Project can create namespace

2026-08-15 11:50:51 +02:00
parent 714db6f03d
commit bae53cc0a4
1 changed files with 5 additions and 1 deletions
@@ -9,7 +9,11 @@ spec:
  destinations:
    - server: https://kubernetes.default.svc
      namespace: 'tenant-*'
-  clusterResourceWhitelist: []   # tenants can't touch cluster-scoped resources
+
+  clusterResourceWhitelist:
+    - group: ''
+      kind: Namespace
+
  namespaceResourceWhitelist:
    - group: '*'
      kind: '*'