From 9f06a1b45185e9ac3a3152edb6cff6f3553b5388 Mon Sep 17 00:00:00 2001
From: "F. Gold" <fgold@vmware.com>
Date: Mon, 18 Oct 2021 17:09:28 -0700
Subject: [PATCH] Limit  kubebuilder controllers to work only for objects in
 own namespaces

Signed-off-by: F. Gold <fgold@vmware.com>
---
 pkg/cmd/server/server.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/pkg/cmd/server/server.go b/pkg/cmd/server/server.go
index e0ac43a01..5ed3d9d0c 100644
--- a/pkg/cmd/server/server.go
+++ b/pkg/cmd/server/server.go
@@ -303,7 +303,8 @@ func newServer(f client.Factory, config serverConfig, logger *logrus.Logger) (*s
 	corev1api.AddToScheme(scheme)
 
 	mgr, err := ctrl.NewManager(clientConfig, ctrl.Options{
-		Scheme: scheme,
+		Scheme:    scheme,
+		Namespace: f.Namespace(),
 	})
 	if err != nil {
 		cancelFunc()