Skip to content

Commit d6d8e33

Browse files
Add a note on cross-ns rebase
Signed-off-by: Danil-Grigorev <[email protected]>
1 parent 2d0928b commit d6d8e33

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

docs/book/src/tasks/experimental-features/cluster-class/write-clusterclass.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -467,6 +467,14 @@ spec:
467467
failureDomain: region
468468
```
469469

470+
<aside class="note warning">
471+
472+
<h1>Cluster rebase across namespaces</h1>
473+
474+
Class namespace referenced in the `Cluster` object is equivalent to a cluster being located in the referenced namespace from the validation perspective. Changing `classNamespace` is not allowed, while using a different `CluterClass` from the same namespace is permitted in the Cluster rebase procedure.
475+
476+
</aside>
477+
470478
#### Securing cross-namespace reference to the ClusterClass
471479

472480
It is often desirable to restrict free cross-namespace `ClusterClass` access for the `Cluster` object. This can be implemented by defining a [`ValidatingAdmissionPolicy`](https://kubernetes.io/docs/reference/access-authn-authz/validating-admission-policy/) on the `Cluster` object.

0 commit comments

Comments
 (0)