Mike Bryant

Alternatively it might be better to focus on writing MutatingAdmissionWebhooks to add additional fields into certain objects based on our environment. I'm not sure which would be a more sensible...

I've been running into this more when trying to design an operator for PagerDuty. I want to have a resource `PagerDutyAccount`, which has a `secretRef` to where the account key...

Having a separate hook would be fine. All the use-cases I'm imagining depend only on the .spec

FYI: Another option (again not available in all clusters) is using RBAC in istio

Yup, fine by me :)

@enisoc This seems to have stalled, would someone be able to help from the google side?

@enisoc So I'm thinking that the way to do this is for parentController to create individual objects per Parent, and maintain all of these in memory? And on a parent...

@Kritzefitz Thank you! Feel free to start a separate PR. I haven't had time to work on this lately, so please carry on :)

Thanks for the detailed response. Yes, I can see how I can get to what I need with finalizers, thanks. (This will only automate part of our PagerDuty account, so...

I've got an implementation of this going for helmv3 at #7670 :)