Project can create namespace

2026-08-15 11:50:51 +02:00 · 2026-08-15 11:50:51 +02:00 · bae53cc0a4
commit bae53cc0a4
parent 714db6f03d
1 changed files with 5 additions and 1 deletions
--- a/gitops/tenants/project.yaml
+++ b/gitops/tenants/project.yaml
@ -9,7 +9,11 @@ spec:
  destinations:
    - server: https://kubernetes.default.svc
      namespace: 'tenant-*'
-  clusterResourceWhitelist: []   # tenants can't touch cluster-scoped resources
+
+  clusterResourceWhitelist:
+    - group: ''
+      kind: Namespace
+
  namespaceResourceWhitelist:
    - group: '*'
      kind: '*'