Add a third RBAC posture between watch-globally (ClusterRole) and single
namespace: give Reloader an explicit list of namespaces to watch. The chart
creates a namespace-scoped Role + RoleBinding in each listed namespace (no
ClusterRole), and one install covers them all.
Go:
- new --namespaces flag / options.Namespaces
- resolveWatchNamespaces() picks list -> KUBERNETES_NAMESPACE -> all
- controller creation loops over the watched namespaces
- namespaces-to-ignore is now only honored in global mode (watchGlobally=true);
in single-namespace and scoped modes the watched set is already explicit
Helm:
- new reloader.namespaces value (active when watchGlobally=false); accepts either
a YAML list or a comma-separated string for consistency with the sibling
namespace options
- reloader-watchNamespaces helper (release ns always auto-included, deduped)
- shared reloader-namespaced-rules template reused per namespace
- role.yaml/rolebinding.yaml range over the list; deployment passes --namespaces
- --namespaces-to-ignore only rendered when watchGlobally=true
- fail guard for watchGlobally=true + namespaces set
Tests: unit test for resolveWatchNamespaces; scoped-namespaces e2e case.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
for example, If I have istio enabled in a namespace, and I want to deploy reloader in that, It doesn't make sense to include envoy there. So there should be an option to add `sidecar.istio.io/inject: "false"` annotation.
* Update chart according to practices of helm public repo
Signed-off-by: faizanahmad055 <faizan.ahmad55@outlook.com>
* Add new line at the end of files
Signed-off-by: faizanahmad055 <faizan.ahmad55@outlook.com>
* Update readme to resolve any confusions
* Add new heading
* Remove unnecessary deployment commands from readme
* Set watch globally to true for jumbo manifest
* Update chart version to resolve conflicts
* Update readme with deploy with helm
Michał MarszałekandClaude Opus 4.8
Alexander Davis
Utibeabasi Umanah
Faizan AhmadandGitHub
ctschubel
Ruins He
Waleed Malik
Brent Dearth
kahootali
Rajesh Rajendranandrjshrjndrn
waseem
irti
hstanley
Steve Huff
Christian Ihle
