Epic Goal

• Add support for the Argo CD resource.respectRBAC field to the operator instead of having users use extraConfig to set it.

Why is this important?

• respectRBAC enables users to have Argo CD respect the permissions set in Kubernetes without having to explicitly set resource exclusions. It enables users to eeasily reduce the scope of permissions for the application-controller in an easy and efficient way
• This is very useful for customers that want to lock down Argo CD to specific resources.

Scenarios

1. Argo administrator wants to set this switch to lock down permissions

Acceptance Criteria (Mandatory)

• CI - MUST be running successfully with tests automated
• Release Technical Enablement - Provide necessary release enablement details and documents.
• ...

Dependencies (internal and external)

1. ...

Previous Work (Optional):

1. The respectRBAC feature is documented here: https://argo-cd.readthedocs.io/en/stable/operator-manual/declarative-setup/#auto-respect-rbac-for-controller

Open questions::

1. ...

Done Checklist

• Acceptance criteria are met
• Non-functional properties of the Feature have been validated (such as performance, resource, UX, security or privacy aspects)
• User Journey automation is delivered
• Support and SRE teams are provided with enough skills to support the feature in production environment