All 29 RBAC questions
More in RBAC
What are the built-in roles in ArgoCD? Where is ArgoCD RBAC configured? What is the policy.default setting? How do you give a group admin access via RBAC? How do you bind a user (not a group) to a role? How is an ArgoCD RBAC policy rule structured? How do you scope RBAC to specific projects and applications? How does ArgoCD integrate with SSO for authentication? What is the exec resource in RBAC and why is it sensitive? What actions can be controlled for the applications resource?
Advertisement
ArgoCD › RBAC

What is the difference between ArgoCD RBAC and Kubernetes RBAC?

Beginner

Answer

ArgoCD RBAC governs actions within ArgoCD (who can view/sync/delete apps, manage clusters/repos). Kubernetes RBAC governs access to cluster API resources. A user might sync an app in ArgoCD (ArgoCD RBAC) while ArgoCD's service account applies the resources using its Kubernetes permissions.
Real-world example A developer with ArgoCD sync rights triggers deploys, but the actual apply uses ArgoCD's own Kubernetes permissions.

Common follow-ups: Who actually applies resources to the cluster? | Which RBAC governs app sync?

Applications Multi-cluster RBAC
All 29 RBAC questions