Skip to content

Doc/issue 501 all namespaces#1900

Merged
agarcia-oss merged 1 commit intobitnami-labs:mainfrom
leantos:doc/issue-501-all-namespaces
Mar 12, 2026
Merged

Doc/issue 501 all namespaces#1900
agarcia-oss merged 1 commit intobitnami-labs:mainfrom
leantos:doc/issue-501-all-namespaces

Conversation

@leantos
Copy link
Copy Markdown
Contributor

@leantos leantos commented Feb 27, 2026

Description of the change
This PR addresses Issue #501 by documenting advanced controller scoping configurations that were previously missing from the README.

  • Namespace Scoping: Added guidance to the FAQ on using --all-namespaces (and SEALED_SECRETS_ALL_NAMESPACES) versus --additional-namespaces for cluster-wide or namespace-restricted management.
  • Restricted Environments: Documented the use case for controller-norbac.yaml under the Installation section, explaining its utility in environments where users cannot create cluster-wide RBAC resources.

Benefits

  • Improves clarity for multi-tenant and low-privilege deployment scenarios.
  • Prevents "Permission Denied" RBAC crash loops for users attempting to restrict controller scope.
  • Fills a documentation gap that has existed since 2021.

Possible drawbacks
None. This is a documentation-only change that does not impact controller logic.

Applicable issues

Additional information
I have followed the project's contribution guidelines:

  • Commit is DCO signed-off (-s).
  • Table of Contents in README.md has been updated via doctoc.

@leantos
Copy link
Copy Markdown
Contributor Author

leantos commented Feb 27, 2026

Hey team, just a quick heads-up: I cut this branch locally before my previous PR (#1892) was merged, so the GKE commit is currently trailing in this history. Once that first PR is merged, this branch will automatically resolve to just the README.md scoping updates. Happy to rebase if you prefer to review this one first!

@leantos leantos force-pushed the doc/issue-501-all-namespaces branch from eb40605 to 5d4a4c0 Compare February 27, 2026 11:12
@agarcia-oss
Copy link
Copy Markdown
Member

Hi @leantos the precious documentation PR is already merged but this one has not synced the changes. Can you manually update the PR? Thanks in advance!

…itnami-labs#501)

Signed-off-by: Emmanuel Tom Jose <84658038+leantos@users.noreply.github.com>
@leantos leantos force-pushed the doc/issue-501-all-namespaces branch from 5d4a4c0 to b9b2ca1 Compare March 12, 2026 09:50
@leantos
Copy link
Copy Markdown
Contributor Author

leantos commented Mar 12, 2026

Sure thing, @agarcia-oss, I have just now rebased and synced with the latest main. Ready for review! Thanks again for the merge on the other docs PR.

Copilot AI added a commit that referenced this pull request Mar 12, 2026
… sections (PR #1900)

Co-authored-by: agarcia-oss <1187340+agarcia-oss@users.noreply.github.com>
@agarcia-oss agarcia-oss merged commit 2e2940f into bitnami-labs:main Mar 12, 2026
15 checks passed
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Mar 13, 2026
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [bitnami-labs/sealed-secrets](https://github.com/bitnami-labs/sealed-secrets) | patch | `v0.36.0` → `v0.36.1` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>bitnami-labs/sealed-secrets (bitnami-labs/sealed-secrets)</summary>

### [`v0.36.1`](https://github.com/bitnami-labs/sealed-secrets/blob/HEAD/RELEASE-NOTES.md#v0361)

[Compare Source](bitnami-labs/sealed-secrets@v0.36.0...v0.36.1)

- Doc/issue 501 all namespaces ([#&#8203;1900](bitnami-labs/sealed-secrets#1900))
- Bump go 1.26.1 ([#&#8203;1914](bitnami-labs/sealed-secrets#1914))
- Update actions/setup-go to v6.2.0 ([#&#8203;1906](bitnami-labs/sealed-secrets#1906))
- fix: explicitly specify TCP protocol for helm SSA compatibility ([#&#8203;692](bitnami-labs/sealed-secrets#692)) ([#&#8203;1901](bitnami-labs/sealed-secrets#1901))
- docs: document GKE Warden and RBAC restrictions ([#&#8203;1892](bitnami-labs/sealed-secrets#1892))
- Bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 ([#&#8203;1913](bitnami-labs/sealed-secrets#1913))
- chore: remove note about deprecation of helm chart. ([#&#8203;1902](bitnami-labs/sealed-secrets#1902))
- Bump k8s.io/code-generator from 0.35.1 to 0.35.2 ([#&#8203;1909](bitnami-labs/sealed-secrets#1909))
- Bump k8s.io/client-go from 0.35.1 to 0.35.2 ([#&#8203;1908](bitnami-labs/sealed-secrets#1908))
- Bump distroless/static from `d90359c` to `28efbe9` in /docker ([#&#8203;1912](bitnami-labs/sealed-secrets#1912))
- Fix oci push action ([#&#8203;1899](bitnami-labs/sealed-secrets#1899))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42NC4zIiwidXBkYXRlZEluVmVyIjoiNDMuNjQuMyIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUmVub3ZhdGUgQm90IiwiYXV0b21hdGlvbjpib3QtYXV0aG9yZWQiLCJkZXBlbmRlbmN5LXR5cGU6OnBhdGNoIl19-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Document --all-namespaces

2 participants