Skip to content

Prevent unintended usage of "replace" #14161

@mattenklicker

Description

@mattenklicker

Summary

Make it possible to prevent the unintended usage of "replace" in UI sync options.

Motivation

To update resources by "kubectl replace" is dangerous under certain conditions. It already has a warning sign, but some might want to disable the usage completely. See #9767 also. It is very present in UI sync options and unfortunately it is likely impossible to block "replace" through kubernetes RBAC or other measures like OPA.

Proposal

  • Create config flag to make the "replace" box grey out or disappear in UI sync options
  • Alternatively: Make it a RBAC control.

Metadata

Metadata

Labels

component:syncIssues related to the Syncing behaviorenhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions