CNCF-hosted Co-located Events North America 2024

Incidents caused by accidental actions can have far-reaching consequences. At Intuit, developers encountered a series of such incidents due to unintended actions performed through the Argo CD UI, including deletion of Replica Sets and Argo Rollouts. To prevent these types of unintended actions, we extended the current RBAC system to implement fine-grained policies. With this policy model, developers can now make changes with confidence, free from the fear of inadvertently impacting production systems. In this talk, we will delve into the intricacies of our journey, the strategies we employed to accomplish our goals, the future of Argo CD RBAC and what is yet to come. Join us as we explore the transformative power of fine-grained permissioning in preventing incidents and cultivating a culture of secure development.