hierarchical-namespaces icon indicating copy to clipboard operation
hierarchical-namespaces copied to clipboard

Home of the Hierarchical Namespace Controller (HNC). Adds hierarchical policies and delegated creation to Kubernetes namespaces for improved in-cluster multitenancy.

Results 99 hierarchical-namespaces issues
Sort by recently updated
recently updated
newest added

As a user of tools like [FluxCD](https://github.com/fluxcd/flux2), I would like Flux to know if/when my HNC resources are fully reconciled and operational (ready/healthy). Flux supports [health assessment](https://fluxcd.io/docs/components/kustomize/kustomization/#health-assessment) for all/most in-tree...

lifecycle/stale

When we build using the cloud-builers/docker image on both ubuntu 16 and 20, non-amd based builds fail with the following. Whats left to investigate is manually building and upgrading QEMU...

kind/bug
lifecycle/stale

**Issue by [hferentschik](https://github.com/hferentschik)** _Tuesday Mar 16, 2021 at 09:34 GMT_ _Originally opened as https://github.com/kubernetes-sigs/multi-tenancy/issues/1436_ ---- When synchronizing additional resource types, eg Secrets, it is currently only possible to configure this...

good first issue
help wanted
lifecycle/frozen

Hello, Do you plan to provide a Helm chart for HNC installation? This would make it easier for operators to manage HNC installations. Thanks!

good first issue
help wanted
lifecycle/rotten

We currently create [one almighty "object" webhook](https://github.com/kubernetes-sigs/hierarchical-namespaces/blob/281b24ff4c6d9fbbed59f6ac473b9c3cad79450f/config/webhook/manifests.yaml#L83) that, if broken, can effectively block every object operation in the entire cluster (minus critical system namespaces), even for objects that are not...

lifecycle/rotten

It seems we can't install hnc in our customize namespace. Wish there was this feature. https://github.com/kubernetes-sigs/hierarchical-namespaces/blob/e9d8bb80e54ecfe735235ce608905e6dfbf757ca/internal/setup/webhooks.go#L26-L55

Hi, This is more cosmetic than anything else, but we have observed the 'kubectl hns tree' command is very slow to draw out the tree. Is there any plans to...

Hi, somehow (maybe during a downtime of the hnc controller?) we managed to create a Subnamespaceanchor with a name having more than 63 characters. For obvious reasons, the controller is...

When HNC restarts the propagated objects can be deleted unnecessarily if the parent namespace hasn't yet fully synced. This is problematic especially when propagating network rules as can lead to...

This commit fixes the problem that when HNC restarts the source objects are deleted and then re-created. When a source object is deleted the code now checks the decedents for...

do-not-merge/work-in-progress
needs-ok-to-test
cncf-cla: no
size/L