Now we have two types of permissions one is ClusterRole which existed already and now Role. The only things dropped off from Role is the non-namespaced resources like Namespace and CustomResourceDefinitions.
It would be nice if we could sync those two from examples, helm charts and test directories. So that change in one will be forced to change in others.
With https://github.com/habitat-sh/habitat-operator/pull/346 we will have RBAC policies depending on how we run the operator in cluster.
Now we have two types of permissions one is
ClusterRole
which existed already and nowRole
. The only things dropped off from Role is the non-namespaced resources likeNamespace
andCustomResourceDefinitions
.It would be nice if we could sync those two from examples, helm charts and test directories. So that change in one will be forced to change in others.
Here is more reference to the discussion: https://github.com/habitat-sh/habitat-operator/pull/346#discussion_r213625996