remove OCP namespace-level duplication
Currently, each project/namespace contains the same components:
-
acme-patch: should be possible to change so it patches routes in multiple namespaces -
autoscaler: should be possible to change so it reads namespaces from AUTOSCALER_NAMESPACES -
monitoring-event-exporter: should be possible to listen to events for multiple namespaces, but might be a bit ugly -
monitoring-kube-state-exporter: has a --namespacesparam -
monitoring-prometheus-exporter: kubernetes_sd_configsalready has an explicit namespace list -
monitoring-service-metrics-exporter: should be possible to change so it reads namespaces from config -
reloader: discovery needs cluster-level permissions, only a single namespace can be passed viaKUBERNETES_NAMESPACE
As it is possible to give a service account permissions across namespaces, investigate which of these pieces can be collapsed into one service per cluster instead of per namespace. So we could eg have an cki--infra project that provides these services to all the other namespaces.
Edited by Michael Krausch-Hofmann