-
Notifications
You must be signed in to change notification settings - Fork 1.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow querying multiple namespaces at once #7341
Comments
+1 this would be incredibly useful. As you mentioned in terms of "special handling"... obviously there is some trickiness involved here, because it would have to find the intersection of {namespaces matched by the glob} and {namespaces you actually have access to}, so I'm sensitive to the potential complexity of implementing this well. But in our case, this would be incredibly useful, especially for our privileged admins (and some integrations we have that inspect things via the HTTP API) Additionally, this would be fantastic if it were also extended to the cli as well. It would be great to be able to do things like: To be honest, my preference might even be to make the default behavior (for the Anyway, figured I'd at least add my input here, as we're evaluating nomad enterprise. Keep up the good work 👍 |
@schmichael can this one be closed? I know we implemented this for jobs and allocations in 0.12.0 #8192 Was that the limit of what we wanted to do here? |
We're missing |
CSI plugins and volumes can also benefit from a |
All HTTP APIs for namespaced objects (eg jobs) only allow querying against a single namespace. They should also support querying multiple namespaces at a time similar to how Policy Namespace Rules can be applied with glob pattern matching: https://learn.hashicorp.com/nomad/acls/policies#namespace-rules
HTTP API Selection, projection, and pagination #7340 could be viewed as a generalization of this issue, but namespacing may warrant special handling given its security implications.
The text was updated successfully, but these errors were encountered: