remove OCP namespace-level duplication

Currently, each project/namespace contains the same components:

  • acme-patch: should be possible to change so it patches routes in multiple namespaces
  • autoscaler: should be possible to change so it reads namespaces from AUTOSCALER_NAMESPACES
  • monitoring-event-exporter: should be possible to listen to events for multiple namespaces, but might be a bit ugly
  • monitoring-kube-state-exporter: has a --namespaces param
  • monitoring-prometheus-exporter: kubernetes_sd_configs already has an explicit namespace list
  • monitoring-service-metrics-exporter: should be possible to change so it reads namespaces from config
  • reloader: discovery needs cluster-level permissions, only a single namespace can be passed via KUBERNETES_NAMESPACE

As it is possible to give a service account permissions across namespaces, investigate which of these pieces can be collapsed into one service per cluster instead of per namespace. So we could eg have an cki--infra project that provides these services to all the other namespaces.

Edited by Michael Krausch-Hofmann