labels

Overview ¶

Package labels defines the label constants and helpers used by the Orkestra control plane to identify and protect its own Kubernetes resources.

The deletion-protection label marks resources (Deployments, Services, Secrets, webhook configurations) that the Orkestra admission webhook should refuse to delete when a delete request arrives. This prevents accidental teardown of the operator itself.

Usage:

import orklabels "github.com/orkspace/orkestra/pkg/labels"

// Apply deletion-protection on top of any existing label set:
labels := orklabels.WithDeletionProtection(kfg.OrkestraResourceLabels())

// Check the constant directly when building label selectors:
selector := metav1.LabelSelector{
    MatchLabels: map[string]string{orklabels.DeletionProtectionLabel: "true"},
}