Merge pull request 'feat(docs-portal-governance): ResourceQuota/LimitRange/NetworkPolicy para docs-portal' (#1) from fix/docs-portal-governance into main

Mismo patrón que nginx-governance, dimensionado para un único pod nginx
estático sirviendo el sitio MkDocs de docs-portal.

docs-portal-governance/kustomization.yaml

@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: docs-portal
+resources:
+  - resourcequota.yaml
+  - limitrange.yaml
+  - networkpolicy.yaml

docs-portal-governance/limitrange.yaml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: LimitRange
+metadata:
+  name: default-limits
+spec:
+  limits:
+  - default:
+      cpu: 200m
+      memory: 128Mi
+    defaultRequest:
+      cpu: 50m
+      memory: 64Mi
+    type: Container

docs-portal-governance/networkpolicy.yaml

@@ -0,0 +1,16 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: allow-traefik-ingress
+spec:
+  podSelector:
+    matchLabels:
+      app: docs-portal
+  policyTypes:
+  - Ingress
+  ingress:
+  - from:
+    - namespaceSelector: {}
+    ports:
+    - protocol: TCP
+      port: 80

docs-portal-governance/resourcequota.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: ResourceQuota
+metadata:
+  name: namespace-quota
+spec:
+  hard:
+    requests.cpu: 250m
+    requests.memory: 256Mi
+    limits.cpu: 500m
+    limits.memory: 512Mi
+    pods: "5"