hierarchical-namespaces icon indicating copy to clipboard operation
hierarchical-namespaces copied to clipboard

Home of the Hierarchical Namespace Controller (HNC). Adds hierarchical policies and delegated creation to Kubernetes namespaces for improved in-cluster multitenancy.

Results 86 hierarchical-namespaces issues
Sort by recently updated
recently updated
newest added

Once #183 is merged, we need to fix the periodic resync of RQs and HRQs (see detectIncrementalHRQUsageDrift).

I notice that when we occasionally consider a PR a bugfix, that we want to include in a patch release, we need to ask our users to open a new...

I think it should be possible to update HNC with a rolling update without any cluster disturbance. Some of the webhooks in HNC intercepts a great percentage of API requests,...

lifecycle/rotten

/good-first-issue Part of #47 but maybe not critical for HNC v1.0. /cc @erikgb See [this line for labels](https://github.com/kubernetes-sigs/hierarchical-namespaces/blob/22c4260b6aa751bc7a65f74d8d48cd9bd9a3be83/internal/hierarchyconfig/reconciler.go#L553) and [this line for annotations](https://github.com/kubernetes-sigs/hierarchical-namespaces/blob/22c4260b6aa751bc7a65f74d8d48cd9bd9a3be83/internal/hierarchyconfig/reconciler.go#L634). If a namespace has a managed label/annot...

good first issue
help wanted
lifecycle/rotten

I noticed that full namespaces can be children of subnamespaces by doing `kubectl hns set staging --parent service-4`, so if we need a way to convert a full namespace to...

lifecycle/stale

We removed the rbac proxy and therefor metrics are no longer being served over HTTPS. We should provide an option to server over https using similar internal logic as the...

lifecycle/stale

We have a few features that I believe are rarely used but are hard to implement and maintain in HNC: - Cascading deletion: the ability to remove an entire subtree...

lifecycle/stale

Hi, we just ran into issue that the image gcr.io/k8s-staging-multitenancy/hnc-manager:v1.0.0 would not start in a ARM-Cluster. The issue has already been raised in https://github.com/kubernetes-sigs/multi-tenancy/issues/1383 and should have been fixed by...

lifecycle/stale

Today, if you delete a subnamespace anchor, the anchor is not fully deleted until the underlying subnamespace is deleted. Namespaces are usually deleted within several seconds, but can sometimes get...

lifecycle/stale

**Issue by [hferentschik](https://github.com/hferentschik)** _Tuesday Mar 16, 2021 at 09:25 GMT_ _Originally opened as https://github.com/kubernetes-sigs/multi-tenancy/issues/1435_ ---- Currently, you can only globally (via the HNCConfiguration) configure the resources to be propagated, eg...

lifecycle/stale