camilamacedo86 / kubebuilder / 21544721402

74%

master: 74%

push

github

feat(go/v4): add namespace-scoped manager support

Add --namespaced flag to scaffold managers that watch only specific namespace(s),
enabling least-privilege deployments and multi-tenant architectures.

Changes:
- Add --namespaced flag to init and edit commands
- Scaffold Role/RoleBinding instead of ClusterRole/ClusterRoleBinding
- Add WATCH_NAMESPACE environment variable to manager deployment
- Add helper functions in cmd/main.go (getWatchNamespace, setupCacheNamespaces)
- Controllers automatically get namespace parameter in RBAC markers
- Support converting existing projects with 'kubebuilder edit --namespaced=true'
- Add comprehensive migration guide and reference documentation
- Add e2e test validating namespace isolation behavior
- Add integration test validating scaffolding correctness
- Update testdata project to demonstrate namespace-scoped configuration

Assisted-by: Cursor/Claude

42 of 59 new or added lines in 7 files covered. (71.19%)

6674 of 9060 relevant lines covered (73.66%)

40.26 hits per line