Skip to content

Version 1.8.2 / 2020-10-28

Compare
Choose a tag to compare
@ricoberger ricoberger released this 28 Oct 17:01

Allow Namespaced Deployment (#51 by @bartmeuris)

The RBAC options of the Helm chart were adjusted as follows:

  • rbac.createclusterrole toggles the creation of the (global) cluster role. This is only necessary once, and only enable this on an internal "management" namespace, where all helm deploys are owner of all CRD's and cluster roles. Note that this will only create the cluster role if rbac.create is also set.
  • rbac.namespaced: this does a few things:
    • a RoleBinding is created instead of a ClusterRoleBinding
    • The WATCH_NAMESPACE env var is overridden to be the .Release.Namespace, so only this namespace (where the operator has permissions) is watched.

Thanks to @bartmeuris for his PR #51.