From d269e6f936ba1e23d361550a84c8138c8e14aa01 Mon Sep 17 00:00:00 2001 From: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com> Date: Fri, 29 Aug 2025 11:03:13 -0400 Subject: [PATCH] fix(appset): add applicationsets to the built-in readonly role (#24190) (#24318) Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com> --- assets/builtin-policy.csv | 1 + 1 file changed, 1 insertion(+) diff --git a/assets/builtin-policy.csv b/assets/builtin-policy.csv index 088f5fbd08..adc8be17cf 100644 --- a/assets/builtin-policy.csv +++ b/assets/builtin-policy.csv @@ -7,6 +7,7 @@ # p, , , , , p, role:readonly, applications, get, */*, allow +p, role:readonly, applicationsets, get, */*, allow p, role:readonly, certificates, get, *, allow p, role:readonly, clusters, get, *, allow p, role:readonly, repositories, get, *, allow