https://deploy-preview-164--docs-projectcapsule.netlify.app/docs/permits/Recent content in Permits on CapsuleHugo -- gohugo.ioenhttps://deploy-preview-164--docs-projectcapsule.netlify.app/docs/permits/templates/Mon, 01 Jan 0001 00:00:00 +0000https://deploy-preview-164--docs-projectcapsule.netlify.app/docs/permits/templates/A template describes what Capsule renders for a ResourcePermit, who executes it, and how long the resulting resources may remain active. Choose the template scope Use ResourcePermitTemplate when the workflow and its execution identity belong to one namespace. Use GlobalResourcePermitTemplate when platform administrators provide the same workflow to several namespaces. Behavior ResourcePermitTemplate GlobalResourcePermitTemplate Scope Namespaced Cluster Request location Same namespace Any allowed namespace ServiceAccount reference Name only, in the template namespace Name and namespace Namespace selectors/status Not applicable Supported Ready condition and observed generation Supported Supported A minimal local template renders its namespaced targets into the ResourcePermit namespace when metadata.https://deploy-preview-164--docs-projectcapsule.netlify.app/docs/permits/requests/Mon, 01 Jan 0001 00:00:00 +0000https://deploy-preview-164--docs-projectcapsule.netlify.app/docs/permits/requests/A ResourcePermit is namespaced. Its namespace is the authorization boundary for creating the request and the default destination for namespaced resources rendered by its template. A request may also create cluster-scoped resources. Lifecycle The normal lifecycle is deliberately small: Phase Meaning Created Accepted by admission; Capsule is resolving and rendering the request Requested Ready for manual review Pending Reserved for a system-held request Denied A reviewer denied the request Approved Approved and waiting for activation Active The rendered resources are being managed Failed A resource preflight or activation failed and may be retried Retrying A caller requested another preflight or activation attempt Expired Access ended; cleanup and retention apply Creation