unnamespaced

Unnamespaced Generator

It is a plugin for Kustomize that allows you to generate ClusterRoleBindings to unnamedspaced-ro and unnamedspaced-rw ClusterRoles.

Using

The plugin's manifest is pretty simple, it only has the accessControl attribute. In it, you can define which groups will have read-only and read-write access to all unnamespaced resources.

apiVersion: incognia.com/v1alpha1
kind: Unnamespaced
accessControl:
  readOnly:
    - security:eng-0
  readWrite:
    - sre:eng-0
    - infrastructure:eng-0

Now we can specify ./unnamespaced.yaml as a generator on kustomization.yaml:

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
generators:
  - ./unnamespaced.yaml