diff --git a/headlamp-governance/allow-traefik-ingress.yaml b/headlamp-governance/allow-traefik-ingress.yaml deleted file mode 100644 index 0f9d680..0000000 --- a/headlamp-governance/allow-traefik-ingress.yaml +++ /dev/null @@ -1,22 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: allow-traefik-to-headlamp - namespace: headlamp -spec: - podSelector: - matchLabels: - k8s-app: headlamp - policyTypes: - - Ingress - ingress: - - from: - - namespaceSelector: - matchLabels: - kubernetes.io/metadata.name: kube-system - podSelector: - matchLabels: - app.kubernetes.io/name: traefik - ports: - - protocol: TCP - port: 4466 \ No newline at end of file diff --git a/headlamp-governance/kustomization.yaml b/headlamp-governance/kustomization.yaml deleted file mode 100644 index 5dbc1d7..0000000 --- a/headlamp-governance/kustomization.yaml +++ /dev/null @@ -1,9 +0,0 @@ -apiVersion: kustomize.config.k8s.io/v1beta1 -kind: Kustomization -namespace: headlamp -resources: - - allow-traefik-ingress.yaml - - resourcequota.yaml - - limitrange.yaml - - networkpolicy.yaml - - rbac.yaml \ No newline at end of file diff --git a/headlamp-governance/limitrange.yaml b/headlamp-governance/limitrange.yaml deleted file mode 100644 index 42b51ca..0000000 --- a/headlamp-governance/limitrange.yaml +++ /dev/null @@ -1,13 +0,0 @@ -apiVersion: v1 -kind: LimitRange -metadata: - name: headlamp-default-limits -spec: - limits: - - default: - cpu: 200m - memory: 256Mi - defaultRequest: - cpu: 50m - memory: 128Mi - type: Container \ No newline at end of file diff --git a/headlamp-governance/networkpolicy.yaml b/headlamp-governance/networkpolicy.yaml deleted file mode 100644 index 9e1209a..0000000 --- a/headlamp-governance/networkpolicy.yaml +++ /dev/null @@ -1,18 +0,0 @@ -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: allow-traefik-headlamp -spec: - podSelector: - matchLabels: - k8s-app: headlamp # Label oficial que usa el deployment de Headlamp - policyTypes: - - Ingress - ingress: - - from: - - namespaceSelector: {} - ports: - - protocol: TCP - port: 80 # Puerto estándar interno - - protocol: TCP - port: 3128 # Puerto alternativo que suele usar headlamp diff --git a/headlamp-governance/rbac.yaml b/headlamp-governance/rbac.yaml deleted file mode 100644 index d56c782..0000000 --- a/headlamp-governance/rbac.yaml +++ /dev/null @@ -1,27 +0,0 @@ -apiVersion: v1 -kind: ServiceAccount -metadata: - name: headlamp-admin - namespace: headlamp ---- -apiVersion: v1 -kind: Secret -metadata: - name: headlamp-admin - namespace: headlamp - annotations: - kubernetes.io/service-account.name: headlamp-admin -type: kubernetes.io/service-account-token ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: headlamp-admin-binding -subjects: -- kind: ServiceAccount - name: headlamp-admin - namespace: headlamp -roleRef: - kind: ClusterRole - name: cluster-admin - apiGroup: rbac.authorization.k8s.io \ No newline at end of file diff --git a/headlamp-governance/resourcequota.yaml b/headlamp-governance/resourcequota.yaml deleted file mode 100644 index 857a03f..0000000 --- a/headlamp-governance/resourcequota.yaml +++ /dev/null @@ -1,11 +0,0 @@ -apiVersion: v1 -kind: ResourceQuota -metadata: - name: headlamp-quota -spec: - hard: - requests.cpu: 500m - requests.memory: 512Mi - limits.cpu: "1" - limits.memory: 1Gi - pods: "5" \ No newline at end of file