elastic-worker: Declare services within namespaces

This triggers a cascade of secrets to deploy to specific namespaces though.

Related to T4144

sysadmin/T3592-elastic-workers/worker/README.md

@@ -95,7 +95,7 @@ $ kubectl describe secret metadata-fetcher-credentials
 Installed through:
 
 ```
-$ TYPE=git
+$ TYPE=git  # Replace mentions below in the yaml files
 $ kubectl -f $SECRET_FILE apply
 # for secret file in {
 # loader-$TYPE-metadata-fetcher-credentials.yaml
@@ -107,6 +107,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: metadata-fetcher-credentials
+  namespace: ns-loaders-git
 type: Opaque
 stringData:
   data: |
@@ -121,6 +122,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: amqp-access-credentials
+  namespace: ns-loaders-$TYPE
 type: Opaque
 stringData:
   host: amqp://<redacted>:<redacted>@scheduler0.internal.staging.swh.network:5672/%2f
@@ -129,6 +131,7 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: loaders-$TYPE-sentry-secrets
+  namespace: ns-loaders-$TYPE
 type: Opaque
 stringData:
   sentry-dsn: https://<redacted>@sentry.softwareheritage.org/8

sysadmin/T3592-elastic-workers/worker/templates/autoscale.yaml

@@ -3,7 +3,7 @@ apiVersion: keda.sh/v1alpha1
 kind: TriggerAuthentication
 metadata:
   name: amqp-authentication
-  namespace: default # must be same namespace as the ScaledObject
+  namespace: ns-{{ .Values.loader.name }}-{{ .Values.loader.type }}
 spec:
   secretTargetRef: # Optional.
   - parameter: host
@@ -15,6 +15,7 @@ apiVersion: keda.sh/v1alpha1
 kind: ScaledObject
 metadata:
   name: loaders-{{ .Values.loader.name }}-{{ .Values.loader.type }}-operators
+  namespace: ns-{{ .Values.loader.name }}-{{ .Values.loader.type }}
 spec:
   scaleTargetRef:
     apiVersion:    apps/v1     # Optional. Default: apps/v1

sysadmin/T3592-elastic-workers/worker/templates/config-map.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: {{ .Values.loader.name }}-{{ .Values.loader.type }}
+  namespace: ns-{{ .Values.loader.name }}-{{ .Values.loader.type }}
 data:
   config.yml: |
     storage:

sysadmin/T3592-elastic-workers/worker/templates/deployment.yaml

@@ -3,6 +3,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ .Values.loader.name }}-{{ .Values.loader.type }}
+  namespace: ns-{{ .Values.loader.name }}-{{ .Values.loader.type }}
   labels:
     app: {{ .Values.loader.name }}-{{ .Values.loader.type }}
 spec:

sysadmin/T3592-elastic-workers/worker/templates/services.yaml

@@ -3,6 +3,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: storage-{{ .Values.loader.name }}-{{ .Values.loader.type }}
+  namespace: ns-{{ .Values.loader.name }}-{{ .Values.loader.type }}
 spec:
   type: ExternalName
   externalName: {{ .Values.storage.host }}
@@ -12,6 +13,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: amqp-{{ .Values.loader.name }}-{{ .Values.loader.type }}
+  namespace: ns-{{ .Values.loader.name }}-{{ .Values.loader.type }}
 spec:
   type: ExternalName
   externalName: {{ .Values.amqp.host }}

[Phabricator Migration user]

Some references in the commit message have been migrated:

• T4144 is now swh/infra/sysadm-environment#4144 (closed)