[question] Can `kube-gen` be restricted to a namespace?

[lhriley]

Currently it seems that kube-gen requires a ClusterRole in order to work. It appears that there aren't any controls for limiting the scope of kube-gen to a specific namespace.

For our use case, we want to run https://github.com/kylemcc/kube-nginx-proxy in certain namespaces, and only generate nginx configurations for services / pods within the same namespace. In this scenario, we would also want to only use namespace scoped roles, not cluster scoped roles.

Is this currently possible? Maybe using environment variables or undocumented flags?

[kylemcc]

@lhriley That sounds pretty sensible. I wonder if that could be accomplished by scoping the role supplied to kube-gen. I'll experiment with it a bit and report back. In the meantime, I think an easy workaround might be a namespace flag that accepts the names of namespaces to monitor and filters out anything that doesn't match the supplied namespaces.