116 lines
1.9 KiB
YAML
116 lines
1.9 KiB
YAML
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: argocd
|
||
|
|
labels:
|
||
|
|
name: argocd
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: ddb
|
||
|
|
labels:
|
||
|
|
name: ddb
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: cicd
|
||
|
|
labels:
|
||
|
|
name: cicd
|
||
|
|
# REQUIRED: Forgejo runner needs privileged (DinD, hostPath, securityContext.privileged)
|
||
|
|
pod-security.kubernetes.io/enforce: privileged
|
||
|
|
pod-security.kubernetes.io/audit: privileged
|
||
|
|
pod-security.kubernetes.io/warn: privileged
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: cert-manager
|
||
|
|
labels:
|
||
|
|
name: cert-manager
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: ingress-nginx
|
||
|
|
labels:
|
||
|
|
name: ingress-nginx
|
||
|
|
# REQUIRED: nginx controller needs hostPort 80/443
|
||
|
|
pod-security.kubernetes.io/enforce: privileged
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: reloader
|
||
|
|
labels:
|
||
|
|
name: reloader
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: storage
|
||
|
|
labels:
|
||
|
|
name: storage
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: monitoring
|
||
|
|
labels:
|
||
|
|
name: monitoring
|
||
|
|
# REQUIRED: node-exporter needs hostNetwork/hostPID/hostPath/hostPort
|
||
|
|
pod-security.kubernetes.io/enforce: privileged
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: logging
|
||
|
|
labels:
|
||
|
|
name: logging
|
||
|
|
# REQUIRED: promtail needs hostPath, DAC_READ_SEARCH, privileged:true
|
||
|
|
pod-security.kubernetes.io/enforce: privileged
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: iam
|
||
|
|
labels:
|
||
|
|
name: iam
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: sqs
|
||
|
|
labels:
|
||
|
|
name: sqs
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: temporal
|
||
|
|
labels:
|
||
|
|
name: temporal
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: dashboard
|
||
|
|
labels:
|
||
|
|
name: dashboard
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: cloudflared
|
||
|
|
labels:
|
||
|
|
name: cloudflared
|
||
|
|
---
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Namespace
|
||
|
|
metadata:
|
||
|
|
name: duckdns
|
||
|
|
labels:
|
||
|
|
name: duckdns
|