2026-07-14 09:27:24 -07:00
|
|
|
locals {
|
|
|
|
|
namespaces = {
|
|
|
|
|
"cert-manager" = {}
|
|
|
|
|
"reloader" = {}
|
|
|
|
|
"ingress-nginx" = {}
|
|
|
|
|
"ddb" = {}
|
|
|
|
|
"iam" = {}
|
|
|
|
|
"storage" = {}
|
|
|
|
|
"logging" = {}
|
|
|
|
|
"monitoring" = {}
|
|
|
|
|
"cicd" = {}
|
|
|
|
|
"dashboard" = {}
|
|
|
|
|
"sqs" = {}
|
|
|
|
|
"temporal" = {}
|
|
|
|
|
"story-crater-backend" = {}
|
|
|
|
|
"llm" = {}
|
|
|
|
|
"dev-tools" = {}
|
2026-07-14 13:14:46 -07:00
|
|
|
"longhorn-system" = {}
|
|
|
|
|
"cilium-secrets" = {}
|
2026-07-14 09:27:24 -07:00
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
resource "kubernetes_namespace" "namespaces" {
|
|
|
|
|
for_each = local.namespaces
|
|
|
|
|
|
|
|
|
|
metadata {
|
|
|
|
|
name = each.key
|
|
|
|
|
labels = {
|
|
|
|
|
"pod-security.kubernetes.io/enforce" = "baseline"
|
|
|
|
|
"pod-security.kubernetes.io/enforce-version" = "latest"
|
|
|
|
|
"pod-security.kubernetes.io/audit" = "restricted"
|
|
|
|
|
"pod-security.kubernetes.io/audit-version" = "latest"
|
|
|
|
|
"pod-security.kubernetes.io/warn" = "restricted"
|
|
|
|
|
"pod-security.kubernetes.io/warn-version" = "latest"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
