unbounded

const (
	// LegacyKubeNamespace is where machina, metalman, and storage ran before
	// the consolidation onto SystemNamespace().
	LegacyKubeNamespace = "unbounded-kube"

	// LegacyNetNamespace is where unbounded-net ran before the consolidation.
	LegacyNetNamespace = "unbounded-net"
)

const DefaultSystemNamespace = "unbounded-system"

DefaultSystemNamespace is the namespace baked into the rendered manifests at build time and the default install namespace for unbounded components. It is the build-time literal that manifest namespace references carry (`{{ default "unbounded-system" .Namespace }}`), so tooling that retargets a manifest to a custom namespace must use this constant as the rewrite source, NOT SystemNamespace() (which reflects the caller's own POD_NAMESPACE and would leave build-time references unrewritten). The Makefile UNBOUNDED_NAMESPACE variable and the manifest template defaults must agree with this value; that invariant is enforced by the drift-guard test in this package.

const ReservedPrefix = "unbounded-cloud.io/"

ReservedPrefix marks the labels and annotations the operator owns on the objects it manages. They carry config hashes, Site scoping and override visibility, so a user patch may not write them and a change to one is drift the operator must repair.

It lives here rather than beside the override allowlist because both the allowlist and the workload watch predicates need it, and the override package already depends on the component package that holds those predicates.