bugfix: set labels to kubeconfig and cert secrets

loft-sh · Dec 11, 2024 · bdf3abb · bdf3abb
1 parent fa41bde
commit bdf3abb
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 0 deletions.
diff --git a/pkg/certs/ensure.go b/pkg/certs/ensure.go
@@ -22,6 +22,12 @@ import (
 	"k8s.io/klog/v2"
 )
 
+const (
+	CertSecretLabelAppKey     = "app"
+	CertSecretLabelAppValue   = "vcluster"
+	CertSecretLabelReleaseKey = "release"
+)
+
 func EnsureCerts(
 	ctx context.Context,
 	serviceCIDR string,
@@ -131,6 +137,10 @@ func EnsureCerts(
 			Name:            secretName,
 			Namespace:       currentNamespace,
 			OwnerReferences: ownerRef,
+			Labels: map[string]string{
+				CertSecretLabelAppKey:     CertSecretLabelAppValue,
+				CertSecretLabelReleaseKey: currentNamespace,
+			},
 		},
 		Data: map[string][]byte{},
 	}

diff --git a/pkg/util/kubeconfig/kubeconfig.go b/pkg/util/kubeconfig/kubeconfig.go
@@ -32,6 +32,9 @@ const (
 	CertificateSecretKey    = "client-certificate"
 	CertificateKeySecretKey = "client-key"
 	TokenSecretKey          = "token"
+	KubeConfigSecretLabelAppKey     = "app"
+	KubeConfigSecretLabelAppValue   = "vcluster"
+	KubeConfigSecretLabelReleaseKey = "release"
 )
 
 func WriteKubeConfig(ctx context.Context, currentNamespaceClient client.Client, secretName, secretNamespace string, config *clientcmdapi.Config, isRemote bool) error {
@@ -70,6 +73,10 @@ func WriteKubeConfig(ctx context.Context, currentNamespaceClient client.Client,
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      secretName,
 				Namespace: secretNamespace,
+				Labels: map[string]string{
+					KubeConfigSecretLabelAppKey:     KubeConfigSecretLabelAppValue,
+					KubeConfigSecretLabelReleaseKey: secretNamespace,
+				},
 			},
 		}
 		result, err := controllerutil.CreateOrPatch(ctx, currentNamespaceClient, kubeConfigSecret, func() error {