Priority

(Medium) I'm annoyed but I'll live

User Story

As a Organization Admin I would like to change the namespaces of a TeamRoleBinding, so that I can easily adapt to changes in a team's responsibility.

Description

The initial implementation of the TeamRoleBinding controller does not support changing the list of Namespaces. This is enforced in the webhook.

Changing the namespace should now be supported In order to make the TeamRoleBinding more usable.
This requires enhancing the status that tracks the deployment status of the TeamRoleBinding.

Acceptance Criteria

• Admission webhook for TeamRoleBindings allows changing the list of namespaces but not removing all namespaces
• Reconciliation of a TeamRoleBinding tracks the namespaces in each cluster to which the TRB is deployed
• Ensure RoleBindings are removed from the namespaces in a cluster that no longer are part of .spec.Namespaces

Reference Issues

No response