Application toggle-auto-sync resource action

Introduced 2026-08-04 · score 0.97

HOW TO USE IT

When a role needs to toggle an Application's auto-sync without broad update access, grant the dedicated action permission and run `toggle-auto-sync` on the Application. Disabling saves the documented auto-sync settings, while enabling restores saved settings when present.

WHY THIS HELPS

Grant a role permission to toggle autosync on an Application without granting broad application update permission.

BEFORE THIS CHANGE

Toggling auto-sync required the broad `application update` permission.

REQUIREMENTS AND LIMITATIONS

• Version: v3.5.0
• applications (required): RBAC resource on which the action permission applies.
• action/argoproj.io/Application/toggle-auto-sync (required): Action path; format is `action/<group>/<kind>/<action-name>`.
• <APPNAME> (required): Application name.
• toggle-auto-sync (required): Action name to run.
• --kind Application (required): Selects the resource kind; `--kind` is the required filter.
• --group argoproj.io: Selects the resource API group.
• --resource-name <RESOURCE>: Filters by resource name.
• --namespace <NAMESPACE>: Filters by resource namespace.
• --all: Runs the action on all matching resources when more than one matches.
• Prerequisite: Resource actions are controlled with the RBAC `action` action; the permission path uses `action/<group>/<kind>/<action-name>`.
• Prerequisite: The CLI command requires `--kind`; other resource filters are optional. Actions run only on resources represented in Git and cannot run on child resources.

FIRST-PARTY EVIDENCE

• https://github.com/argoproj/argo-cd/releases/tag/v3.5.0
• https://github.com/argoproj/argo-cd/pull/26477
• https://github.com/argoproj/argo-cd/blob/master/docs/operator-manual/rbac.md
• https://argo-cd.readthedocs.io/en/release-3.4/user-guide/commands/argocd_app_actions_run/

Check the installed version and the source before using it. Entry JSON

Report a problem with this card