capsule-proxy icon indicating copy to clipboard operation
capsule-proxy copied to clipboard

Custom resources list for --feature-gates=ProxyAllNamespaced=true.

Open anatolychernov opened this issue 1 year ago • 0 comments

Describe the feature

According to issue 303, capsule-proxy provides the ability to list all resources within a user’s tenants when the ProxyAllNamespaced feature flag is enabled, e.g. kubectl get pods --all-namespaces

It would be great if we could manage the list of resources where a user can use the cluster scope flag --all-namespaces, e.g.

ProxyAllNamespacedResourcesList:
  - pods/v1
  - secrets/v1
  - configmaps/v1

Some operators (like the Operator Lifecycle Manager) strictly control their resource labels, and if the capsule-proxy tries to add its own label, a conflict between the capsule-proxy and the operator may occur.

If you think this idea is good, I can try to prepare a merge request.

What would the new user story look like?

If ProxyAllNamespacedResourcesList is not empty, the user can apply the --all-namespaces flag only to the resources defined in ProxyAllNamespacedResourcesList. Otherwise, if ProxyAllNamespacedResourcesList is empty, the user can still list all types of resources under their tenants using the --all-namespaces flag.

Expected behavior

A clear and concise description of what you expect to happen.

anatolychernov avatar Sep 17 '24 09:09 anatolychernov