Skip to content

Greater control over RBAC objects and rules #3869

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 8 commits into
base: main
Choose a base branch
from

Conversation

petewall
Copy link
Contributor

@petewall petewall commented Jun 18, 2025

PR Description

This change allows for the RBAC object creation to create namespaced-Role and RoleBinding objects instead of ClusterRoles and ClusterRoleBindings.

It also allows for the specific rules attached to the Roles/ClusterRoles to be modified.

Which issue(s) this PR fixes

Fixes #196
Fixes #3839
Fixes #2224
Fixes #681

Notes to the Reviewer

PR Checklist

  • CHANGELOG.md updated
  • Documentation added
  • Tests updated
  • Config converters updated

@petewall petewall self-assigned this Jun 18, 2025
@petewall petewall linked an issue Jun 18, 2025 that may be closed by this pull request
@petewall petewall force-pushed the petewall/helm-with-namespaced-rbac branch from f1df113 to e4a491e Compare June 26, 2025 18:00
@petewall petewall marked this pull request as ready for review June 26, 2025 18:05
@petewall petewall requested a review from a team as a code owner June 26, 2025 18:05
@petewall petewall changed the title Add the ability to create Roles and RoleBindings instead of ClusterRoles and ClusterRoleBindings Greater control over RBAC objects and rules Jun 26, 2025
@petewall petewall force-pushed the petewall/helm-with-namespaced-rbac branch from 4d93486 to 807e7da Compare June 30, 2025 15:16
Copy link
Contributor

@thampiotr thampiotr left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, we're onboard with adding this, thanks!

@petewall petewall force-pushed the petewall/helm-with-namespaced-rbac branch 2 times, most recently from 92af5c8 to 4ad7e8c Compare July 22, 2025 14:38
@petewall petewall force-pushed the petewall/helm-with-namespaced-rbac branch from 4ad7e8c to b38322f Compare July 29, 2025 13:57
@petewall
Copy link
Contributor Author

One thing we'll have to know is the impact of losing nonResourceURLs from ClusterRoles.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants