Jan Novak
4282d73c74
Follows the approved lean-down plan (docs/plans/2026-08-08-1335-lean-scaffold-cleanup.md). Removes from the application's deployed footprint: - config/network-policy/ and its commented enable line -- the user does not need network policies at the moment. - The webhook-only halves of config/default/kustomization.yaml: the commented ../webhook and ../certmanager resource lines, the manager_webhook_patch.yaml reference, the serving-cert -> Validating/Mutating WebhookConfiguration cainjection replacement blocks, and the crdkustomizecainjection* scaffold markers -- anchors only for `kubebuilder create webhook`, which is a permanent non-goal. - The two commented [WEBHOOK] blocks in config/crd/kustomization.yaml plus the now-empty patches: key; kept the one-line crdkustomizeresource marker since `kubebuilder create api` could legitimately run again. - config/crd/kustomizeconfig.yaml, whose only consumer was the removed configurations: block. Explicitly kept per user direction: all of config/prometheus/, the paired metrics-TLS-via-cert-manager plumbing (cert_metrics_manager_patch + the metrics-certs/ServiceMonitor replacement halves), all RBAC manifests including the admin/editor/viewer helper roles, and all developer tooling. Also records in the execution log why the webhook machinery existed at all: kubebuilder init emits it unconditionally, verified against the v4.15.0 binary that no init flag can suppress it -- scaffold-then-prune is the only supported path, and the pruning pass should have happened at Step 0. Verified: kustomize build clean on config/default and config/crd, go build/vet clean with and without -tags=e2e, make test green with coverage identical to pre-cleanup. Co-Authored-By: Claude <noreply@anthropic.com>
104 lines
3.2 KiB
YAML
104 lines
3.2 KiB
YAML
# Adds namespace to all resources.
|
|
namespace: egress-proxies-operator-system
|
|
|
|
# Value of this field is prepended to the
|
|
# names of all resources, e.g. a deployment named
|
|
# "wordpress" becomes "alices-wordpress".
|
|
# Note that it should also match with the prefix (text before '-') of the namespace
|
|
# field above.
|
|
namePrefix: egress-proxies-operator-
|
|
|
|
# Labels to add to all resources and selectors.
|
|
#labels:
|
|
#- includeSelectors: true
|
|
# pairs:
|
|
# someName: someValue
|
|
|
|
resources:
|
|
- ../crd
|
|
- ../rbac
|
|
- ../manager
|
|
# [PROMETHEUS] To enable prometheus monitor, uncomment all sections with 'PROMETHEUS'.
|
|
#- ../prometheus
|
|
# [METRICS] Expose the controller manager metrics service.
|
|
- metrics_service.yaml
|
|
|
|
# Uncomment the patches line if you enable Metrics
|
|
patches:
|
|
# [METRICS] The following patch will enable the metrics endpoint using HTTPS and the port :8443.
|
|
# More info: https://book.kubebuilder.io/reference/metrics
|
|
- path: manager_metrics_patch.yaml
|
|
target:
|
|
kind: Deployment
|
|
|
|
# Uncomment the patches line if you enable Metrics and CertManager
|
|
# [METRICS-WITH-CERTS] To enable metrics protected with certManager, uncomment the following line.
|
|
# This patch will protect the metrics with certManager self-signed certs.
|
|
#- path: cert_metrics_manager_patch.yaml
|
|
# target:
|
|
# kind: Deployment
|
|
|
|
# [METRICS-WITH-CERTS] Uncomment the following replacements together with the patch
|
|
# above to wire the metrics Service name/namespace into the cert-manager Certificate
|
|
# and the Prometheus ServiceMonitor TLS config.
|
|
#replacements:
|
|
# - source: # Uncomment the following block to enable certificates for metrics
|
|
# kind: Service
|
|
# version: v1
|
|
# name: controller-manager-metrics-service
|
|
# fieldPath: metadata.name
|
|
# targets:
|
|
# - select:
|
|
# kind: Certificate
|
|
# group: cert-manager.io
|
|
# version: v1
|
|
# name: metrics-certs
|
|
# fieldPaths:
|
|
# - spec.dnsNames.0
|
|
# - spec.dnsNames.1
|
|
# options:
|
|
# delimiter: '.'
|
|
# index: 0
|
|
# create: true
|
|
# - select: # Uncomment the following to set the Service name for TLS config in Prometheus ServiceMonitor
|
|
# kind: ServiceMonitor
|
|
# group: monitoring.coreos.com
|
|
# version: v1
|
|
# name: controller-manager-metrics-monitor
|
|
# fieldPaths:
|
|
# - spec.endpoints.0.tlsConfig.serverName
|
|
# options:
|
|
# delimiter: '.'
|
|
# index: 0
|
|
# create: true
|
|
|
|
# - source:
|
|
# kind: Service
|
|
# version: v1
|
|
# name: controller-manager-metrics-service
|
|
# fieldPath: metadata.namespace
|
|
# targets:
|
|
# - select:
|
|
# kind: Certificate
|
|
# group: cert-manager.io
|
|
# version: v1
|
|
# name: metrics-certs
|
|
# fieldPaths:
|
|
# - spec.dnsNames.0
|
|
# - spec.dnsNames.1
|
|
# options:
|
|
# delimiter: '.'
|
|
# index: 1
|
|
# create: true
|
|
# - select: # Uncomment the following to set the Service namespace for TLS in Prometheus ServiceMonitor
|
|
# kind: ServiceMonitor
|
|
# group: monitoring.coreos.com
|
|
# version: v1
|
|
# name: controller-manager-metrics-monitor
|
|
# fieldPaths:
|
|
# - spec.endpoints.0.tlsConfig.serverName
|
|
# options:
|
|
# delimiter: '.'
|
|
# index: 1
|
|
# create: true
|