Argo-cd: RBAC policy for restart

[servo1x]

Is your feature request related to a problem? Please describe.
We would like developers the ability to restart their pods but currently, from my understanding this requires the delete action to be allowed. We don't want to give developers the ability to delete any resource but do want to allow restarts.

Describe the solution you'd like
There should be a RBAC action for restarts.

[jannfis]

Hi @servo1x, can you please elaborate a little more on your requirement? To my limited knowledge, there is no concept of "restarting" a pod, neither in K8s nor in ArgoCD.

As far as I understand, the way you can accomplish something similar is either by deleting a pod resource belonging to something like a controlling resource (such as ReplicaSet or Deployment) and have it restarted automatically, or by using something like scale --replicas to have K8s terminate and start your pods again.

Is your use-case for restarting a Pod using the delete resource action of ArgoCD (e.g. via the web UI) on a Pod object?

[alexmt]

Not 100% sure this resolves the problem. We just merged granular RBAC for resource actions: https://github.com/argoproj/argo-cd/issues/2002 and custom action which is equivalent to kubectl rollout restarthttps://github.com/argoproj/argo-cd/issues/2177 (available in v1.2)

In 1.3 it will be possible to give permission to execute Restart action which will trigger a rolling update of a deployment/daemonset/statefulset

[servo1x]

@jannfis it's in reference to the feature: https://github.com/argoproj/argo-cd/issues/2177

Thanks @alexmt, this is what we're looking for.

[alexmt]

I guess we can close it . @servo1x please feel free to reopen if necessary

[u-quark]

It would be nice if we had an example of how this is accomplished and maybe some documentation.