search

carvel-dev / kapp

kapp is a simple deployment tool focused on the concept of "Kubernetes application" — a set of resources with the same label
https://carvel.dev/kapp
Apache License 2.0
924 stars 110 forks source link

Selectively override ownership while using --dangerous-override-ownership-of-existing-resources #993

Open 100mik opened 3 months ago

100mik commented 3 months ago

Describe the problem/challenge you have I want my kapp app to snatch ownership from existing resources belonging to another app. However, I only want this to happen if the resource belongs to specific apps.

Describe the solution you'd like i would like to able to pick which kapp apps I snatch ownership from. Probably by using a "filter-in" filter. For example. kapp deploy --ownership-override-allowed-apps "oldapp,olderapp" --dangerous-override-ownership-of-existing-resources.

Anything else you would like to add: We will run into a few limitations here. First, as of today we cannot easily search for an "app name" if I know the app ID on a resource, without listing all the apps. Secondly, to avoid privilege escalations, for the time being we will only be able to use this filter for apps in the same namespace.

Vote on this request

This is an invitation to the community to vote on issues, to help us prioritize our backlog. Use the "smiley face" up to the right of this comment to vote.

👍 "I would like to see this addressed as soon as possible" 👎 "There are other more important things to focus on right now"

We are also happy to receive and review Pull Requests if you want to help working on this issue.

renuy commented 3 months ago

Recommended to do a no-op delete for the first app. This should be a dangerous flag.