operator-scope: Convert into a namespace-scoped operator

freeipa / freeipa-operator

EXPERIMENTAL kubernetes operator for FreeIPA

31 stars 5 forks source link

operator-scope: Convert into a namespace-scoped operator #38

Closed avisiedo closed 2 years ago

avisiedo commented 3 years ago

The operator watches only the idm CR created into the namespace where it is created.
The operator manages resource only into the namespace where it is created.
The operator rbac use Role objects instead of ClusterRole objects.
The operator rbac use RoleBinding objects instead of ClusterRoleBinding objects.
The operator uses the WATCH_NAMESPACE environment variable as source for the namespace to be watched and its value can not be empty. The env var into the controller deployment is a fieldref to the deployment namespace.

Signed-off-by: Alejandro Visiedo avisiedo@redhat.com

openshift-ci[bot] commented 3 years ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: avisiedo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/freeipa/freeipa-operator/blob/master/OWNERS)~~ [avisiedo] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment