-
Notifications
You must be signed in to change notification settings - Fork 135
Description
What problem are you facing?
In cases where a managed resource is intended to inherit an existing external resource and manage its full lifecycle, the only option for management policies is to include the "Create" policy. To protect against misconfigurations resulting in new resources being created instead of being adopted, it would be nice to be able to omit "Create" while maintaining destructive ownership with "Delete".
How could Crossplane help solve your problem?
Allow a more permission set of combinations. I made a similar request last year for allowing "Update" without "Create". At a minimum it would be nice to have "Delete" without "Create", but ultimately I don't see why there should be any restrictions on allowed combinations. A user could probably come up with a scenario where any combination of policies is desired, and Crossplane should just respect that.