diff --git a/docs-portal-governance/kustomization.yaml b/docs-portal-governance/kustomization.yaml
new file mode 100644
index 0000000..9dccd49
--- /dev/null
+++ b/docs-portal-governance/kustomization.yaml
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: docs-portal
+resources:
+  - resourcequota.yaml
+  - limitrange.yaml
+  - networkpolicy.yaml
diff --git a/docs-portal-governance/limitrange.yaml b/docs-portal-governance/limitrange.yaml
new file mode 100644
index 0000000..0c76479
--- /dev/null
+++ b/docs-portal-governance/limitrange.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: LimitRange
+metadata:
+  name: default-limits
+spec:
+  limits:
+  - default:
+      cpu: 200m
+      memory: 128Mi
+    defaultRequest:
+      cpu: 50m
+      memory: 64Mi
+    type: Container
diff --git a/docs-portal-governance/networkpolicy.yaml b/docs-portal-governance/networkpolicy.yaml
new file mode 100644
index 0000000..54a8f5b
--- /dev/null
+++ b/docs-portal-governance/networkpolicy.yaml
@@ -0,0 +1,16 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-traefik-ingress
+spec:
+  podSelector:
+    matchLabels:
+      app: docs-portal
+  policyTypes:
+  - Ingress
+  ingress:
+  - from:
+    - namespaceSelector: {}
+    ports:
+    - protocol: TCP
+      port: 80
diff --git a/docs-portal-governance/resourcequota.yaml b/docs-portal-governance/resourcequota.yaml
new file mode 100644
index 0000000..6a99660
--- /dev/null
+++ b/docs-portal-governance/resourcequota.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ResourceQuota
+metadata:
+  name: namespace-quota
+spec:
+  hard:
+    requests.cpu: 250m
+    requests.memory: 256Mi
+    limits.cpu: 500m
+    limits.memory: 512Mi
+    pods: "5"