Short-form DNS names (e.g. postgres.databases.svc) fail to resolve in new pods due to k8s DNS search domain limitations. Switch all service hostnames to FQDNs (*.svc.cluster.local). Remove commonLabels from kustomization.yaml — it injected labels into all selectors including NetworkPolicy egress rules (blocking DNS to CoreDNS) and Deployment selectors (causing immutability errors). Add OTEL_EXPORTER_OTLP_ENDPOINT env var to deployment YAML so the telemetry collector endpoint uses the FQDN without requiring a binary rebuild. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
30 lines
782 B
YAML
30 lines
782 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: rdev
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
|
|
# Shared worker claudebox (runs all project builds)
|
|
- pvc.yaml
|
|
- pvc-shared-claude.yaml
|
|
- claudebox.yaml
|
|
- configmaps.yaml
|
|
|
|
# NOTE: secrets.yaml and credentials.yaml contain real keys and are gitignored.
|
|
# Copy from *.example files and fill in real values before deploying.
|
|
- secrets.yaml # from secrets.yaml.example
|
|
- credentials.yaml # from credentials.yaml.example
|
|
|
|
# v0.4+ - API Server (RBAC now included in rdev-api.yaml)
|
|
- rdev-api.yaml
|
|
|
|
# Woodpecker CI RBAC - allows deploy steps to update deployments in projects namespace
|
|
- woodpecker-deployer-rbac.yaml
|
|
|
|
# v0.8+ - Production hardening
|
|
- pdb.yaml
|
|
- network-policy.yaml
|
|
|