Skip to content

Support "Delete" without "Create" management policy combinations #871

@tvandinther

Description

@tvandinther

What problem are you facing?

In cases where a managed resource is intended to inherit an existing external resource and manage its full lifecycle, the only option for management policies is to include the "Create" policy. To protect against misconfigurations resulting in new resources being created instead of being adopted, it would be nice to be able to omit "Create" while maintaining destructive ownership with "Delete".

How could Crossplane help solve your problem?

Allow a more permission set of combinations. I made a similar request last year for allowing "Update" without "Create". At a minimum it would be nice to have "Delete" without "Create", but ultimately I don't see why there should be any restrictions on allowed combinations. A user could probably come up with a scenario where any combination of policies is desired, and Crossplane should just respect that.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions