fix(server): don't grab SAs if SSO RBAC is not enabled (#11426)

Signed-off-by: Anton Gilgur <agilgur5@gmail.com>
argoproj · Aug 11, 2023 · 311214c · 311214c
1 parent 105031b
commit 311214c
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/server/apiserver/argoserver.go b/server/apiserver/argoserver.go
@@ -142,8 +142,11 @@ func NewArgoServer(ctx context.Context, opts ArgoServerOpts) (*argoServer, error
 		if err != nil {
 			return nil, err
 		}
-		resourceCache = cache.NewResourceCache(opts.Clients.Kubernetes, getResourceCacheNamespace(opts))
-		resourceCache.Run(ctx.Done())
+		if ssoIf.IsRBACEnabled() {
+			// resourceCache is only used for SSO RBAC
+			resourceCache = cache.NewResourceCache(opts.Clients.Kubernetes, getResourceCacheNamespace(opts))
+			resourceCache.Run(ctx.Done())
+		}
 		log.Info("SSO enabled")
 	} else {
 		log.Info("SSO disabled")