Add resource namespace when using flux-local build hr
#816
Replies: 1 comment 3 replies
-
|
Hi, thanks for reaching out and nice words. This tool uses I'm wondering if this is defined in a spec somewhere that explains what the rule are, or if there are flags missing to either of these tools to make that happen. Should |
Beta Was this translation helpful? Give feedback.
-
|
I am trying to use flux-local in my CI process to validate PR before merging. For now I managed to use the diff feature for kustomization and helmreleases. It works perfectly. I wanted also to use the kyverno feature. But for now, flux-local does not support the kyverno policy exceptions (https://kyverno.io/docs/writing-policies/exceptions/). And these policy exceptions can be configured limited to some namespaces. I wanted to use From what I already searched, it's "normal" that helm does not do it. Here is a comment in an issue that summarize it: helm/helm#3553 (maybe it's a bit old) Maybe with kustomize there is an easier way to inject it after the |
Beta Was this translation helpful? Give feedback.
-
|
OK so they seem to be saying:
Implying that systems downstream should expect missing namespaces. I don't personally have an opinion on this, but I lean towards not wanting to add additional layers on top at the moment so don't plan to make any changes. FWIW I'm planning to drop kyverno support and plan to no longer maintain it. |
Beta Was this translation helpful? Give feedback.
-
|
Ok thank you for your answers and the information on kyverno support. For kyverno part, I think I will use |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Hello,
First, congrats for the tool, it is very powerful and very useful !
I am trying to use
flux-local build hrto generate all the resources that will be deployed to a cluster to be able to process then after in another CI check step.The issue I encountered is that once the resources are built, the namespace from the helmrelease is not injected in the built resources.
Did I miss something or do you think it would make sense to add this feature to
flux-localThanks in advance
Beta Was this translation helpful? Give feedback.
All reactions