argoproj / argo-cd

Declarative Continuous Deployment for Kubernetes

https://argo-cd.readthedocs.io

Apache License 2.0

17.94k stars 5.46k forks source link

Disable History and Rollback and Delete Options for certain users #6916

Open rajivml opened 3 years ago

rajivml commented 3 years ago

Hi,

Is there a way we can disable, "History and Rollback" and "Delete" options.

Motivation: We want to disable "Rollback" because we don't have the rollback logic coded into our deployments so if any of our end users try to use this, the app might go into inconsistent state and we want to avoid that

I had a look at the RBAC policy and I don't find a way to disable the same https://github.com/argoproj/argo-cd/blob/master/assets/builtin-policy.csv

dmitry-mightydevops commented 3 years ago

I don't think that is possible at this time. You can only grant access to applications within the project with "ALL" functionality allowed See more: https://github.com/argoproj/argo-cd/issues/6916

raolivei commented 1 year ago

I don't think that is possible at this time. You can only grant access to applications within the project with "ALL" functionality allowed See more: #6916

6916 is this very same issue. Is this functionality in the roadmap?

raolivei commented 1 year ago

@dmitry-mightydevops Is it possible to disable History and Rollback to all users?

taliastocks commented 8 months ago

Watching with the hope of more granular RBAC permissions in the future.