feature: install lws controller in llmaz-system namespace

Signed-off-by: googs1025 <[email protected]>

Author: googs1025

chart/templates/lws/leaderworkerset.yaml

@@ -1,4 +1,5 @@
 {{- if .Values.leaderWorkerSet.enable -}}
+{{- if not .Values.leaderWorkerSet.deployInSharedNamespace }}
 apiVersion: v1
 kind: Namespace
 metadata:
@@ -11,6 +12,7 @@ metadata:
     app.kubernetes.io/part-of: lws
     control-plane: controller-manager
   name: lws-system
+{{- end }}
 ---
 apiVersion: apiextensions.k8s.io/v1
 kind: CustomResourceDefinition
@@ -25,7 +27,7 @@ spec:
       clientConfig:
         service:
           name: lws-webhook-service
-          namespace: lws-system
+          namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
           path: /convert
       conversionReviewVersions:
       - v1
@@ -16327,7 +16329,7 @@ metadata:
     app.kubernetes.io/name: serviceaccount
     app.kubernetes.io/part-of: lws
   name: lws-controller-manager
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
@@ -16340,7 +16342,7 @@ metadata:
     app.kubernetes.io/name: role
     app.kubernetes.io/part-of: lws
   name: lws-leader-election-role
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 rules:
 - apiGroups:
   - ""
@@ -16545,15 +16547,15 @@ metadata:
     app.kubernetes.io/name: rolebinding
     app.kubernetes.io/part-of: lws
   name: lws-leader-election-rolebinding
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: Role
   name: lws-leader-election-role
 subjects:
 - kind: ServiceAccount
   name: lws-controller-manager
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -16573,7 +16575,7 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: lws-controller-manager
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -16586,7 +16588,7 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: lws-controller-manager
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -16605,13 +16607,13 @@ roleRef:
 subjects:
 - kind: ServiceAccount
   name: lws-controller-manager
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 ---
 apiVersion: v1
 kind: Secret
 metadata:
   name: lws-webhook-server-cert
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 ---
 apiVersion: v1
 kind: Service
@@ -16621,7 +16623,7 @@ metadata:
     app.kubernetes.io/name: lws
     control-plane: controller-manager
   name: lws-controller-manager-metrics-service
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 spec:
   ports:
   - name: https
@@ -16642,7 +16644,7 @@ metadata:
     app.kubernetes.io/name: service
     app.kubernetes.io/part-of: lws
   name: lws-webhook-service
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 spec:
   ports:
   - port: 443
@@ -16663,7 +16665,7 @@ metadata:
     app.kubernetes.io/part-of: lws
     control-plane: controller-manager
   name: lws-controller-manager
-  namespace: lws-system
+  namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
 spec:
   replicas: 2
   selector:
@@ -16732,7 +16734,7 @@ webhooks:
   clientConfig:
     service:
       name: lws-webhook-service
-      namespace: lws-system
+      namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
       path: /mutate-leaderworkerset-x-k8s-io-v1-leaderworkerset
   failurePolicy: Fail
   name: mleaderworkerset.kb.io
@@ -16752,7 +16754,7 @@ webhooks:
   clientConfig:
     service:
       name: lws-webhook-service
-      namespace: lws-system
+      namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
       path: /mutate--v1-pod
   failurePolicy: Fail
   name: mpod.kb.io
@@ -16782,7 +16784,7 @@ webhooks:
   clientConfig:
     service:
       name: lws-webhook-service
-      namespace: lws-system
+      namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
       path: /validate-leaderworkerset-x-k8s-io-v1-leaderworkerset
   failurePolicy: Fail
   name: vleaderworkerset.kb.io
@@ -16802,7 +16804,7 @@ webhooks:
   clientConfig:
     service:
       name: lws-webhook-service
-      namespace: lws-system
+      namespace: {{ if .Values.leaderWorkerSet.deployInSharedNamespace }}llmaz-system{{ else }}lws-system{{ end }}
       path: /validate--v1-pod
   failurePolicy: Fail
   name: vpod.kb.io

chart/values.global.yaml

@@ -25,6 +25,7 @@ backendRuntime:
 
 leaderWorkerSet:
   enable: true
+  deployInSharedNamespace: false
 
 prometheus:
   # Prometheus is required to enable smart routing.