How to deploy to NAAS clusters?

[suvl]

My developers use the k8s clusters in a namespace-as-a-service, limited RBAC setting and, from the README.md, I see these:

Labeling Namespace default
Creating MutatingWebhookConfiguration kubevpn-traffic-manager

They cannot label namespaces and cannot install mutating webhooks.

How would we, as a platforms team, enable this on-demand from them? How could we pre-set things or have something in-place to allow them to use this without heavily elevating their privileges?

[wencaiwulue]

@suvl

1. You can use helm (with permission rbac kubeconfig) to install kubevpn server ref .
2. Once installed, kubevpn client can use kubeconfig without rbac permission.kubevpn connect --kubeconfig not_needs_rbac_kubeconfig

[wencaiwulue]

Install server in Kubernetes cluster (optional)
you can install kubevpn server previously (it will automatically install by kubevpn client with command kubevpn connect if detect kubevpn server not exist)

https://artifacthub.io/packages/helm/kubevpn-charts/kubevpn

[wencaiwulue]

@suvl
Another solution is you can connect it with rbac kubeconfig at the first time.
Then second time you just needs to use it kubevpn connect(kubeconfig not needs rbac permission any more)