Adriano Pezzuto

Store policy violations events for audit

8

# Describe the feature For audit purpose, it would nice to keep history of Tenants policy violations. Just tracking events as for #289 could be not enough since events are...

Define a benchmark for performances

6

We should define a benchmark for performances and tests in different stress conditions. For example: - how many tenants - how many namespaces/tenants - how many concurrent users - how...

Document how Capsule integrates in an ArgoCD GitOps based environment

16

# Describe the feature Document how Capsule integrates in an ArgoCD GitOps based environment. # What would the new user story look like? The cluster admin can learn how to...

Leave the cluster admin to share secrets with tenant owners

4

# Describe the feature There are cases where the cluster admin wants to share secrets with the tenant owners. Such secrets can be used, for example, by tenant owners to...

Support for API Priority and Fairness per tenant

3

# Describe the feature Kubernetes introduced the API Priority and Fairness (APF) feature [beta in k8s 1.20] to control the behaviour of the Kubernetes API server in an overload situation....

Add an optional external admission controller to Capsule Operator

5

# Describe the feature Capsule implements its own set of Admission Controllers through the Dynamic Admission Controller, providing callbacks to add further validation or resource patching. Currently these admission controllers...

Tenant Resource Quota admission controller doesn't block resources creation

10

# Bug description Tenant Resource Quota admission controller doesn't block resources creation # How to reproduce As cluster admin: ``` cmp~/Shared/capsule$ kubectl get tenants NAME NAMESPACE QUOTA NAMESPACE COUNT OWNER...

How to raise logs level of operator

1

Hello, thanks for sharing this awesome project. How to raise logs level of operator? Please, document it. Thanks

Currently, the Helm Chart of Kamaji only support the deployment of the controller with `etcd` as datastore. It would be nice to have the `kine` options, i.e. _MySQL_ and _PostgreSQL_...

The kube-proxy add-on version is [hardcoded to v1.21.1](https://github.com/clastix/kamaji/blob/626a0eed6430e53aceb5968995ae1353f821963c/internal/kubeadm/addon.go#L284): ``` kubectl get tcp NAME VERSION STATUS CONTROL-PLANE-ENDPOINT KUBECONFIG AGE tenant-00 v1.23.5 Ready 192.168.32.240:6443 tenant-00-admin-kubeconfig 28m kubectl --kubeconfig default-tenant-00.kubeconfig -n kube-system describe...