RFE: Annotation to control Kustomize modification of namespace in RoleBinding subject (#4301)

Skip to first unread message

Lars Kellogg-Stedman

Nov 20, 2021, 3:30:56 PM11/20/21
to kubernetes-sig-cli
I was recently bitten by https://github.com/kubernetes-sigs/kustomize/issues/1599, in which Kustomize automagically modifies the namespace attribute of subjects in a rolebinding that target the default ServiceAccount.

This was surprising, since it *only* happens for the "default" account. I'd like to see the ability to turn off this behavior in situations in which someone wants the default ServiceAccount of another namespace in the subject of a rolebinding.

I've opened https://github.com/kubernetes-sigs/kustomize/issues/4301 with this feature request. I'm working on an implementation.


-- Lars
Reply all
Reply to author
0 new messages