Allow ArgoCD to use namespaced RBAC for Apps in any Namespace

[calnighters]

Summary

Allowing ArgoCD to have tied down RBAC to the specific application namespaces when running in the Apps in any Namespace mode. This prevents cluster wide access being required.

Motivation

In a multi tenancy environment, this would allow for a tied down RBAC level and allow the teams to only manage the applications in their own namespaces.

Proposal

By completing a resource scan in the relevant namespaces instead of at a cluster wide scope.

[andrii-korotkov-verkada]

This may be reasonable. Feel free to bring up at the next contributors meeting.