Skip to content

EPMDEDP-17309: docs: migrate Capsule config docs to the users API and… - #427

Draft
AlexeyGol wants to merge 1 commit into
mainfrom
EPMDEDP-17309-docs
Draft

EPMDEDP-17309: docs: migrate Capsule config docs to the users API and…#427
AlexeyGol wants to merge 1 commit into
mainfrom
EPMDEDP-17309-docs

Conversation

@AlexeyGol

Copy link
Copy Markdown
Contributor

… document namespace adoption limits

Capsule deprecated capsuleUserGroups/userNames in favor of manager.options.users (CapsuleConfiguration.spec.users), so the tenant configuration example is updated to the current key structure.

Adds a caution note explaining that Capsule's admission webhook only binds a namespace to a Tenant at creation time, and that adopting a pre-existing namespace requires the identity to be listed in spec.administrators - being a Tenant owner or having cluster-admin RBAC is not enough. This is relevant when cd-pipeline-operator runs with tenancyEngine capsule and manageNamespace false.

Pull Request Template

Description

Please include a summary of the change and why it is needed.

Fixes #(issue)

Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Improvement

How Has This Been Tested?

Please describe the tests that you ran to verify your changes. Provide instructions so we can reproduce.

Checklist

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • Pull Request contain one commit. I squash my commits.

Screenshots (if appropriate)

Additional context

Add any other context or screenshots about the feature request here.

… document namespace adoption limits

Capsule deprecated capsuleUserGroups/userNames in favor of manager.options.users
(CapsuleConfiguration.spec.users), so the tenant configuration example is updated
to the current key structure.

Adds a caution note explaining that Capsule's admission webhook only binds a
namespace to a Tenant at creation time, and that adopting a pre-existing
namespace requires the identity to be listed in spec.administrators - being a
Tenant owner or having cluster-admin RBAC is not enough. This is relevant when
cd-pipeline-operator runs with tenancyEngine capsule and manageNamespace false.
@AlexeyGol AlexeyGol self-assigned this Aug 27, 2026
@github-actions

Copy link
Copy Markdown

Azure Static Web Apps: Your stage site is ready! Visit it here: https://gentle-pebble-0839af61e-427.westus2.4.azurestaticapps.net

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant