Skip to content

Commit

Permalink
Merge pull request #67 from stakater/add
Browse files Browse the repository at this point in the history
Add more details on privilegedNamespaces and clusteradmingroups
  • Loading branch information
MuneebAijaz authored Dec 6, 2023
2 parents 0384edc + 1e8949f commit e7d486d
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
4 changes: 2 additions & 2 deletions content/integration-config.md
Original file line number Diff line number Diff line change
Expand Up @@ -251,14 +251,14 @@ users:

### Cluster Admin Groups

`clusterAdminGroups:` Contains names of the groups that are allowed to perform CRUD operations on namespaces present on the cluster. Users in the specified group(s) will be able to perform these operations without MTO getting in their way
`clusterAdminGroups:` Contains names of the groups that are allowed to perform CRUD operations on namespaces present on the cluster. Users in the specified group(s) will be able to perform these operations without MTO getting in their way. MTO does not interfere even with the deletion of privilegedNamespaces.

!!! note
User `kube:admin` is bypassed by default to perform operations as a cluster admin, this includes operations on all the namespaces.

### Privileged Namespaces

`privilegedNamespaces:` Contains the list of `namespaces` ignored by MTO. MTO will not manage the `namespaces` in this list. Values in this list are regex patterns.
`privilegedNamespaces:` Contains the list of `namespaces` ignored by MTO. MTO will not manage the `namespaces` in this list. Treatment for privileged namespaces does not involve further integrations or finalizers processing as with normal namespaces. Values in this list are regex patterns.
For example:

- To ignore the `default` namespace, we can specify `^default$`
Expand Down
2 changes: 1 addition & 1 deletion vocabulary

0 comments on commit e7d486d

Please sign in to comment.