From d8cbb3aa691e52eb1cfbb482de1867f5bf766c58 Mon Sep 17 00:00:00 2001 From: Cristian Felipe Cruz Buitron Date: Thu, 13 Aug 2026 21:08:07 -0500 Subject: [PATCH] feat(docs-portal-governance): ResourceQuota/LimitRange/NetworkPolicy para docs-portal MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Mismo patrón que nginx-governance, dimensionado para un único pod nginx estático sirviendo el sitio MkDocs de docs-portal. --- docs-portal-governance/kustomization.yaml | 7 +++++++ docs-portal-governance/limitrange.yaml | 13 +++++++++++++ docs-portal-governance/networkpolicy.yaml | 16 ++++++++++++++++ docs-portal-governance/resourcequota.yaml | 11 +++++++++++ 4 files changed, 47 insertions(+) create mode 100644 docs-portal-governance/kustomization.yaml create mode 100644 docs-portal-governance/limitrange.yaml create mode 100644 docs-portal-governance/networkpolicy.yaml create mode 100644 docs-portal-governance/resourcequota.yaml diff --git a/docs-portal-governance/kustomization.yaml b/docs-portal-governance/kustomization.yaml new file mode 100644 index 0000000..9dccd49 --- /dev/null +++ b/docs-portal-governance/kustomization.yaml @@ -0,0 +1,7 @@ +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: docs-portal +resources: + - resourcequota.yaml + - limitrange.yaml + - networkpolicy.yaml diff --git a/docs-portal-governance/limitrange.yaml b/docs-portal-governance/limitrange.yaml new file mode 100644 index 0000000..0c76479 --- /dev/null +++ b/docs-portal-governance/limitrange.yaml @@ -0,0 +1,13 @@ +apiVersion: v1 +kind: LimitRange +metadata: + name: default-limits +spec: + limits: + - default: + cpu: 200m + memory: 128Mi + defaultRequest: + cpu: 50m + memory: 64Mi + type: Container diff --git a/docs-portal-governance/networkpolicy.yaml b/docs-portal-governance/networkpolicy.yaml new file mode 100644 index 0000000..54a8f5b --- /dev/null +++ b/docs-portal-governance/networkpolicy.yaml @@ -0,0 +1,16 @@ +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: allow-traefik-ingress +spec: + podSelector: + matchLabels: + app: docs-portal + policyTypes: + - Ingress + ingress: + - from: + - namespaceSelector: {} + ports: + - protocol: TCP + port: 80 diff --git a/docs-portal-governance/resourcequota.yaml b/docs-portal-governance/resourcequota.yaml new file mode 100644 index 0000000..6a99660 --- /dev/null +++ b/docs-portal-governance/resourcequota.yaml @@ -0,0 +1,11 @@ +apiVersion: v1 +kind: ResourceQuota +metadata: + name: namespace-quota +spec: + hard: + requests.cpu: 250m + requests.memory: 256Mi + limits.cpu: 500m + limits.memory: 512Mi + pods: "5" -- 2.54.0