kubernetes-retired/multi-tenancy

HNC: Add label to excluded namespaces and enforce it by reconcilers

yiqigao217 opened this issue · 3 comments

In a reconciler, add a label (name undecided yet) to all the excluded namespaces and remove the same label from any other namespaces if added by users. The reconciler can be the hc reconciler in reconcilers/hierarchy_config.go.

In that case, we can hard-code the label in the validatingwebhookconfiguration to exclude validation on these excluded namespaces.

/cc @adrianludwin

Could you please help tag this issue with backlog milestone?

/help-wanted

Same as #374, fixed by #1444.