feat(rbac): complete namespaced mode to reduce cluster-wide permissions#1999

Open

joshuabaird wants to merge 7 commits into

fluent:masterfrom

joshuabaird:chore/watch-namespaces

Commits on Jun 18, 2026

feat(rbac): complete namespaced mode to reduce cluster-wide permissions

joshuabaird
and
cursoragent
committed
refactor(rbac): extract shared scope helpers to reduce duplication

joshuabaird
and
cursoragent
committed
style: wrap long RBAC helper calls to satisfy lll linter

joshuabaird
and
cursoragent
committed
fix(rbac): only clean up the per-instance RoleBinding in namespaced mode

joshuabaird
and
cursoragent
committed
fix(rbac): don't set owner reference on the shared FluentBit Role

joshuabaird
and
cursoragent
committed
fix(rbac): drop delete on roles (least-privilege)

joshuabaird
and
cursoragent
committed
fix(helm): quote the rendered --watch-namespaces arg

joshuabaird
and
cursoragent
committed