What are the Kubernetes RBAC verbs and resources which allow kubectl rollout restart a deployment?
At this moment the current RBAC verbs are create, delete, deletecollection, get, list, patch, update, watch. May you please provide the reasons also?

Since it is about a rollout restart of a deployment, does the resources in the role’s/clusterrole’s rules should include pods and replicasets ? I mean the pods are deleted and created again and the replicaset is also deleted and created again.

And in general, how to tell which minimal Kubernetes RBAC resources and verbs are needed in the role/clusterrole in order to allow certain kubectl commands ?

Thank you.