[terraform] Allow non-default namespace

NEXT_RELEASE_NOTES.md

@@ -64,6 +64,8 @@ The release notes should contain at least the following sections:
 * [helm] The database schema versions can now be set with `dss.schemaManager.desiredRidDbVersion`, `dss.schemaManager.desiredScdDbVersion` and `dss.schemaManager.desiredAuxDbVersion`. When empty (default), the latest version for the datastore is used, as before.
 * [terraform] `desired_rid_db_version`, `desired_scd_db_version` and `desired_aux_db_version` are now also passed to Helm. Review your `terraform.tfvars` carefully before applying.
 * [helm] All the resources of the chart are now deployed in the namespace of the release (`helm install --namespace`) instead of always in `default`. Releases installed in the `default` namespace (the default value) are not affected.
+* [terraform] `kubernetes_namespace` now accepts namespaces other than `default`.
+* [tanka] The subject of the `cockroachdb` ClusterRoleBinding now uses the namespace of the deployment instead of `default`.
 * [helm] The logging of full HTTP requests and responses can now be disabled with `dss.conf.dumpRequests: false`. The default stays `true`.
 * [terraform] New variable `dump_requests` (default `false`), passed to Helm and Tanka: Helm deployments made with Terraform no longer log full HTTP requests and responses by default, as Tanka deployments made with Terraform.
 * [helm] When `dss.conf.enableScd` is `false`, the SCD schema manager job and the SCD evict CronJob are no longer deployed, and the core-service no longer waits for the SCD schema.

deploy/infrastructure/dependencies/terraform-commons-dss/variables.gen.tf

@@ -511,18 +511,12 @@ variable "crdb_external_nodes" {
 variable "kubernetes_namespace" {
   type        = string
   description = <<-EOT
-  Namespace where to deploy Kubernetes resources. Only default is supported at the moment.
+  Namespace where to deploy Kubernetes resources.
 
   Example: `default`
   EOT
 
   default = "default"
-
-  # TODO: Adapt current deployment scripts in /build/deploy to support default is supported for the moment.
-  validation {
-    condition     = var.kubernetes_namespace == "default"
-    error_message = "Only default namespace is supported at the moment"
-  }
 }
 
 variable "yugabyte_cloud" {

deploy/infrastructure/modules/terraform-aws-dss/TFVARS.gen.md

@@ -410,7 +410,7 @@ For docker hub private repository, use <code>docker.io</code> as <code>DOCKER_RE
 <br/>Default value: <code>""</code></td>
             </tr><tr>
                 <td>kubernetes_namespace (<code>string</code>)</td>
-                <td><p>Namespace where to deploy Kubernetes resources. Only default is supported at the moment.</p>
+                <td><p>Namespace where to deploy Kubernetes resources.</p>
 <p>Example: <code>default</code></p>
 <br/>Default value: <code>"default"</code></td>
             </tr><tr>

deploy/infrastructure/modules/terraform-aws-dss/variables.gen.tf

@@ -683,18 +683,12 @@ variable "crdb_external_nodes" {
 variable "kubernetes_namespace" {
   type        = string
   description = <<-EOT
-  Namespace where to deploy Kubernetes resources. Only default is supported at the moment.
+  Namespace where to deploy Kubernetes resources.
 
   Example: `default`
   EOT
 
   default = "default"
-
-  # TODO: Adapt current deployment scripts in /build/deploy to support default is supported for the moment.
-  validation {
-    condition     = var.kubernetes_namespace == "default"
-    error_message = "Only default namespace is supported at the moment"
-  }
 }
 
 variable "yugabyte_cloud" {

deploy/infrastructure/modules/terraform-google-dss/TFVARS.gen.md

@@ -381,7 +381,7 @@ For docker hub private repository, use <code>docker.io</code> as <code>DOCKER_RE
 <br/>Default value: <code>""</code></td>
             </tr><tr>
                 <td>kubernetes_namespace (<code>string</code>)</td>
-                <td><p>Namespace where to deploy Kubernetes resources. Only default is supported at the moment.</p>
+                <td><p>Namespace where to deploy Kubernetes resources.</p>
 <p>Example: <code>default</code></p>
 <br/>Default value: <code>"default"</code></td>
             </tr><tr>

deploy/infrastructure/modules/terraform-google-dss/variables.gen.tf

@@ -627,18 +627,12 @@ variable "crdb_external_nodes" {
 variable "kubernetes_namespace" {
   type        = string
   description = <<-EOT
-  Namespace where to deploy Kubernetes resources. Only default is supported at the moment.
+  Namespace where to deploy Kubernetes resources.
 
   Example: `default`
   EOT
 
   default = "default"
-
-  # TODO: Adapt current deployment scripts in /build/deploy to support default is supported for the moment.
-  validation {
-    condition     = var.kubernetes_namespace == "default"
-    error_message = "Only default namespace is supported at the moment"
-  }
 }
 
 variable "yugabyte_cloud" {

deploy/infrastructure/utils/definitions/kubernetes_namespace.tf

@@ -1,16 +1,10 @@
 variable "kubernetes_namespace" {
   type        = string
   description = <<-EOT
-  Namespace where to deploy Kubernetes resources. Only default is supported at the moment.
+  Namespace where to deploy Kubernetes resources.
 
   Example: `default`
   EOT
 
   default = "default"
-
-  # TODO: Adapt current deployment scripts in /build/deploy to support default is supported for the moment.
-  validation {
-    condition     = var.kubernetes_namespace == "default"
-    error_message = "Only default namespace is supported at the moment"
-  }
 }

deploy/operations/ci/aws-1/variables.gen.tf

@@ -683,18 +683,12 @@ variable "crdb_external_nodes" {
 variable "kubernetes_namespace" {
   type        = string
   description = <<-EOT
-  Namespace where to deploy Kubernetes resources. Only default is supported at the moment.
+  Namespace where to deploy Kubernetes resources.
 
   Example: `default`
   EOT
 
   default = "default"
-
-  # TODO: Adapt current deployment scripts in /build/deploy to support default is supported for the moment.
-  validation {
-    condition     = var.kubernetes_namespace == "default"
-    error_message = "Only default namespace is supported at the moment"
-  }
 }
 
 variable "yugabyte_cloud" {