fix: nearly working

Author: shepherdjerred

cdk8s/src/apps/1password.ts

@@ -3,6 +3,8 @@ import { Application } from "../../imports/argoproj.io.ts";
 import versions from "../versions.ts";
 
 export function createOnePasswordApp(chart: Chart) {
+  // TODO: create the 1password secrets here
+
   new Application(chart, "1password-app", {
     metadata: {
       name: "1password",

cdk8s/src/charts/apps.ts

@@ -27,9 +27,30 @@ export function createAppsChart(app: App) {
 
   createStorageClasses(chart);
 
-  new Namespace(chart, `torvals-namespace`, {
+  new Namespace(chart, `openebs-namespace`, {
+    metadata: {
+      name: `openebs`,
+      labels: {
+        "pod-security.kubernetes.io/enforce": "privileged",
+      },
+    },
+  });
+
+  new Namespace(chart, `maintenance-namespace`, {
+    metadata: {
+      name: `maintenance`,
+      labels: {
+        "pod-security.kubernetes.io/audit": "restricted",
+      },
+    },
+  });
+
+  new Namespace(chart, `torvalds-namespace`, {
     metadata: {
       name: `torvalds`,
+      labels: {
+        "pod-security.kubernetes.io/enforce": "privileged",
+      },
     },
   });
 

cdk8s/src/charts/torvalds.ts

@@ -27,13 +27,13 @@ export function createTorvaldsChart(app: App) {
   });
 
   const tvVolume = new ZfsHddVolume(chart, "plex-tv-hdd-pvc", {
-    storage: Size.tebibytes(8),
+    storage: Size.tebibytes(2),
   });
   const downloadsVolume = new ZfsHddVolume(chart, "qbittorrent-hdd-pvc", {
     storage: Size.tebibytes(1),
   });
   const moviesVolume = new ZfsHddVolume(chart, "plex-movies-hdd-pvc", {
-    storage: Size.tebibytes(8),
+    storage: Size.tebibytes(2),
   });
 
   // TODO: create one namespace/argocd app per service

cdk8s/src/storageclasses.ts

@@ -15,7 +15,8 @@ export function createStorageClasses(chart: Chart) {
     allowVolumeExpansion: true,
     reclaimPolicy: "Retain",
     parameters: {
-      "csi.storage.k8s.io/fstype": "zfs",
+      fstype: "zfs",
+      // "csi.storage.k8s.io/fstype": "zfs",
       poolname: "zfspv-pool-nvme",
       compression: "off",
       dedup: "off",
@@ -31,7 +32,8 @@ export function createStorageClasses(chart: Chart) {
     allowVolumeExpansion: true,
     reclaimPolicy: "Retain",
     parameters: {
-      "csi.storage.k8s.io/fstype": "zfs",
+      fstype: "zfs",
+      // "csi.storage.k8s.io/fstype": "zfs",
       poolname: "zfspv-pool-hdd",
       compression: "off",
       dedup: "off",