argo-workflows-submit ClusterRole to allow only submitting workflows but not the full argo-workflows-edit permissions

[komapa]

So you have this installed by default https://github.com/argoproj/argo-helm/blob/main/charts/argo-workflows/templates/controller/workflow-aggregate-roles.yaml and we want to allow ServiceAccount to have permissions to submit workflows via /api/v1/workflows/NAMESPACE/submit. So my ask here is, do you think you will approve such contribution and is such permission even possible with how argo-workflows work?

Thank you!

[yu-croco]

Hi @komapa , thank you for your question.

do you think you will approve such contribution and is such permission even possible with how argo-workflows work?

We follow upstream's manifest, so if you want to change the definition, please approach to upstream at first.