Comments (3)
stefanprodan
commented on May 20, 2024
Place the ingress controller Flux HelmRelease or Flux Kustomization in the flux-system namespace and set the service account to either helm-controller or kustomize-controller. Or you could create a dedicated tenant for cluster admins, where you would modify the RoleBinding to be a ClusterRoleBinding.
from flux2-multi-tenancy.
venkatesh-mb
commented on May 20, 2024
Thanks @stefanprodan . We have followed the same way for deploying cluster level tools. But we have some other applications which we want to go with tenant level. Yes, i am thinking of creating a new tenant create new service account but i am having difficulty what set of RBAC we should give it that tenant to have access to apply changes at cluster role.
from flux2-multi-tenancy.
stefanprodan
commented on May 20, 2024
As I said change the RoleBinding into a ClusterRoleBinding here https://github.com/fluxcd/flux2-multi-tenancy/blob/main/tenants/base/dev-team/rbac.yaml#L20
from flux2-multi-tenancy.
Related Issues (20)
- Question: Self-service multitenancy? HOT 1
- kyverno flux images: autogen-verify-cosign-signature: missing digest for ghcr.io/fluxcd/helm-controller:v0.32.2 HOT 8
- HelmRelease with partial match semver expression based on prerelease string HOT 1
- kyverno: missing digest for ghcr.io/fluxcd/helm-controller:v0.34.1 HOT 6
- Add kube-prometheus-stack example
- README dead link for multi-tenancy-lockdown HOT 1
- Align multi-tenancy lockdown with documentation HOT 1
- How to best use a substitueFrom for information another namespace? HOT 2
- Docs: git-auth.yaml secret referenced, but not created following readme
- how to set up multiple tenants in one cluster HOT 7
- Github Actions with Organizations HOT 1
- Unable to build ./clusters/staging directory HOT 1
- Default service account forbidden to patch namespaces HOT 11
- Single base repository for multiple tenants HOT 7
- What are plain Kubernetes manifests in context of autogeneration of kustomization.yaml? HOT 1
- Flux v2: Notifications controller HOT 1
- Complex repo setup example HOT 16
- Question : gotk-components.yaml repetition in multiple clusters HOT 2
- Instructions in README does not seem to work HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from flux2-multi-tenancy.