Files
homelab/terraform/bootstrap-namespaces.tf
T
Story Crater Bot 4e473978b5 Step 1 complete: Bootstrap layer with ArgoCD, cert-manager, namespaces imported to TF
- ArgoCD migrated to argocd namespace
- Cert-manager issuers/certs created
- 20 namespaces imported with pod-security labels
- S3 backend temporarily offline (MinIO), using local backup
- Pending: Remove metadata drift from helm releases, re-apply
2026-08-18 15:08:00 -07:00

38 lines
1.1 KiB
Terraform

locals {
namespaces = {
"cert-manager" = {}
"reloader" = {}
"ingress-nginx" = {}
"ddb" = {}
"iam" = {}
"storage" = {}
"logging" = {}
"monitoring" = {}
"cicd" = {}
"dashboard" = {}
"sqs" = {}
"temporal" = {}
"story-crater-backend" = {}
"llm" = {}
"dev-tools" = {}
"longhorn-system" = {}
"cilium-secrets" = {}
}
}
resource "kubernetes_namespace" "namespaces" {
for_each = local.namespaces
metadata {
name = each.key
labels = {
"pod-security.kubernetes.io/enforce" = "baseline"
"pod-security.kubernetes.io/enforce-version" = "latest"
"pod-security.kubernetes.io/audit" = "restricted"
"pod-security.kubernetes.io/audit-version" = "latest"
"pod-security.kubernetes.io/warn" = "restricted"
"pod-security.kubernetes.io/warn-version" = "latest"
}
}
}