kustomize: generate namespaced and descoped rbacs

[lburgazzoli]

As today, a number of rbac can be found in the repo but when the operator should be installed in cluster mode, then all those rbca have to be translated from namespace to cluster (Role to ClusterRole, RoleBinding to ClòusterRoleBiding) which is of course possible but not very easy.

I wonder if we can generate them by default instead of having to use kustomize to transform them, i.e. we can add two additional folders:

• config/rbac/namespaced
• config/rbac/descoped

[squakez]

cc @phantomjinx

[github-actions[bot]]

This issue has been automatically marked as stale due to 90 days of inactivity. It will be closed if no further activity occurs within 15 days. If you think that’s incorrect or the issue should never stale, please simply write any comment. Thanks for your contributions!

[github-actions[bot]]

This issue has been automatically marked as stale due to 90 days of inactivity. It will be closed if no further activity occurs within 15 days. If you think that’s incorrect or the issue should never stale, please simply write any comment. Thanks for your contributions!

[gansheer]

@lburgazzoli Do you mean having both version as files in the repo instead of generating "clustered" versions ?

[phantomjinx]

@lburgazzoli Do you mean having both version as files in the repo instead of generating "clustered" versions ?

@gansheer I would say, yes, that is what @lburgazzoli means. There are advantages to it in that you don't then need to use the Makefile in order to leverage a kustomize cluster version install.

This is balanced by the usual disadvantage that more files are present in the repo and so have to be maintained. However, in this case I don't think this is a real problem.

[lburgazzoli]

@gansheer yes correct, the main goal is to provide a simple kubectl apply -k https://github.com/apache/camel-k//config/global option to install camel-k

[gansheer]

That fits the work I am doing refactoring kustomize. @squakez I will work on this.

[squakez]

@gansheer I think this can be closed as completed, right?

[gansheer]

Yes, I am closing it.