Simon Pasquier 7f06be09f1 fix: detect changes without list/watch perms on namespaces ...

This change implements a poll-based namespace lister/watcher when the
operator's service account isn't granted the list & watch permissions on
all namespaces. Instead of sending a watch request, the controller will
get every configured namespace every 15 seconds and sends the expected
watch events when a namespace is added/updated/deleted.

It still requires the service account to be granted the get permission
on the configured namespaces.

Closes #3847

Signed-off-by: Simon Pasquier <spasquie@redhat.com>

2023-09-21 11:23:17 +02:00

..

listwatch_test.go

fix: reconcile on namespace changes

2023-09-21 09:18:59 +02:00

listwatch.go

fix: detect changes without list/watch perms on namespaces

2023-09-21 11:23:17 +02:00

namespace_denylist_test.go

chore: fix imports order

2023-06-15 10:03:42 +02:00

namespace_denylist.go

chore: fix imports order

2023-06-15 10:03:42 +02:00