You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Somehow when enabling the feature introduced in #12062 users can no longer open the web-terminal for pods and instead get an error.
To Reproduce
Argo CD with an OICD provider hooked up
Enable the web-terminal feature (has to be explicitly enabled)
Grant an OIDC group the role: admin in argocd-rbac-cm (could also be a permission based on AppProject, but for the sake of simplicity we just assume the user is admin)
Enable the UserInfoGroup feature using these keys in argocd-cm:
the-technat
changed the title
Enabling fetching of userInfoGroups breaks terminal RBCA
Enabling fetching of UserInfoGroups breaks web-terminal
Mar 7, 2025
Since this is a feature I contributed I'm also willing to fix this bug.
But I suppose the terminal RBAC works different than the rest so if somebody could point me in the right direction where to look/start that would be awesome.
Checklist:
argocd version
.Describe the bug
Somehow when enabling the feature introduced in #12062 users can no longer open the web-terminal for pods and instead get an error.
To Reproduce
role: admin
inargocd-rbac-cm
(could also be a permission based on AppProject, but for the sake of simplicity we just assume the user is admin)argocd-cm
:Expected behavior
Web-Terminal works since the users is admin in Argo CD and can see/edit everything.
If the UserInfoGroups feature is disabled the web-terminal works without issues.
Screenshots
Version
Logs
I can't see anything relevant in the logs.
The text was updated successfully, but these errors were encountered: