Argo CD Server Chart Grants Unnecessary patch and delete Permissions on All Resources (*.*)

[iakashraut]

Describe the bug

While reviewing the default Argo CD Server RBAC generated by the Helm chart, I noticed that the chart creates a ClusterRole that grants very broad privileges This effectively gives the argocd-server service account patch, delete, get permissions across all API groups and all resource types, which is unnecessarily high and goes beyond the expected scope of the least privilege principal.

Related helm chart

argo-cd

Helm chart version

main

To Reproduce

[argo-helm/charts/argo-cd/templates/argocd-server/clusterrole.yaml](url)

Expected behavior

• The Argo CD Server should not require patch or delete permissions cluster-wide.

• The Helm chart should ship with a more restrictive default ClusterRole.

• If such permissions are required in specific use cases, they should be optional or documented.

Screenshots

No response

Additional context

No response