Watch pods in specific namespace only.

Lukas Knuth · Lukas Knuth · commit e2f1ea45e114 · 2021-12-10T16:07:05.000+01:00
This allows tighter permissions inside the cluster.
diff --git a/k8s/watch.go b/k8s/watch.go
@@ -59,7 +59,8 @@ func AwaitTermination(pods []corev1.Pod, options *RequestOptions, timeout time.D
 }
 
 func makeInformer(options *RequestOptions) cache.SharedIndexInformer {
-	factory := informers.NewSharedInformerFactory(options.Clientset, time.Second)
+	opts := informers.WithNamespace(options.Namespace)
+	factory := informers.NewSharedInformerFactoryWithOptions(options.Clientset, time.Second, opts)
 	return factory.Core().V1().Pods().Informer()
 }
 

Original file line number	Diff line number	Diff line change
`@@ -59,7 +59,8 @@ func AwaitTermination(pods []corev1.Pod, options *RequestOptions, timeout time.D`
`59`	`59`	`}`
`60`	`60`
`61`	`61`	`func makeInformer(options *RequestOptions) cache.SharedIndexInformer {`
`62`		`- factory := informers.NewSharedInformerFactory(options.Clientset, time.Second)`
	`62`	`+ opts := informers.WithNamespace(options.Namespace)`
	`63`	`+ factory := informers.NewSharedInformerFactoryWithOptions(options.Clientset, time.Second, opts)`
`63`	`64`	`return factory.Core().V1().Pods().Informer()`
`64`	`65`	`}`
`65`	`66`