wojciechgrazawskiahnl opened a new issue, #6731:
URL: https://github.com/apache/camel-k/issues/6731

   ## Environment
   - Camel K version: **`2.11.0-nightly`** (`pkg/util/defaults/defaults.go`)
   
   This is a documentation question about the **v2.11.0-nightly** codebase.
   
   ### Summary
   
   In multi-namespace mode the operator runs in its own namespace and watches a 
list of tenant namespaces (`WATCH_NAMESPACE=tenant-a,tenant-b`, 
`pkg/cmd/operator/operator.go:242-260`). It does **not** provision RBAC into 
watched namespaces at runtime — `install.OperatorStartupOptionalTools` 
(`pkg/install/optional.go:29-52`) creates no Roles/RoleBindings, and the CLI 
installer was removed (commits `07f476d80`, `38aa87044`).
   
   The intended flow appears to be applying the Kustomize overlay 
`install/overlays/multi-namespace/`, whose `tenant-*-ns-rbac` components render 
`install/base/config/rbac/namespaced/` (Role + RoleBinding) into each tenant 
namespace and repoint the RoleBinding subject to the operator's ServiceAccount 
in the operator namespace 
(`install/overlays/multi-namespace/tenant-a-ns-rbac/patch-rolebinding-subjects.yaml`).
   
   However, `docs/modules/ROOT/pages/installation/installation.adoc:58` only 
states that the user must "provide the RBACs which are expected by the 
operator" and points at the overlay examples; there is no step-by-step guide. 
`docs/modules/ROOT/pages/installation/advanced/multi.adoc` covers the 
(deprecated) *multiple-operators* scenario, not one operator watching multiple 
tenant namespaces.
   
   ### Questions
   
   1. Is there existing documentation that walks through installing the 
namespaced RBAC into each tenant namespace for multi-namespace mode (beyond the 
raw Kustomize overlay)?
   2. If not, would a dedicated docs section be welcome, based on the 
`install/overlays/multi-namespace/` overlay?
   
   ---
   _Claude Code on behalf of Wojciech Grażawski_
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to