cybozu-go / accurate

Kubernetes controller for multi-tenancy. It propagates resources between namespaces accurately and allows tenant users to create/delete sub-namespaces.

https://cybozu-go.github.io/accurate/

Apache License 2.0

38 stars 5 forks source link

Add ResourceQuota propagation to the default setting #15

Closed bells17 closed 2 years ago

bells17 commented 2 years ago

4

bells17 commented 2 years ago

Thank you @ymmt2005 .

The subnamespace controller does not require any privileges for ResourceQuotas. That should be configured through a Helm variable.

I removed ResourceQuotas RBAC manifests that were generated by kubebuilder comments and controller-tools and added ResourceQuotas RBAC manifests to default settings of additionalRBAC. Does this match what you intended?

ymmt2005 commented 2 years ago

Don't you need to add ResourceQuota to watches in values.yaml?

I guess it needs to be added.

@bells17 Could you add a test to watch and propagate ResourceQuota?