Evan Cordell
Evan Cordell
As Daniel described, there is not a reasonable way to lock down OLM's permissions as deployed today. There are mechanisms within OLM (OperatorGroup.spec.serviceAccount) to lock down what OLM can do...
Awesome! We'll pull it in and test it once merged.
we've updated since this PR
Some related discussion here too: https://github.com/authzed/spicedb-operator/issues/291#issuecomment-2215018451
There is a field `imageName` in the `update-graph.yaml` file that indicates the base image to use for the tags in the graph: https://github.com/authzed/spicedb-operator/blob/824987d106a0de87a478c96ebe3d8d8fd495fe50/config/update-graph.yaml#L2859 You can overwrite this to change the...
see #367 One thing I had forgotten that was already implemented: if you set `.config.image = ` then that will be used as the base image already.
Fixed in #367 and released in v1.21.0
@stefanprodan any chance you could take a look at this? I prefer using kustomizer as a library.
Just thinking about the UX a bit (we don't have to solve it in this PR - just thinking ahead!) it would be nice to be able to do something...
Etcd's version of "preconditions" lets you specify an operation to perform when the condition is true and another one when the condition is false. ``` message TxnRequest { repeated Compare...