| Camila Macedo I have chat with David Ffrench about this and I understand the problem of trying to do what I was originally proposed. I have chatted with David Ffrench and we have agreed for now it is only to make the operator a cluster level one, but it should only react to the reconcile requests that are from a list of predefined namespaces. So the solution that's mentioned by David Ffrench above will allow us to do it. You are right that we could use the permissions system to help in this scenario. However, it has its own drawbacks and it will not work very well if the roles are cluster level. So I still prefer we have something in the operator itself to make sure we will not react to events in namespaces that we don't care about. The solution suggested by David Ffrench is a good one, it is easy to implement, and it doesn't require big changes of the operator. |