poc: add ns

4T-24 · Jul 13, 2024 · 25eed12 · 25eed12
1 parent 02b4dbc
commit 25eed12
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/packages/server/src/k8s/const.js b/packages/server/src/k8s/const.js
@@ -6,3 +6,4 @@ export const LABEL_EGRESS = 'klodd.tjcsec.club/egress'
 export const LABEL_MANAGED_BY = 'app.kubernetes.io/managed-by'
 export const LABEL_MANAGED_BY_VALUE = 'klodd'
 export const ANNOTATION_TTL = 'klodd.tjcsec.club/ttl'
+export const ANNOTATION_NS = 'io.kubernetes.cri-o.userns-mode'
diff --git a/packages/server/src/k8s/manifest.js b/packages/server/src/k8s/manifest.js
@@ -3,6 +3,7 @@ import crypto from 'crypto'
 import config from '../config.js'
 import {
   ANNOTATION_TTL,
+  ANNOTATION_NS,
   LABEL_CHALLENGE,
   LABEL_EGRESS,
   LABEL_INSTANCE,
@@ -29,7 +30,7 @@ export const makeNamespaceManifest = ({ name, labels, timeout }) => ({
   metadata: {
     name,
     labels,
-    annotations: { [ANNOTATION_TTL]: timeout.toString() },
+    annotations: { [ANNOTATION_TTL]: timeout.toString(), [ANNOTATION_NS]: 'auto:size=65536' },
   },
 })
 
@@ -112,6 +113,9 @@ export const makeDeploymentFactory =
         [LABEL_POD]: name,
         ...commonLabels,
       },
+      annotations: {
+        [ANNOTATION_NS]: 'auto:size=65536',
+      },
     },
     spec: {
       replicas: 1,