Marc Boorshtein

Sorry for the delay @jshaughn. I'm a fan of options with sane defaults. What's "sane" for a default will depend on the use case. For Kiali, it will depend on...

Happy to help on a PR for this.

> You can specify the fallback namespace list and default namespace via settings page or directly via config map that stores settings. this doesn't really help in a multi tenant...

@floreks would it need to be against the 3.0.0 branch? I don't know how close that is to release.

The permissions on the dashboard's sa are irrelevant. With impersonation you need an authorization header with a token that is allowed to impersonate the user and the correct headers for...

> @mlbiam but why is it structured that way? It seems to me that one should be able to use in-cluster config (i.e. the kubernetes-dashboard SA is the authenticated entity...

> In our setup, we have configured our k8s apiserver as follows: > > --requestheader-username-headers=X-Consumer-Username > --requestheader-group-headers=X-Consumer-Permissions I don't think the dashboard has support for generic header passthrough. At least...

> The issue w/ using a kubeconfig is that the token is dynamic or variable. Each user that interacts with the dashboard (since we have a multi-tenant cluster) will provide...

If a CRD file starts with a "---" its valid YAML but if the yaml is included in a ConfigMap CatalogSource and imported to OCP4 it the container will fail...

No, I'm saying that the rules for `operator-courier verify` isn't consistent with the red hat connect certification test process. When I run `operator-courier verify` on yaml files that start with...