Skip to content

ClusterSecretStore: Support namespace glob #2614

@speedfl

Description

@speedfl

Is your feature request related to a problem? Please describe.
N/A

Describe the solution you'd like

I would like to be able to select namespace using globs so that I can apply company namespace naming convention.

Solution:

  1. Add a feature switch such as clustersecretstore-allow-namespace-glob (boolean, default false)
  2. Improve client_manager.go to support glob if feature is enabled

An example is the argocd AppProject , it is possible to use glob on destination namespaces

kind: AppProject
apiVersion: argoproj.io/v1alpha1
metadata:
  name: project-two
  namespace: argocd
spec:
 destinations:
  - namespace: 'team-two*'
    server: '*'

If you are interested in this feature I can contribute.

Describe alternatives you've considered

  • Create one SecretStore per namespace
  • Use Kyverno to mutate SecretStore ref

Additional context
Add any other context or screenshots about the feature request here.

Metadata

Metadata

Assignees

Labels

kind/featureCategorizes issue or PR as related to a new feature.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions