-
Notifications
You must be signed in to change notification settings - Fork 21
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Document the spec.hubTemplateOptions.serviceAccountName field #239
Document the spec.hubTemplateOptions.serviceAccountName field #239
Conversation
api/v1/policy_types.go
Outdated
// A service account in the same namespace as the policy to use for all hub template lookups. The service account | ||
// must have list and watch permissions on any object the hub templates lookup. If not specified, | ||
// lookups are restricted to namespaced objects in the same namespace as the policy and the ManagedCluster object | ||
// the policy is propagated to. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
// A service account in the same namespace as the policy to use for all hub template lookups. The service account | |
// must have list and watch permissions on any object the hub templates lookup. If not specified, | |
// lookups are restricted to namespaced objects in the same namespace as the policy and the ManagedCluster object | |
// the policy is propagated to. | |
// ServiceAccountName is the name of a service account in the same namespace as the policy to use for all hub template lookups. The service account | |
// must have list and watch permissions on any object the hub templates look up. If not specified, | |
// lookups are restricted to namespaced objects in the same namespace as the policy and the `ManagedCluster` object | |
// the policy is propagated to. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could you clean this up also? I'm not actually sure what the second part of this is saying about the ManagedCluster object. I think this might be clearer?
lookups are restricted to namespaced objects in the same namespace as the policy and to the ManagedCluster object associated with the propagated policy.
/hold for reviews |
Relates: https://issues.redhat.com/browse/ACM-13572 Signed-off-by: mprahl <[email protected]>
Thanks @dhaiducek! Your suggestions sound better. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry--I missed re-reviewing this one!
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: dhaiducek, mprahl The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
/unhold |
166702f
into
open-cluster-management-io:main
Relates:
https://issues.redhat.com/browse/ACM-13572