fix(clustertool): move spegel into its own namespace

truecharts · Oct 20, 2024 · 88abae9 · 88abae9
1 parent 97b3c76
commit 88abae9
Show file tree

Hide file tree

Showing 4 changed files with 11 additions and 4 deletions.
diff --git a/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/patch-gha.yaml b/clustertool/embed/generic/kubernetes/core/kyverno-policies/app/patch-gha.yaml
@@ -25,5 +25,5 @@ spec:
                   - dockerd
                   - --host=unix:///var/run/docker.sock
                   - --group=123
-                  - --registry-mirror=http://spegel-registry.kube-system.svc.cluster.local:5000
-                  - --insecure-registry=http://spegel-registry.kube-system.svc.cluster.local:5000
+                  - --registry-mirror=http://spegel-registry.spegel.svc.cluster.local:5000
+                  - --insecure-registry=http://spegel-registry.spegel.svc.cluster.local:5000
diff --git a/.../kube-system/spegel/app/helm-release.yaml → ...netes/system/spegel/app/helm-release.yaml b/.../kube-system/spegel/app/helm-release.yaml → ...netes/system/spegel/app/helm-release.yaml
@@ -4,7 +4,7 @@ apiVersion: helm.toolkit.fluxcd.io/v2
 kind: HelmRelease
 metadata:
   name: spegel
-  namespace: kube-system
+  namespace: spegel
 spec:
   interval: 30m
   chart:

diff --git a/clustertool/embed/generic/kubernetes/system/spegel/app/namespace.yaml b/clustertool/embed/generic/kubernetes/system/spegel/app/namespace.yaml
@@ -0,0 +1,7 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+    name: spegel
+    labels:
+        pod-security.kubernetes.io/enforce: privileged
+        topolvm.io/webhook: ignore
diff --git a/clustertool/pkg/gencmd/bootstrap.go b/clustertool/pkg/gencmd/bootstrap.go
@@ -165,7 +165,7 @@ func RunBootstrap(args []string) {
     close(stopCh)
 
     prioCharts := []fluxhandler.HelmChart{
-        {filepath.Join(helper.ClusterPath, "/kubernetes/kube-system/spegel/app"), false, true},
+        {filepath.Join(helper.ClusterPath, "/kubernetes/system/spegel/app"), false, true},
         {filepath.Join(helper.ClusterPath, "/kubernetes/system/cert-manager/app"), false, false},
     }
     fluxhandler.InstallCharts(prioCharts, HelmRepos, false)