Method stamp

internal/fluxshardoperator/controller.go:314–330

stamp records the assignment on the tenant namespace and relabels every HelmRelease of the tenant that does not carry it yet. Patches the namespace first so the webhook hands out the new shard before the HRs settle.

(ctx context.Context, v *tenantView, target string)

// HelmRelease of the tenant that does not carry it yet. Patches the namespace
// first so the webhook hands out the new shard before the HRs settle.
func (r *PlacementReconciler) stamp(ctx context.Context, v *tenantView, target string) error {
	var errs []error
	if v.nsExists && v.nsLabel != target {
		if err := r.patchLabel(ctx, NamespaceGVK, "", v.info.Namespace, TenantShardLabel, target); err != nil {
			errs = append(errs, fmt.Errorf("namespace %s: %w", v.info.Namespace, err))
		}
	}
	for _, hr := range v.hrs {
		if hr.GetLabels()[ShardKeyLabel] == target {
			continue
		}
		if err := r.patchLabel(ctx, HelmReleaseGVK, hr.GetNamespace(), hr.GetName(), ShardKeyLabel, target); err != nil {
			errs = append(errs, fmt.Errorf("helmrelease %s/%s: %w", hr.GetNamespace(), hr.GetName(), err))
		}
	}
	return utilerrors.NewAggregate(errs)
}

// patchLabel merge-patches a single label on an object, touching nothing else.
func (r *PlacementReconciler) patchLabel(ctx context.Context, gvk schema.GroupVersionKind, namespace, name, label, value string) error {