gardener / ops-toolbelt

Useful tools and operations guide for gardener landscapes
Apache License 2.0
15 stars 26 forks source link

Switching default namespace of ops-pod to 'kube-system' #98

Closed BeckerMax closed 1 year ago

BeckerMax commented 1 year ago

What would you like to be added: Switching default namespace of ops-pod to 'kube-system'

Why is this needed:

Currently it gets the namespace from the context which is defined via the kubectl config and this points to default if I use gardenctl and target a cluster.

The problem with putting the ops-pod in the default namespace is that due to the podSecurity configuration it is not allowed to start privileged containers there.

Any objections for changing the default to kube-system and not reading it from the config so we can actually start the ops-pod without having to manually provide the namespace?

gardener-robot commented 1 year ago

@BeckerMax You have mentioned internal references in the public. Please check.