From e295d1ad61581cdba15607304e8e428bc1145420 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sebastian=20Untersch=C3=BCtz?= <sebastian@unterschutz.de>
Date: Wed, 22 Apr 2026 11:53:24 +0200
Subject: [PATCH] replace namespace placeholders across all manifests and
 update CiliumNetworkPolicy

---
 .github/workflows/deploy.yaml | 6 ++++--
 k8s/cilium-netpol.yaml        | 2 +-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index e1abe12..a0c7d03 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -164,10 +164,12 @@ jobs:
           # Namespace erstellen (falls nicht existiert)
           kubectl create namespace ${{ env.TARGET_NS }} --dry-run=client -o yaml | kubectl apply -f -
 
-          # Ingress und App-Manifest anpassen
+          # Platzhalter in allen K8s-Manifesten ersetzen
           sed -i "s|\${APP_URL}|${{ env.APP_URL }}|g" k8s/ingress.yaml
-          sed -i "s|\${TARGET_NS}|${{ env.TARGET_NS }}|g" k8s/ingress.yaml
           sed -i "s|\${IMAGE_NAME}|${{ env.DEPLOY_IMAGE }}|g" k8s/app.yaml
+          
+          # TARGET_NS überall ersetzen (z.B. für Middlewares oder explizite Namespaces)
+          find k8s/ -name "*.yaml" -exec sed -i "s|\${TARGET_NS}|${{ env.TARGET_NS }}|g" {} +
 
           # Admin-Credentials Secret anlegen/aktualisieren (aus Gitea Secret)
           kubectl create secret generic admin-credentials \
diff --git a/k8s/cilium-netpol.yaml b/k8s/cilium-netpol.yaml
index d63be61..555368d 100644
--- a/k8s/cilium-netpol.yaml
+++ b/k8s/cilium-netpol.yaml
@@ -3,7 +3,7 @@ apiVersion: cilium.io/v2
 kind: CiliumNetworkPolicy
 metadata:
   name: default-deny-all
-  namespace: escapefromteacher
+  namespace: ${TARGET_NS}
 spec:
   endpointSelector: {}
   ingress: