From 81e01ec1c49eaed52813ec0f60f3f85de1baa095 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Thu, 11 Jun 2026 14:42:53 +0000 Subject: [PATCH] tripit: label namespace as chrome-service CDP client The fare scrape's first E2E test was blocked by chrome-service-ws-ingress (9222 admits only namespaces labeled chrome-service.viktorbarzin.me/client=true). Label the tripit namespace per that policy's opt-in design so the planning workspace's live fare fetches reach the shared browser. Co-Authored-By: Claude Opus 4.8 --- stacks/tripit/main.tf | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/stacks/tripit/main.tf b/stacks/tripit/main.tf index 49ae3037..509a4eb3 100644 --- a/stacks/tripit/main.tf +++ b/stacks/tripit/main.tf @@ -99,6 +99,10 @@ resource "kubernetes_namespace" "tripit" { "istio-injection" = "disabled" # Opt into Keel auto-update (inject-keel-annotations ClusterPolicy). "keel.sh/enrolled" = "true" + # Admit this namespace through chrome-service's CDP NetworkPolicy + # (chrome-service-ws-ingress) — the fare scrape (#18) drives the + # shared browser on :9222. + "chrome-service.viktorbarzin.me/client" = "true" } } lifecycle {