On Fri, Aug 21, 2020 at 19:52, Quanah Gibson-Mount <quanah@symas.com> wrote:

That's... really really dumb. It should absolutely be possible to tweak things in the cn=config db.

Yeah, I kind of agree. However there is one valid use case: config is put under gitops and operators

want to make sure nobody can modify at runtime. Trying to apply gitops principles I'm struggling

with software that is dynamically configured - worst case via the UI - all the time.