From 978a5eda18ac488f2e0ec72ec0e02bd92b01220e Mon Sep 17 00:00:00 2001 From: Daniel Vystrcil Date: Fri, 17 Jul 2026 15:07:30 -0700 Subject: [PATCH] feat(ambient): enroll namespace + manifest validation check (homelab#481) Phase 1 of the ambient-everywhere epic. Namespace label = ztunnel captures all pods transparently. Adds the manifest-validation PR check. Co-Authored-By: Claude Fable 5 --- .github/workflows/validate.yaml | 8 ++++++++ k8s/namespace.yaml | 8 ++++++++ 2 files changed, 16 insertions(+) create mode 100644 .github/workflows/validate.yaml create mode 100644 k8s/namespace.yaml diff --git a/.github/workflows/validate.yaml b/.github/workflows/validate.yaml new file mode 100644 index 0000000..8dab305 --- /dev/null +++ b/.github/workflows/validate.yaml @@ -0,0 +1,8 @@ +name: validate +on: [pull_request] +jobs: + manifests: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v5 + - uses: dvystrcil/kustomize-validate-action@v1 diff --git a/k8s/namespace.yaml b/k8s/namespace.yaml new file mode 100644 index 0000000..ead705d --- /dev/null +++ b/k8s/namespace.yaml @@ -0,0 +1,8 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: sd-webui-rcom + labels: + # istio ambient enrollment (epic homelab#481) — ztunnel captures all + # pods transparently once the namespace carries this label. + istio.io/dataplane-mode: ambient