj/argo-helm@argo-workflows-0.45.26...argo-cd-8.5.1> ### [`v8.5.0`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.5.0) [Compare Source](argoproj/argo-helm@argo-cd-8.4.1...argo-cd-8.5.0) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): Adding the size limit for emptyDir in statefulset of argocd-application-controller by [@Ghost21899](https://github.com/Ghost21899) in [#3281](argoproj/argo-helm#3281) #### New Contributors - [@Ghost21899](https://github.com/Ghost21899) made their first contribution in [#3281](argoproj/argo-helm#3281) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.4.1...argo-cd-8.5.0> ### [`v8.4.1`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.4.1) [Compare Source](argoproj/argo-helm@argo-cd-8.4.0...argo-cd-8.4.1) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - fix(argo-cd): add allowed audiences parameter to values.yaml by [@Crowley723](https://github.com/Crowley723) in [#3299](argoproj/argo-helm#3299) #### New Contributors - [@Crowley723](https://github.com/Crowley723) made their first contribution in [#3299](argoproj/argo-helm#3299) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.4.0...argo-cd-8.4.1> ### [`v8.4.0`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.4.0) [Compare Source](argoproj/argo-helm@argo-cd-8.3.9...argo-cd-8.4.0) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - feat(argo-cd): VerticalPodAutoscaler support for application controller by [@yaringol](https://github.com/yaringol) in [#3365](argoproj/argo-helm#3365) #### New Contributors - [@yaringol](https://github.com/yaringol) made their first contribution in [#3365](argoproj/argo-helm#3365) **Full Changelog**: <argoproj/argo-helm@argo-workflows-0.45.25...argo-cd-8.4.0> ### [`v8.3.9`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.9) [Compare Source](argoproj/argo-helm@argo-cd-8.3.8...argo-cd-8.3.9) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): update renovatebot/github-action action to v43.0.12 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3491](argoproj/argo-helm#3491) - chore(deps): bump github/codeql-action from 3.30.1 to 3.30.3 in the dependencies group across 1 directory by [@dependabot](https://github.com/dependabot)\[bot] in [#3487](argoproj/argo-helm#3487) - fix(argo-cd): Update ingress class annotation for GKE compatibility by [@tgigli](https://github.com/tgigli) in [#3493](argoproj/argo-helm#3493) #### New Contributors - [@tgigli](https://github.com/tgigli) made their first contribution in [#3493](argoproj/argo-helm#3493) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.3.8...argo-cd-8.3.9> ### [`v8.3.8`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.8) [Compare Source](argoproj/argo-helm@argo-cd-8.3.7...argo-cd-8.3.8) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): update actions/create-github-app-token action to v2.1.4 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3484](argoproj/argo-helm#3484) - docs(argo-cd): Add instruction how to override argocd-params-cm by [@yu-croco](https://github.com/yu-croco) in [#3490](argoproj/argo-helm#3490) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.3.7...argo-cd-8.3.8> ### [`v8.3.7`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.7) [Compare Source](argoproj/argo-helm@argo-cd-8.3.6...argo-cd-8.3.7) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update ghcr.io/oliver006/redis\_exporter Docker tag to v1.77.0 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3483](argoproj/argo-helm#3483) **Full Changelog**: <argoproj/argo-helm@argo-workflows-0.45.24...argo-cd-8.3.7> ### [`v8.3.6`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.6) [Compare Source](argoproj/argo-helm@argo-cd-8.3.5...argo-cd-8.3.6) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): bump github/codeql-action from 3.29.11 to 3.30.1 in the dependencies group by [@dependabot](https://github.com/dependabot)\[bot] in [#3468](argoproj/argo-helm#3468) - chore(deps): bump actions/setup-python from 5.6.0 to 6.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#3469](argoproj/argo-helm#3469) - chore(deps): bump actions/labeler from 5.0.0 to 6.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#3471](argoproj/argo-helm#3471) - chore(deps): bump actions/stale from 9.1.0 to 10.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#3470](argoproj/argo-helm#3470) - docs(deps): Fix wrong link by [@yu-croco](https://github.com/yu-croco) in [#3472](argoproj/argo-helm#3472) - chore(deps): update renovatebot/github-action action to v43.0.11 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3473](argoproj/argo-helm#3473) - docs(deps): Add Version Support Policy by [@yu-croco](https://github.com/yu-croco) in [#3466](argoproj/argo-helm#3466) - chore(argo-cd): Update dependency argoproj/argo-cd to v3.1.5 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3478](argoproj/argo-helm#3478) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.3.5...argo-cd-8.3.6> ### [`v8.3.5`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.5) [Compare Source](argoproj/argo-helm@argo-cd-8.3.4...argo-cd-8.3.5) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update dependency argoproj/argo-cd to v3.1.4 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3467](argoproj/argo-helm#3467) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.3.4...argo-cd-8.3.5> ### [`v8.3.4`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.4) [Compare Source](argoproj/argo-helm@argo-cd-8.3.3...argo-cd-8.3.4) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update dependency argoproj/argo-cd to v3.1.3 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3463](argoproj/argo-helm#3463) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.3.3...argo-cd-8.3.4> ### [`v8.3.3`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.3) [Compare Source](argoproj/argo-helm@argo-cd-8.3.2...argo-cd-8.3.3) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): update ghcr.io/renovatebot/renovate docker tag to v41.91.3 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3460](argoproj/argo-helm#3460) - chore(deps): update renovatebot/github-action action to v43.0.10 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3461](argoproj/argo-helm#3461) - chore(argo-cd): Update ghcr.io/dexidp/dex Docker tag to v2.44.0 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3462](argoproj/argo-helm#3462) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.3.2...argo-cd-8.3.3> ### [`v8.3.2`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.2) [Compare Source](argoproj/argo-helm@argo-cd-8.3.1...argo-cd-8.3.2) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update ghcr.io/oliver006/redis\_exporter Docker tag to v1.76.0 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3445](argoproj/argo-helm#3445) **Full Changelog**: <argoproj/argo-helm@argo-workflows-0.45.23...argo-cd-8.3.2> ### [`v8.3.1`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.1) [Compare Source](argoproj/argo-helm@argo-cd-8.3.0...argo-cd-8.3.1) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): update actions/checkout action to v5 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3426](argoproj/argo-helm#3426) - chore(deps): update actions/create-github-app-token action to v2.1.1 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3427](argoproj/argo-helm#3427) - chore(deps): bump the dependencies group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#3430](argoproj/argo-helm#3430) - chore(deps): bump the dependencies group across 1 directory with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#3446](argoproj/argo-helm#3446) - chore(deps): update renovatebot/github-action action to v43.0.9 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3442](argoproj/argo-helm#3442) - chore(argo-cd): Update dependency argoproj/argo-cd to v3.1.1 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3450](argoproj/argo-helm#3450) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.3.0...argo-cd-8.3.1> ### [`v8.3.0`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.3.0) [Compare Source](argoproj/argo-helm@argo-cd-8.2.7...argo-cd-8.3.0) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - feat(argo-cd): Upgrade Argo CD v3.1.0 by [@yu-croco](https://github.com/yu-croco) in [#3438](argoproj/argo-helm#3438) **Full Changelog**: <argoproj/argo-helm@argo-workflows-0.45.22...argo-cd-8.3.0> ### [`v8.2.7`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.2.7) [Compare Source](argoproj/argo-helm@argo-cd-8.2.6...argo-cd-8.2.7) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update redis\_exporter for redis-ha by [@yu-croco](https://github.com/yu-croco) in [#3417](argoproj/argo-helm#3417) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.2.6...argo-cd-8.2.7> ### [`v8.2.6`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.2.6) [Compare Source](argoproj/argo-helm@argo-cd-8.2.5...argo-cd-8.2.6) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): update renovatebot/github-action action to v43.0.6 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3416](argoproj/argo-helm#3416) - chore(argo-cd): Update ghcr.io/oliver006/redis\_exporter Docker tag to v1.75.0 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3419](argoproj/argo-helm#3419) **Full Changelog**: <argoproj/argo-helm@argo-rollouts-2.40.3...argo-cd-8.2.6> ### [`v8.2.5`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.2.5) [Compare Source](argoproj/argo-helm@argo-cd-8.2.4...argo-cd-8.2.5) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - docs(argo-cd): update NOTES.txt for conditional rootpath by [@CHOUMnote](https://github.com/CHOUMnote) in [#3407](argoproj/argo-helm#3407) #### New Contributors - [@CHOUMnote](https://github.com/CHOUMnote) made their first contribution in [#3407](argoproj/argo-helm#3407) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.2.4...argo-cd-8.2.5> ### [`v8.2.4`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.2.4) [Compare Source](argoproj/argo-helm@argo-cd-8.2.3...argo-cd-8.2.4) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): update renovatebot/github-action action to v43.0.5 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3402](argoproj/argo-helm#3402) - fix(argo-cd): Fix inheritance of 'global.logging' values for the commit server component by [@bonddim](https://github.com/bonddim) in [#3404](argoproj/argo-helm#3404) #### New Contributors - [@bonddim](https://github.com/bonddim) made their first contribution in [#3404](argoproj/argo-helm#3404) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.2.3...argo-cd-8.2.4> ### [`v8.2.3`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.2.3) [Compare Source](argoproj/argo-helm@argo-cd-8.2.2...argo-cd-8.2.3) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): bump github/codeql-action from 3.29.2 to 3.29.4 in the dependencies group by [@dependabot](https://github.com/dependabot)\[bot] in [#3400](argoproj/argo-helm#3400) - fix(argo-cd): correct typo 'Addtional' to 'Additional' in values.yaml by [@in-jun](https://github.com/in-jun) in [#3403](argoproj/argo-helm#3403) #### New Contributors - [@in-jun](https://github.com/in-jun) made their first contribution in [#3403](argoproj/argo-helm#3403) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.2.2...argo-cd-8.2.3> ### [`v8.2.2`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.2.2) [Compare Source](argoproj/argo-helm@argo-cd-8.2.1...argo-cd-8.2.2) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update dependency argoproj/argo-cd to v3.0.12 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3399](argoproj/argo-helm#3399) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.2.1...argo-cd-8.2.2> ### [`v8.2.1`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.2.1) [Compare Source](argoproj/argo-helm@argo-cd-8.2.0...argo-cd-8.2.1) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Set file mode of YAML files to 644 by [@lindhe](https://github.com/lindhe) in [#3397](argoproj/argo-helm#3397) #### New Contributors - [@lindhe](https://github.com/lindhe) made their first contribution in [#3397](argoproj/argo-helm#3397) **Full Changelog**: <argoproj/argo-helm@argo-rollouts-2.40.2...argo-cd-8.2.1> ### [`v8.2.0`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.2.0) [Compare Source](argoproj/argo-helm@argo-cd-8.1.4...argo-cd-8.2.0) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - feat(argo-cd): Support ability to override `.global.networkPolicy.create` at the component level by [@AswinT22](https://github.com/AswinT22) in [#3382](argoproj/argo-helm#3382) #### New Contributors - [@AswinT22](https://github.com/AswinT22) made their first contribution in [#3382](argoproj/argo-helm#3382) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.1.4...argo-cd-8.2.0> ### [`v8.1.4`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.1.4) [Compare Source](argoproj/argo-helm@argo-cd-8.1.3...argo-cd-8.1.4) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): update renovatebot/github-action action to v43.0.4 by [@argoproj-renovate](https://github.com/argoproj-renovate)\[bot] in [#3393](argoproj/argo-helm#3393) - docs(argo-cd): document admin password via helm.values in Application CR by [@miinsun](https://github.com/miinsun) in [#3390](argoproj/argo-helm#3390) #### New Contributors - [@miinsun](https://github.com/miinsun) made their first contribution in [#3390](argoproj/argo-helm#3390) **Full Changelog**: <argoproj/argo-helm@argo-workflows-0.45.20...argo-cd-8.1.4> ### [`v8.1.3`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.1.3) [Compare Source](argoproj/argo-helm@argo-cd-8.1.2...argo-cd-8.1.3) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(argo-cd): Update dependency argoproj/argo-cd to v3.0.11 by [@argoproj-renovate](https://github.com/argoproj-renovate) in [#3380](argoproj/argo-helm#3380) **Full Changelog**: <argoproj/argo-helm@argo-rollouts-2.40.0...argo-cd-8.1.3> ### [`v8.1.2`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.1.2) [Compare Source](argoproj/argo-helm@argo-cd-8.1.1...argo-cd-8.1.2) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - chore(deps): update renovatebot/github-action action to v43 by [@argoproj-renovate](https://github.com/argoproj-renovate) in [#3363](argoproj/argo-helm#3363) - chore(deps): update renovatebot/github-action action to v43.0.1 by [@argoproj-renovate](https://github.com/argoproj-renovate) in [#3366](argoproj/argo-helm#3366) - fix(argo-cd): do not use hardcoded commit server URL by [@nobbs](https://github.com/nobbs) in [#3367](argoproj/argo-helm#3367) **Full Changelog**: <argoproj/argo-helm@argo-workflows-0.45.19...argo-cd-8.1.2> ### [`v8.1.1`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.1.1) [Compare Source](argoproj/argo-helm@argo-cd-8.1.0...argo-cd-8.1.1) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - feat(argo-cd): Add support for custom deployment labels by [@akolacz](https://github.com/akolacz) in [#3349](argoproj/argo-helm#3349) #### New Contributors - [@akolacz](https://github.com/akolacz) made their first contribution in [#3349](argoproj/argo-helm#3349) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.1.0...argo-cd-8.1.1> ### [`v8.1.0`](https://github.com/argoproj/argo-helm/releases/tag/argo-cd-8.1.0) [Compare Source](argoproj/argo-helm@argo-cd-8.0.17...argo-cd-8.1.0) A Helm chart for Argo CD, a declarative, GitOps continuous delivery tool for Kubernetes. #### What's Changed - docs(github): Add a PR checklist for PR unit by [@yu-croco](https://github.com/yu-croco) in [#3354](argoproj/argo-helm#3354) - chore(deps): bump github/codeql-action from 3.28.18 to 3.28.19 in the dependencies group by [@dependabot](https://github.com/dependabot) in [#3343](argoproj/argo-helm#3343) - chore(deps): update renovatebot/github-action action to v42.0.6 by [@argoproj-renovate](https://github.com/argoproj-renovate) in [#3357](argoproj/argo-helm#3357) - feat(argo-cd): support trafficDistribution in argo repo service by [@kewei5zhang](https://github.com/kewei5zhang) in [#3358](argoproj/argo-helm#3358) #### New Contributors - [@kewei5zhang](https://github.com/kewei5zhang) made their first contribution in [#3358](argoproj/argo-helm#3358) **Full Changelog**: <argoproj/argo-helm@argo-cd-8.0.17...argo-cd-8.1.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Co-authored-by: Renovate Bot <[email protected]> Reviewed-on: https://git.malford.io/ops/homelab/pulls/12

puretension requested review from jmeridth, mbevc1, mkilchhofer, pdrastil, tico24 and yu-croco as code owners September 19, 2025 13:44

github-actions bot added argo-cd size/S labels Sep 19, 2025

puretension mentioned this pull request Sep 19, 2025

feat(argo-cd): add custom roleRules support for application-controller #3499

Closed

10 tasks

yu-croco reviewed Sep 19, 2025

View reviewed changes

charts/argo-cd/templates/argocd-application-controller/role.yaml Outdated Show resolved Hide resolved

puretension force-pushed the feat/argo-cd-controller-role-rules-3414 branch from f1b59b6 to a93854f Compare September 19, 2025 14:30

yu-croco reviewed Sep 19, 2025

View reviewed changes

puretension force-pushed the feat/argo-cd-controller-role-rules-3414 branch 4 times, most recently from a97a86c to 679686d Compare September 19, 2025 15:50

fix: remove enabled flag and use with pattern for roleRules

fd6f337

Signed-off-by: puretension <[email protected]>

puretension force-pushed the feat/argo-cd-controller-role-rules-3414 branch from 0343854 to fd6f337 Compare September 19, 2025 16:07

docs: update roleRules documentation structure

d56d91f

Signed-off-by: puretension <[email protected]>

yu-croco reviewed Sep 20, 2025

View reviewed changes

charts/argo-cd/templates/argocd-application-controller/role.yaml Outdated Show resolved Hide resolved

Update charts/argo-cd/templates/argocd-application-controller/role.yaml

455e240

Co-authored-by: Aikawa <[email protected]> Signed-off-by: DOHYEONG LEE <[email protected]>

yu-croco approved these changes Sep 20, 2025

View reviewed changes

mbevc1 approved these changes Sep 20, 2025

View reviewed changes

mbevc1 merged commit 49d8f70 into argoproj:main Sep 20, 2025
6 checks passed

puretension mentioned this pull request Nov 4, 2025

REQUEST: New membership for puretension argoproj/argoproj#403

Closed

6 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(argo-cd): add custom roleRules support for application-controller #3500

feat(argo-cd): add custom roleRules support for application-controller #3500

puretension commented Sep 19, 2025 •

edited

Loading

Uh oh!

Uh oh!

yu-croco Sep 19, 2025

Uh oh!

puretension Sep 19, 2025

Uh oh!

puretension commented Sep 19, 2025

Uh oh!

Uh oh!

yu-croco left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

		# -- Enable custom rules for the application controller's Role resource
		enabled: false

feat(argo-cd): add custom roleRules support for application-controller #3500

feat(argo-cd): add custom roleRules support for application-controller #3500

Conversation

puretension commented Sep 19, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Changes

Usage

Testing

Uh oh!

Uh oh!

yu-croco Sep 19, 2025

Choose a reason for hiding this comment

Uh oh!

puretension Sep 19, 2025

Choose a reason for hiding this comment

Uh oh!

puretension commented Sep 19, 2025

Uh oh!

Uh oh!

yu-croco left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

puretension commented Sep 19, 2025 •

edited

Loading