fix: argocd notification controller app cluster permission issue (#16057

) (#16159) * if applicationNamespaces is not provided as input parameter, then use namespaced appClient * fix go lint error --------- Signed-off-by: May Zhang <[email protected]> Co-authored-by: May Zhang <[email protected]>
argoproj · Oct 30, 2023 · 5c86f75 · 5c86f75
1 parent 67e1e04
commit 5c86f75
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/notification_controller/controller/controller.go b/notification_controller/controller/controller.go
@@ -61,7 +61,13 @@ func NewController(
 	secretName string,
 	configMapName string,
 ) *notificationController {
-	appClient := client.Resource(applications)
+	var appClient dynamic.ResourceInterface
+	namespaceableAppClient := client.Resource(applications)
+	appClient = namespaceableAppClient
+	if len(applicationNamespaces) == 0 {
+		appClient = namespaceableAppClient.Namespace(namespace)
+	}
+
 	appInformer := newInformer(appClient, namespace, applicationNamespaces, appLabelSelector)
 	appProjInformer := newInformer(newAppProjClient(client, namespace), namespace, []string{namespace}, "")
 	secretInformer := k8s.NewSecretInformer(k8sClient, namespace, secretName)
@@ -74,7 +80,7 @@ func NewController(
 		appInformer:       appInformer,
 		appProjInformer:   appProjInformer,
 		apiFactory:        apiFactory}
-	res.ctrl = controller.NewController(appClient, appInformer, apiFactory,
+	res.ctrl = controller.NewController(namespaceableAppClient, appInformer, apiFactory,
 		controller.WithSkipProcessing(func(obj v1.Object) (bool, string) {
 			app, ok := (obj).(*unstructured.Unstructured)
 			if !ok {