Protected namespaces

[Gallardot]

What problem does this PR solve?

#414

What is changed and how does it work?

Check List

Tests

• Unit test
• E2E test
• Manual test (add detailed scripts or steps below)
• No code

Code changes

• Has Go code change
• Has CI related scripts change
• Has Terraform scripts change

Side effects

• Breaking backward compatibility

Related changes

• Need to update the documentation

Does this PR introduce a user-facing change?:

NONE

[CLAassistant]

All committers have signed the CLA.

[codecov-commenter]

Codecov Report

Merging #661 into master will decrease coverage by 0.08%.
The diff coverage is 48.43%.

@@            Coverage Diff             @@
##           master     #661      +/-   ##
==========================================
- Coverage   55.78%   55.69%   -0.09%     
==========================================
  Files          68       67       -1     
  Lines        4383     4417      +34     
==========================================
+ Hits         2445     2460      +15     
- Misses       1768     1782      +14     
- Partials      170      175       +5     

Impacted Files	Coverage Δ
controllers/networkchaos/ipset/ipset.go	37.14% <0.00%> (ø)
pkg/store/experiment/experiment.go	32.20% <0.00%> (-6.58%)	⬇️
pkg/utils/chaosdaemon.go	51.21% <0.00%> (ø)
pkg/utils/grpc.go	0.00% <0.00%> (ø)
pkg/webhook/inject/inject.go	73.49% <0.00%> (-0.68%)	⬇️
controllers/twophase/types.go	54.20% <40.00%> (-1.68%)	⬇️
controllers/networkchaos/netem/types.go	47.27% <50.00%> (ø)
pkg/utils/selector.go	53.15% <66.66%> (+0.91%)	⬆️
controllers/podchaos/containerkill/types.go	64.38% <100.00%> (ø)
controllers/timechaos/types.go	61.44% <100.00%> (ø)
... and 1 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 699993e...f4ac05a. Read the comment docs.

[yeya24]

The code looks good. Just curious about the design, do we only need one regex instead of a list of regex?

[Gallardot]

The code looks good. Just curious about the design, do we only need one regex instead of a list of regex?

@yeya24 I think one regular expression is enough.

For example, you want chaos tasks to be performed on a namespace with either the DEV- prefix or the TEST- suffix. The allowedNamespaces can be set to TEST-\w+|\w+-DEV.

[fewdan]

LGTM

[Gallardot]

/merge

[zhouqiang-cl]

/merge

[ti-srebot]

/run-all-tests