prow: force namespace in deploy.sh

infra/gcp/terraform/k8s-infra-prow-build-trusted/deploy.sh

@@ -36,17 +36,27 @@ function deploy_cluster_terraform() {
 }
 
 function deploy_cluster_resources() {
+    pushd "${SCRIPT_ROOT}/${cluster}/resources"
+
     gcloud \
         container clusters get-credentials \
         --project="${project}" \
         --region="${region}" \
         "${cluster}"
 
-    kubectl \
-        --context="${context}" \
-        apply \
-          -f "${SCRIPT_ROOT}/${cluster}/resources" \
-          --recursive
+    kubectl --context="${context}" apply \
+        --filename ./*.yaml
+
+    find . -type d -mindepth 1 -maxdepth 1 | sed -e 's|^./||' \
+    | while read -r namespace; do
+        echo "deploying resources in namespace: ${namespace}"
+        kubectl --context="${context}" apply \
+            --namespace "${namespace}" \
+            --filename "${namespace}/" \
+            --recursive
+    done
+
+    popd
 }
 
 function main() {

infra/gcp/terraform/k8s-infra-prow-build/deploy.sh

@@ -36,17 +36,27 @@ function deploy_cluster_terraform() {
 }
 
 function deploy_cluster_resources() {
+    pushd "${SCRIPT_ROOT}/${cluster}/resources"
+
     gcloud \
         container clusters get-credentials \
         --project="${project}" \
         --region="${region}" \
         "${cluster}"
 
-    kubectl \
-        --context="${context}" \
-        apply \
-          -f "${SCRIPT_ROOT}/${cluster}/resources" \
-          --recursive
+    kubectl --context="${context}" apply \
+        --filename ./*.yaml
+
+    find . -type d -mindepth 1 -maxdepth 1 | sed -e 's|^./||' \
+    | while read -r namespace; do
+        echo "deploying resources in namespace: ${namespace}"
+        kubectl --context="${context}" apply \
+            --namespace "${namespace}" \
+            --filename "${namespace}/" \
+            --recursive
+    done
+
+    popd
 }
 
 function main() {

infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/k8s-infra-test-pods/build-serviceaccounts.yaml

@@ -0,0 +1,8 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  annotations:
+    iam.gke.io/gcp-service-account: prow-build@k8s-infra-prow-build.iam.gserviceaccount.com
+  name: prow-build
+  namespace: k8s-infra-test-pods

infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/k8s-infra-test-pods/cpu-limit-range_limitrange.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: LimitRange
+metadata:
+  name: cpu-limit-range
+  namespace: k8s-infra-test-pods
+spec:
+  limits:
+  - defaultRequest:
+      cpu: 250m
+    type: Container

infra/gcp/terraform/k8s-infra-prow-build/prow-build/resources/k8s-infra-test-pods/mem-limit-range_limitrange.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: LimitRange
+metadata:
+  name: mem-limit-range
+  namespace: k8s-infra-test-pods
+spec:
+  limits:
+  - defaultRequest:
+      memory: 1Gi
+    type: Container