restrict sub domain of rbac users?

[chino]

I'm wondering if it could be possible to restrict what vhost entries users are allowed to publish to so that they don't collide with one another in a multi-tenant cluster.

For example imagine mapping services to a certain convention such as,<service>.<namespace>.ingress.example.com either automatically or by simply rejecting the user from breaking that convention based on what namespace the ingress is created in.

[kfox1111]

That would be useful to us here too.

[aledbf]

Closing. This is not something we can implement in the controller itself. Please check another similar request kubernetes/kubernetes#30151

[aledbf]

@chino please check this comment for a technical reason why this is not possible kubernetes/community#1486 (comment)