How to set operator to provision only selected components?

[Rohlik]

Hey there 👋🏼,
Is there a way to make grafana-operator, delivered via Helm chart, configure which CR are allowed?
Use case: We want to allow user profusion folders and dashboards, but not alerts nor notification policies.

[not7cd]

You could do this with a Kyverno and a validate policy.

[Rohlik]

Thank you. That is helpful, even though I would expect to have something directly within the Helm chart.
For example:

provisioning:
  grafanaAlerts: false
  grafanaFolders: true
  grafanaDashboards: false

To instruct the operator not to search for a particular CR and possibly reduce resource footprint by avoiding unnecessary API calls.

[theSuess]

The intended way to accomplish this with an operator is to set RBAC rules for the specific resources. So you should grant your users only the permissions you want them to have.