Resources-Shield

This Operator protects namespaces in your cluster, and protect its own resources as well

How it works

to start the test run this script:

./bootstrap.sh

How to protect your own namespaces

• Edit this ConfigMap in mainfests/cm.yaml

  apiVersion: v1
  kind: ConfigMap
  metadata:
      name: resources-shield-cm
      namespace: resources-shield
  data:
      protected-resources-shield-list.yaml: |
          protectedNamespaces:
              - kube-system
              - default
              - my-important-namespace
              - kyverno
              - flux-system
              - crossplane-system
              - castai-system
              - karpenter
              - cert-manager
              - calico
              # add your own namespaces

• Apply your changes and it will automatically upate the operator memory with the new namespaces:

  kubectl apply -f mainfests/cm.yaml

How to delete a protected namespace

• edit the configMap and delete the namespace you want to stop protecting

kubectl edit cm/resources-shield-cm -n resources-shield

What's next?

• does fluxCD will keep them exists? or do I need a specific controller for this operator?