On Fri, Aug 21, 2020 at 19:52, Quanah Gibson-Mount quanah@symas.com wrote:
That's... really really dumb. It should absolutely be possible to tweak things in the cn=config db.
Yeah, I kind of agree. However there is one valid use case: config is put under gitops and operators want to make sure nobody can modify at runtime. Trying to apply gitops principles I'm struggling with software that is dynamically configured - worst case via the UI - all the time.