Feature Request: Reflect object labels

[jarett-cyxtera]

Hello,

Would it be possible to reflect the labels from the source secrets/configmaps along with the data? I'd try to add this feature myself, but I'm not at all familiar with C#.

Thanks!

[winromulus]

That's a very interesting but also dangerous request :)

It would have to be a separate flag entirely because labels are used in lookups and having this enabled by default is VERY problematic.

But nice feature and I'll add it as soon as I can.

[jarett-cyxtera]

Understood - thanks!

Our use cases:

• We have some services that use labels to dynamically select multiple secrets.
• We're using Argo CD, and have found that mirrored secrets are always identified as orphaned resources even though the source is labeled appropriately.

[stale[bot]]

Automatically marked as stale due to no recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[mvoitko]

Not stale

[stale[bot]]

Removed stale label.

[stale[bot]]

Automatically marked as stale due to no recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[mvoitko]

Not stale

[stale[bot]]

Removed stale label.

[stale[bot]]

Automatically marked as stale due to no recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[winromulus]

I'm not sure if we want all labels reflected. I'm considering this feature but there would have to be a control mechanism. Not sure if regex or starts-with.

[stale[bot]]

Removed stale label.

[jarett-cyxtera]

Include/exclude lists might be reasonable option as well.

[danmanners]

This would be an incredibly useful feature for us as well.

Use Case: in tightly controlled ArgoCD environments, I cannot deploy to the argocd namespace. However, the repository and repository secrets need to live in that namespace. I was successful in using Reflector to get the secret from my "customer" namespace to the argocd namespace, but due to labels not being replicated ArgoCD can't identify it as a repository.

[crabique]

This would be an even more useful feature if it were decoupled from the secret/CM realm.

At the moment, there is no operator that could reflect some labels/annotations from one object to another, and that is sometimes extremely valuable.