Unnamespaced Generator
It is a plugin for Kustomize that allows you to generate
ClusterRoleBindings to unnamedspaced-ro
and unnamedspaced-rw
ClusterRoles.
Using
The plugin's manifest is pretty simple, it only has the accessControl
attribute. In it, you can define which groups
will have read-only
and read-write
access to all unnamespaced resources.
apiVersion: incognia.com/v1alpha1
kind: Unnamespaced
accessControl:
readOnly:
- security:eng-0
readWrite:
- sre:eng-0
- infrastructure:eng-0
Now we can specify ./unnamespaced.yaml
as a generator on kustomization.yaml
:
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
generators:
- ./unnamespaced.yaml