underpost 2.89.37 → 2.89.45

package/README.md

@@ -18,7 +18,7 @@
 
 <!-- badges -->
 
-[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/2.89.37)](https://socket.dev/npm/package/underpost/overview/2.89.37) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
+[![Node.js CI](https://github.com/underpostnet/engine/actions/workflows/docker-image.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/docker-image.yml) [![Test](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml/badge.svg?branch=master)](https://github.com/underpostnet/engine/actions/workflows/coverall.ci.yml) [![Downloads](https://img.shields.io/npm/dm/underpost.svg)](https://www.npmjs.com/package/underpost) [![Socket Badge](https://socket.dev/api/badge/npm/package/underpost/2.89.45)](https://socket.dev/npm/package/underpost/overview/2.89.45) [![Coverage Status](https://coveralls.io/repos/github/underpostnet/engine/badge.svg?branch=master)](https://coveralls.io/github/underpostnet/engine?branch=master) [![Version](https://img.shields.io/npm/v/underpost.svg)](https://www.npmjs.org/package/underpost) [![License](https://img.shields.io/npm/l/underpost.svg)](https://www.npmjs.com/package/underpost)
 
 <!-- end-badges -->
 
@@ -66,7 +66,7 @@ Run dev client server
 npm run dev
 ```
 <!-- -->
-## underpost ci/cd cli v2.89.37
+## underpost ci/cd cli v2.89.45
 
 ### Usage: `underpost [options] [command]`
   ```
@@ -84,6 +84,7 @@ Commands:
   env [deploy-id] [env] [subConf]                            Sets environment variables and configurations related to a specific deployment ID.
   config [options] <operator> [key] [value]                  Manages Underpost configurations using various operators.
   root                                                       Displays the root path of the npm installation.
+  ip [options]                                               Displays the current public machine IP addresses.
   cluster [options] [pod-name]                               Manages Kubernetes clusters, defaulting to Kind cluster initialization.
   deploy [options] [deploy-list] [env]                       Manages application deployments, defaulting to deploying development pods.
   secret [options] <platform>                                Manages secrets for various platforms.

package/bin/deploy.js

@@ -216,7 +216,7 @@ try {
             if (argHost.length && argPath.length && (!argHost.includes(host) || !argPath.includes(path))) {
               delete serverConf[host][path];
             } else {
-              serverConf[host][path].liteBuild = process.argv.includes('l') ? true : false;
+              serverConf[host][path].liteBuild = false;
               serverConf[host][path].minifyBuild = process.env.NODE_ENV === 'production' ? true : false;
               if (serverConf[host][path].singleReplica && serverConf[host][path].replicas) {
                 deployIdSingleReplicas = deployIdSingleReplicas.concat(
@@ -1071,34 +1071,39 @@ EOF`);
         shellExec(args.join(' '));
       }
       if (process.argv.includes('secret')) {
+        const namespace = process.argv.find((arg) => arg.startsWith('--namespace='))?.split('=')[1] || 'default';
         {
           const secretSelector = `fastapi-postgres-credentials`;
-          shellExec(`sudo kubectl delete secret ${secretSelector}`);
+          shellExec(`sudo kubectl delete secret ${secretSelector} -n ${namespace} --ignore-not-found`);
           shellExec(
             `sudo kubectl create secret generic ${secretSelector}` +
               ` --from-literal=POSTGRES_DB=postgresdb` +
               ` --from-literal=POSTGRES_USER=admin` +
-              ` --from-file=POSTGRES_PASSWORD=/home/dd/engine/engine-private/postgresql-password`,
+              ` --from-file=POSTGRES_PASSWORD=/home/dd/engine/engine-private/postgresql-password` +
+              ` --dry-run=client -o yaml | kubectl apply -f - -n ${namespace}`,
           );
         }
         {
           const secretSelector = `fastapi-backend-config-secret`;
-          shellExec(`sudo kubectl delete secret ${secretSelector}`);
+          shellExec(`sudo kubectl delete secret ${secretSelector} -n ${namespace} --ignore-not-found`);
           shellExec(
             `sudo kubectl create secret generic ${secretSelector}` +
               ` --from-file=SECRET_KEY=/home/dd/engine/engine-private/postgresql-password` +
               ` --from-literal=FIRST_SUPERUSER=development@underpost.net` +
-              ` --from-file=FIRST_SUPERUSER_PASSWORD=/home/dd/engine/engine-private/postgresql-password`,
+              ` --from-file=FIRST_SUPERUSER_PASSWORD=/home/dd/engine/engine-private/postgresql-password` +
+              ` --dry-run=client -o yaml | kubectl apply -f - -n ${namespace}`,
           );
         }
       }
       if (process.argv.includes('run-back')) {
-        shellExec(`sudo kubectl apply -f ./manifests/deployment/fastapi/backend-deployment.yml`);
-        shellExec(`sudo kubectl apply -f ./manifests/deployment/fastapi/backend-service.yml`);
+        const namespace = process.argv.find((arg) => arg.startsWith('--namespace='))?.split('=')[1] || 'default';
+        shellExec(`sudo kubectl apply -f ./manifests/deployment/fastapi/backend-deployment.yml -n ${namespace}`);
+        shellExec(`sudo kubectl apply -f ./manifests/deployment/fastapi/backend-service.yml -n ${namespace}`);
       }
       if (process.argv.includes('run-front')) {
-        shellExec(`sudo kubectl apply -f ./manifests/deployment/fastapi/frontend-deployment.yml`);
-        shellExec(`sudo kubectl apply -f ./manifests/deployment/fastapi/frontend-service.yml`);
+        const namespace = process.argv.find((arg) => arg.startsWith('--namespace='))?.split('=')[1] || 'default';
+        shellExec(`sudo kubectl apply -f ./manifests/deployment/fastapi/frontend-deployment.yml -n ${namespace}`);
+        shellExec(`sudo kubectl apply -f ./manifests/deployment/fastapi/frontend-service.yml -n ${namespace}`);
       }
       break;
     }
@@ -1117,14 +1122,15 @@ EOF`);
 
     case 'kafka': {
       // https://medium.com/@martin.hodges/deploying-kafka-on-a-kind-kubernetes-cluster-for-development-and-testing-purposes-ed7adefe03cb
+      const namespace = process.argv.find((arg) => arg.startsWith('--namespace='))?.split('=')[1] || 'kafka';
       const imageName = `doughgle/kafka-kraft`;
       shellExec(`docker pull ${imageName}`);
       if (!process.argv.includes('kubeadm'))
         shellExec(
           `${process.argv.includes('kubeadm') ? `ctr -n k8s.io images import` : `kind load docker-image`} ${imageName}`,
         );
-      shellExec(`kubectl create namespace kafka`);
-      shellExec(`kubectl apply -f ./manifests/deployment/kafka/deployment.yaml`);
+      shellExec(`kubectl create namespace ${namespace} --dry-run=client -o yaml | kubectl apply -f -`);
+      shellExec(`kubectl apply -f ./manifests/deployment/kafka/deployment.yaml -n ${namespace}`);
       // kubectl logs kafka-0 -n kafka | grep STARTED
       // kubectl logs kafka-1 -n kafka | grep STARTED
       // kubectl logs kafka-2 -n kafka | grep STARTED
@@ -1152,9 +1158,9 @@ libnvidia-container-tools-${NVIDIA_CONTAINER_TOOLKIT_VERSION} \
 libnvidia-container1-${NVIDIA_CONTAINER_TOOLKIT_VERSION}`);
 
       // https://docs.nvidia.com/datacenter/cloud-native/gpu-operator/latest/getting-started.html
-
-      shellExec(`kubectl create ns gpu-operator`);
-      shellExec(`kubectl label --overwrite ns gpu-operator pod-security.kubernetes.io/enforce=privileged`);
+      const namespace = 'gpu-operator';
+      shellExec(`kubectl create ns ${namespace} --dry-run=client -o yaml | kubectl apply -f -`);
+      shellExec(`kubectl label --overwrite ns ${namespace} pod-security.kubernetes.io/enforce=privileged`);
 
       shellExec(`helm repo add nvidia https://helm.ngc.nvidia.com/nvidia \
     && helm repo update`);
@@ -1209,7 +1215,8 @@ nvidia/gpu-operator \
             process.argv.includes('kubeadm') ? `ctr -n k8s.io images import` : `kind load docker-image`
           } ${image}`,
         );
-      shellExec(`kubectl apply -f ./manifests/deployment/spark/spark-pi-py.yaml`);
+      const namespace = process.argv.find((arg) => arg.startsWith('--namespace='))?.split('=')[1] || 'default';
+      shellExec(`kubectl apply -f ./manifests/deployment/spark/spark-pi-py.yaml -n ${namespace}`);
 
       // Check the status of the Spark job:
       // kubectl get sparkapplications.sparkoperator.k8s.io -n default

package/cli.md

@@ -1,4 +1,4 @@
-## underpost ci/cd cli v2.89.37
+## underpost ci/cd cli v2.89.45
 
 ### Usage: `underpost [options] [command]`
   ```
@@ -16,6 +16,7 @@ Commands:
   env [deploy-id] [env] [subConf]                            Sets environment variables and configurations related to a specific deployment ID.
   config [options] <operator> [key] [value]                  Manages Underpost configurations using various operators.
   root                                                       Displays the root path of the npm installation.
+  ip [options]                                               Displays the current public machine IP addresses.
   cluster [options] [pod-name]                               Manages Kubernetes clusters, defaulting to Kind cluster initialization.
   deploy [options] [deploy-list] [env]                       Manages application deployments, defaulting to deploying development pods.
   secret [options] <platform>                                Manages secrets for various platforms.
@@ -224,6 +225,19 @@ Options:
 ```
   
 
+### `ip` :
+```
+ Usage: underpost ip [options]
+
+Displays the current public machine IP addresses.
+
+Options:
+  --copy      Copies the IP addresses to the clipboard.
+  -h, --help  display help for command
+ 
+```
+  
+
 ### `cluster` :
 ```
  Usage: underpost cluster [options] [pod-name]
@@ -231,66 +245,79 @@ Options:
 Manages Kubernetes clusters, defaulting to Kind cluster initialization.
 
 Arguments:
-  pod-name                    Optional: Filters information by a specific pod
-                              name.
+  pod-name                             Optional: Filters information by a
+                                       specific pod name.
 
 Options:
-  --reset                     Deletes all clusters and prunes all related data
-                              and caches.
-  --mariadb                   Initializes the cluster with a MariaDB
-                              statefulset.
-  --mysql                     Initializes the cluster with a MySQL statefulset.
-  --mongodb                   Initializes the cluster with a MongoDB
-                              statefulset.
-  --mongo-db-host <host>      Set custom mongo db host
-  --postgresql                Initializes the cluster with a PostgreSQL
-                              statefulset.
-  --mongodb4                  Initializes the cluster with a MongoDB 4.4
-                              service.
-  --valkey                    Initializes the cluster with a Valkey service.
-  --contour                   Initializes the cluster with Project Contour base
-                              HTTPProxy and Envoy.
-  --cert-manager              Initializes the cluster with a Let's Encrypt
-                              production ClusterIssuer.
-  --dedicated-gpu             Initializes the cluster with dedicated GPU base
-                              resources and environment settings.
-  --info                      Retrieves information about all deployed
-                              Kubernetes objects.
-  --full                      Initializes the cluster with all available
-                              statefulsets and services.
-  --ns-use <ns-name>          Switches the current Kubernetes context to the
-                              specified namespace.
-  --kubeadm                   Initializes the cluster using kubeadm for control
-                              plane management.
-  --grafana                   Initializes the cluster with a Grafana
-                              deployment.
-  --prom [hosts]              Initializes the cluster with a Prometheus
-                              Operator deployment and monitor scrap for
-                              specified hosts.
-  --dev                       Initializes a development-specific cluster
-                              configuration.
-  --list-pods                 Displays detailed information about all pods.
-  --info-capacity             Displays the current total machine capacity
-                              information.
-  --info-capacity-pod         Displays the current machine capacity information
-                              per pod.
-  --pull-image                Sets an optional associated image to pull during
-                              initialization.
-  --init-host                 Installs necessary Kubernetes node CLI tools
-                              (e.g., kind, kubeadm, docker, podman, helm).
-  --uninstall-host            Uninstalls all host components installed by
-                              init-host.
-  --config                    Sets the base Kubernetes node configuration.
-  --worker                    Sets the context for a worker node.
-  --chown                     Sets the appropriate ownership for Kubernetes
-                              kubeconfig files.
-  --k3s                       Initializes the cluster using K3s (Lightweight
-                              Kubernetes).
-  --hosts <hosts>             A comma-separated list of cluster hostnames or IP
-                              addresses.
-  --remove-volume-host-paths  Removes specified volume host paths after
-                              execution.
-  -h, --help                  display help for command
+  --reset                              Deletes all clusters and prunes all
+                                       related data and caches.
+  --mariadb                            Initializes the cluster with a MariaDB
+                                       statefulset.
+  --mysql                              Initializes the cluster with a MySQL
+                                       statefulset.
+  --mongodb                            Initializes the cluster with a MongoDB
+                                       statefulset.
+  --mongo-db-host <host>               Set custom mongo db host
+  --postgresql                         Initializes the cluster with a
+                                       PostgreSQL statefulset.
+  --mongodb4                           Initializes the cluster with a MongoDB
+                                       4.4 service.
+  --valkey                             Initializes the cluster with a Valkey
+                                       service.
+  --contour                            Initializes the cluster with Project
+                                       Contour base HTTPProxy and Envoy.
+  --cert-manager                       Initializes the cluster with a Let's
+                                       Encrypt production ClusterIssuer.
+  --dedicated-gpu                      Initializes the cluster with dedicated
+                                       GPU base resources and environment
+                                       settings.
+  --full                               Initializes the cluster with all
+                                       available statefulsets and services.
+  --ns-use <ns-name>                   Switches the current Kubernetes context
+                                       to the specified namespace (creates if
+                                       it doesn't exist).
+  --kubeadm                            Initializes the cluster using kubeadm
+                                       for control plane management.
+  --pod-network-cidr <cidr>            Sets custom pod network CIDR for kubeadm
+                                       cluster initialization (defaults to
+                                       "192.168.0.0/16").
+  --control-plane-endpoint <endpoint>  Sets custom control plane endpoint for
+                                       kubeadm cluster initialization (defaults
+                                       to "localhost:6443").
+  --grafana                            Initializes the cluster with a Grafana
+                                       deployment.
+  --prom [hosts]                       Initializes the cluster with a
+                                       Prometheus Operator deployment and
+                                       monitor scrap for specified hosts.
+  --dev                                Initializes a development-specific
+                                       cluster configuration.
+  --list-pods                          Displays detailed information about all
+                                       pods.
+  --info-capacity                      Displays the current total machine
+                                       capacity information.
+  --info-capacity-pod                  Displays the current machine capacity
+                                       information per pod.
+  --pull-image                         Sets an optional associated image to
+                                       pull during initialization.
+  --init-host                          Installs necessary Kubernetes node CLI
+                                       tools (e.g., kind, kubeadm, docker,
+                                       podman, helm).
+  --uninstall-host                     Uninstalls all host components installed
+                                       by init-host.
+  --config                             Sets the base Kubernetes node
+                                       configuration.
+  --worker                             Sets the context for a worker node.
+  --chown                              Sets the appropriate ownership for
+                                       Kubernetes kubeconfig files.
+  --k3s                                Initializes the cluster using K3s
+                                       (Lightweight Kubernetes).
+  --hosts <hosts>                      A comma-separated list of cluster
+                                       hostnames or IP addresses.
+  --remove-volume-host-paths           Removes specified volume host paths
+                                       after execution.
+  --namespace <namespace>              Kubernetes namespace for cluster
+                                       operations (defaults to "default").
+  -h, --help                           display help for command
  
 ```
   
@@ -317,8 +344,6 @@ Options:
                                      configuration.
   --expose                           Exposes services matching the provided
                                      deployment ID list.
-  --info-util                        Displays useful `kubectl` utility
-                                     management commands.
   --cert                             Resets TLS/SSL certificate secrets for
                                      deployments.
   --cert-hosts <hosts>               Resets TLS/SSL certificate secrets for
@@ -350,6 +375,8 @@ Options:
   --restore-hosts                    Restores default `/etc/hosts` entries.
   --disable-update-underpost-config  Disables updates to Underpost
                                      configuration during deployment.
+  --namespace <namespace>            Kubernetes namespace for deployment
+                                     operations (defaults to "default").
   -h, --help                         display help for command
  
 ```
@@ -666,6 +693,7 @@ Options:
   --runtime-class-name <name>              Sets the runtime class name for the job in deploy-job.
   --image-pull-policy <policy>             Sets the image pull policy for the job in deploy-job.
   --api-version <version>                  Sets the API version for the job manifest in deploy-job.
+  --labels <labels>                        Optional: Specifies a comma-separated list of key-value pairs for labels (e.g., "app=my-app,env=prod").
   --claim-name <name>                      Optional: Specifies the claim name for volume mounting in deploy-job.
   --kind <kind-type>                       Specifies the kind of Kubernetes resource (e.g., Job, Deployment) for deploy-job.
   --kubeadm                                Flag to indicate Kubeadm cluster type context

package/manifests/deployment/dd-default-development/deployment.yaml

@@ -17,7 +17,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-blue
-          image: localhost/rockylinux9-underpost:v2.89.37
+          image: localhost/rockylinux9-underpost:v2.89.45
           #          resources:
           #            requests:
           #              memory: "124Ki"
@@ -100,7 +100,7 @@ spec:
     spec:
       containers:
         - name: dd-default-development-green
-          image: localhost/rockylinux9-underpost:v2.89.37
+          image: localhost/rockylinux9-underpost:v2.89.45
           #          resources:
           #            requests:
           #              memory: "124Ki"

package/manifests/deployment/dd-test-development/deployment.yaml

@@ -3,6 +3,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: dd-test-development-blue
+  namespace: default
   labels:
     app: dd-test-development-blue
 spec:
@@ -17,7 +18,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-blue
-          image: localhost/rockylinux9-underpost:v2.89.37
+          image: localhost/rockylinux9-underpost:v2.89.45
 #          resources:
 #            requests:
 #              memory: "96294Ki"
@@ -49,6 +50,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: dd-test-development-blue-service
+  namespace: default
 spec:
   selector:
     app: dd-test-development-blue
@@ -94,6 +96,7 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: dd-test-development-green
+  namespace: default
   labels:
     app: dd-test-development-green
 spec:
@@ -108,7 +111,7 @@ spec:
     spec:
       containers:
         - name: dd-test-development-green
-          image: localhost/rockylinux9-underpost:v2.89.37
+          image: localhost/rockylinux9-underpost:v2.89.45
 #          resources:
 #            requests:
 #              memory: "96294Ki"
@@ -140,6 +143,7 @@ apiVersion: v1
 kind: Service
 metadata:
   name: dd-test-development-green-service
+  namespace: default
 spec:
   selector:
     app: dd-test-development-green

package/manifests/deployment/dd-test-development/proxy.yaml

@@ -4,6 +4,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: test.nexodev.org
+  namespace: default
 spec:
   virtualhost:
     fqdn: test.nexodev.org
@@ -31,6 +32,7 @@ apiVersion: projectcontour.io/v1
 kind: HTTPProxy
 metadata:
   name: stagging.nexodev.org
+  namespace: default
 spec:
   virtualhost:
     fqdn: stagging.nexodev.org

package/manifests/deployment/kafka/deployment.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: kafka
-  namespace: kafka
   labels:
     app: kafka-app
 spec:
@@ -54,7 +53,6 @@ apiVersion: v1
 kind: Service
 metadata:
   name: kafka-svc
-  namespace: kafka
   labels:
     app: kafka-app
 spec:

package/manifests/deployment/spark/spark-pi-py.yaml

@@ -2,7 +2,6 @@ apiVersion: sparkoperator.k8s.io/v1beta2
 kind: SparkApplication
 metadata:
   name: spark-pi-python
-  namespace: default
 spec:
   type: Python
   pythonVersion: '3'

package/manifests/deployment/tensorflow/tf-gpu-test.yaml

@@ -3,7 +3,6 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: tf-gpu-test-script
-  namespace: default
 data:
   main_tf_gpu_test.py: |
     import os
@@ -37,7 +36,6 @@ apiVersion: v1
 kind: Pod
 metadata:
   name: tf-gpu-test-pod
-  namespace: default
 spec:
   restartPolicy: Never
   runtimeClassName: nvidia

package/manifests/envoy-service-nodeport.yaml

@@ -4,7 +4,6 @@ metadata:
   labels:
     app: envoy
   name: envoy
-  namespace: projectcontour
 spec:
   externalTrafficPolicy: Cluster
   ports:

package/manifests/kubeadm-calico-config.yaml

@@ -1,119 +1,14 @@
-# This consolidated YAML file contains configurations for:
-# 1. Calico Installation (Installation and APIServer resources)
-# 2. A permissive Egress NetworkPolicy for the 'default' namespace
-#
-# These are standard Kubernetes resources that can be applied directly using 'kubectl apply'.
-# The kubeadm-specific ClusterConfiguration and InitConfiguration have been removed
-# as they are only processed by the 'kubeadm init' command, not 'kubectl apply'.
-
-# --- Calico Installation: Base configuration for Calico ---
-# For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.Installation
-apiVersion: operator.tigera.io/v1
-kind: Installation
+apiVersion: crd.projectcalico.org/v1
+kind: GlobalNetworkPolicy
 metadata:
-  name: default
+  name: allow-all-egress-cluster
 spec:
-  # Configures Calico networking.
-  calicoNetwork:
-    # Note: The ipPools section cannot be modified post-install.
-    ipPools:
-      - blockSize: 26
-        cidr: 192.168.0.0/16
-        encapsulation: VXLANCrossSubnet
-        natOutgoing: Enabled
-        nodeSelector: all()
-
----
-# This section configures the Calico API server.
-# For more information, see: https://projectcalico.docs.tigera.io/master/reference/installation/api#operator.tigera.io/v1.APIServer
-apiVersion: operator.tigera.io/v1
-kind: APIServer
-metadata:
-  name: default
-spec: {}
-
----
-# This consolidated NetworkPolicy file ensures that all pods in the specified namespaces
-# have unrestricted egress (outbound) access.
-# This is useful for troubleshooting or for environments where strict egress control
-# is not immediately required for these system/default namespaces.
-
----
-# Policy for the 'default' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-default-namespace
-  namespace: default # This policy applies to the 'default' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
-    - Egress
-  egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
-
----
-# Policy for the 'kube-system' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-kube-system-namespace
-  namespace: kube-system # This policy applies to the 'kube-system' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
-    - Egress
-  egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
-
----
-# Policy for the 'kube-node-lease' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-kube-node-lease-namespace
-  namespace: kube-node-lease # This policy applies to the 'kube-node-lease' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
-    - Egress
-  egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
-
----
-# Policy for the 'kube-public' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-kube-public-namespace
-  namespace: kube-public # This policy applies to the 'kube-public' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
-    - Egress
-  egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
-
----
-# Policy for the 'tigera-operator' namespace
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: allow-all-egress-tigera-operator-namespace
-  namespace: tigera-operator # This policy applies to the 'tigera-operator' namespace
-spec:
-  podSelector: {} # Selects all pods in this namespace
-  policyTypes:
+  selector: all()
+  order: 1000
+  types:
     - Egress
   egress:
-    - to:
-        - ipBlock:
-            cidr: 0.0.0.0/0 # Allows traffic to any IPv4 address
+    - action: Allow
+      destination:
+        nets:
+          - 0.0.0.0/0

package/manifests/letsencrypt-prod.yaml

@@ -2,7 +2,6 @@ apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
   name: letsencrypt-prod
-  namespace: cert-manager
 spec:
   acme:
     email: development@underpost.net

package/manifests/mariadb/statefulset.yaml

@@ -49,7 +49,7 @@ spec:
     - metadata:
         name: mariadb-storage
       spec:
-        accessModes: ["ReadWriteOnce"]
+        accessModes: ['ReadWriteOnce']
         storageClassName: mariadb-storage-class
         resources:
           requests: