k8s: add lifecycle ignore_changes for namespace metadata labels and annotations

k8s/k8s-namespace/README.md

@@ -1,6 +1,15 @@
 # k8s-namespace
 
 Create a namespace in kubernetes
+
+## Behavior
+
+This module includes lifecycle rules that ignore changes to metadata labels and annotations. This means that external tools (like Rancher) can modify labels and annotations without Terraform attempting to revert those changes.
+
+If you need to update labels or annotations through Terraform after the namespace is created, you have two options:
+1. Use `terraform apply -replace="kubernetes_namespace.ns"` to force recreation
+2. Temporarily comment out the lifecycle block, apply changes, then uncomment it
+
 <!-- BEGIN_TF_DOCS -->
 ## Requirements
 

k8s/k8s-namespace/namespace.tf

@@ -1,6 +1,14 @@
 resource "kubernetes_namespace" "ns" {
   metadata {
-    name   = var.name
-    labels = merge(local.interpolated_tags, var.labels)
+    name        = var.name
+    labels      = merge(local.interpolated_tags, var.labels)
+    annotations = var.annotations
+  }
+
+  lifecycle {
+    ignore_changes = [
+      metadata[0].labels,
+      metadata[0].annotations,
+    ]
   }
 }

k8s/k8s-namespace/variables.tf

@@ -17,7 +17,13 @@ variable "tags" {
 
 # module specific variables
 variable "labels" {
-  description = "Labels to add to the secret"
+  description = "Labels to add to the namespace"
+  type        = map(any)
+  default     = {}
+}
+
+variable "annotations" {
+  description = "Annotations to add to the namespace"
   type        = map(any)
   default     = {}
 }