Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Move the remote resolvers deployment to a separate namespace #5436

Merged

Commits on Sep 6, 2022

  1. Move the remote resolvers deployment to a separate namespace

    In https://github.com/tektoncd/community/blob/main/teps/0060-remote-resource-resolution.md#3-create-a-new-tekton-resolution-project, we say:
    ```
    Webhook and controller deployments for ResolutionRequest objects will run in the tekton-remote-resolution namespace by default. The namespace is intentionally separate from tekton-pipelines to allow RBAC that isolates the remote resolution machinery.
    ```
    
    While the actual `ResolutionRequest` reconciler/webhooks/etc are now part of the core Pipeline controller/webhook deployments, the actual resolvers (i.e., `git`, `hub`, `bundles`) should probably still be moved to a separate namespace from `tekton-pipelines` to properly isolate the actual resolver executions. So let's do that.
    
    Signed-off-by: Andrew Bayer <andrew.bayer@gmail.com>
    abayer committed Sep 6, 2022
    Configuration menu
    Copy the full SHA
    d02afeb View commit details
    Browse the repository at this point in the history