From bae53cc0a47c37ce40f7c40c4848af6b89df3c3e Mon Sep 17 00:00:00 2001
From: Adrien Bouvais <adrienbouvais@huiyuns-air.home>
Date: Sat, 15 Aug 2026 11:50:51 +0200
Subject: [PATCH] Project can create namespace

---
 gitops/tenants/project.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/gitops/tenants/project.yaml b/gitops/tenants/project.yaml
index 8f2dded..81f9cfc 100644
--- a/gitops/tenants/project.yaml
+++ b/gitops/tenants/project.yaml
@@ -9,7 +9,11 @@ spec:
   destinations:
     - server: https://kubernetes.default.svc
       namespace: 'tenant-*'
-  clusterResourceWhitelist: []   # tenants can't touch cluster-scoped resources
+
+  clusterResourceWhitelist:
+    - group: ''
+      kind: Namespace
+
   namespaceResourceWhitelist:
     - group: '*'
       kind: '*'