apiVersion: v1 kind: ConfigMap metadata: name: argocd-rbac-cm data: policy.csv: | g, admins, role:admin policy.default: "" scopes: "[groups]"