/namespace-rolebinding-operator

Primary LanguageGoApache License 2.0Apache-2.0

Namespace Rolebinding Operator

This repository contains an example of a Kubernetes operator that listens for changes on namespaces and creates a rolebinding with cluster edit access within that namespace. This example would be useful for when using OIDC in a Kubernetes cluster.

For example: You might have a group in your AD with the name: ad-kubernetes-kube-system when the kube-system namespace is created, this operator would create the required RoleBinding so that when a user with the group ad-kubernetes-kube-system logs in via OIDC they'll have access to edit things in the kube-system namespace

Usage

--run-outside-cluster # Uses ~/.kube/config rather than in cluster configuration

Development

Build from source

  1. make install_deps
  2. make build
  3. ./bin/namespace-rolebinding-operator --run-outside-cluster 1