Centralized helm source #1151
-
|
We have a centralized gitrepo for all our helm charts. We defined a helm source in flux-system. We also started following the flux2 guide for multi-tenancy. As we onboard tenants, we were hoping we could reference the 1 centralized helm source running in flux-system. Q: Is the intent for a helm source to just be namespace scoped? Is there any possibility to allow or permit reading helm sources that are stood up by operators in flux-system? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 2 replies
-
|
Yes you can modify the RBAC of a tenant and give them access to a named resource. |
Beta Was this translation helpful? Give feedback.
-
|
thank you @stefanprodan . We will give this a shot. I appreciate your quick response! |
Beta Was this translation helpful? Give feedback.
-
|
Also in the Kyverno policy you may want to allow the shared namespace https://github.com/fluxcd/flux2-multi-tenancy/blob/main/infrastructure/kyverno-policies/flux-multi-tenancy.yaml#L23 |
Beta Was this translation helpful? Give feedback.
Yes you can modify the RBAC of a tenant and give them access to a named resource.