Share a namespace between multiple tenants

[naivary]

Describe the feature

Some services must be shared etbween multiple tenants to work correctly. For exmaple, the access to the argocd namespace is required if any of the tenants want to deploy an ArgoCD Application.

What would the new user story look like?

1. Define shared namespaces in the tenant manifest under spec
2. Define the access permissions of the owner for shared namespace using a clusterrole name
3. Access to the shared namespace is given

Expected behavior

Access to the shared namespace is given with the defined permissions

[oliverbaehler]

Won't be supported, it's always going to be a 1-1 relation. Check out https://github.com/peak-scale/capsule-argo-addon. You must use the sourceNamespaces property for Appprojects and Impersonation

[prometherion]

Thanks for opening this Feature Request.

Oliver already shared the ArgoCD addon developed by Peak Scale, a Capsule vendor.
By sharing Namespaces, we would break the concept of Tenant on which Capsule is based.

I always have strong opinions, but weakly held, and I am happy to start a discussion if we're doing something wrong.

That's why I'm moving this issue into the Discussion section.