[DO-1600] Move namespace prod to avroid-prod (!36)

[DO-1600]

Co-authored-by: denis.patrakeev <denis.patrakeev@avroid.tech>
Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/36
Reviewed-by: Vasiliy Chipizhin <vasiliy.chipizhin@avroid.team>
Reviewed-by: Rustam Tagaev <rustam.tagaev@avroid.team>

clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/diagrams-tools/mermaid/argocd-apps-mermaid-app.yaml

@@ -0,0 +1,44 @@
+---
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: mermaid
+  namespace: argocd
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  project: mermaid
+  destination:
+    server: https://kubernetes.default.svc
+    namespace: avroid-prod
+  sources:
+    - repoURL: https://git.avroid.tech/K8s/k8s-configs.git
+      targetRevision: master
+      path: clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/diagrams-tools/mermaid/kustomize
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true
+    syncOptions:
+      - ApplyOutOfSyncOnly=true
+      - CreateNamespace=true
+---
+apiVersion: argoproj.io/v1alpha1
+kind: AppProject
+metadata:
+  name: mermaid
+  namespace: argocd
+  # Finalizer that ensures that project is not deleted until it is not referenced by any application
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  sourceRepos:
+    - https://git.avroid.tech/K8s/k8s-configs.git
+  # Only permit applications to deploy to the guestbook namespace in the same cluster
+  destinations:
+    - namespace: avroid-prod
+      server: https://kubernetes.default.svc
+  # Deny all cluster-scoped resources from being created, except for Namespace
+  clusterResourceWhitelist:
+    - group: ''
+      kind: Namespace

clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/diagrams-tools/mermaid/argocd-apps-plantuml-network-policy.yaml

@@ -0,0 +1,19 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: mermaid-in
+  namespace: avroid-prod
+  labels:
+    app.kubernetes.io/managed-by: argocd
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: mermaid
+  policyTypes:
+    - Ingress
+  ingress:
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: ingress-nginx

clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/diagrams-tools/mermaid/kustomize/kustomization.yaml

@@ -0,0 +1,7 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - mermaid-deployment.yaml
+  - mermaid-service.yaml
+  - mermaid-ingress.yaml

clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/diagrams-tools/mermaid/kustomize/mermaid-deployment.yaml

@@ -0,0 +1,43 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mermaid
+  labels:
+    app.kubernetes.io/name: mermaid
+    app.kubernetes.io/instance: mermaid
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: mermaid
+      app.kubernetes.io/instance: mermaid
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: mermaid
+        app.kubernetes.io/instance: mermaid
+    spec:
+      containers:
+        - name: mermaid
+          image: harbor.avroid.tech/docker-hub-proxy/supinf/mermaid-editor:8.0
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 80
+              protocol: TCP
+          readinessProbe:
+            httpGet:
+              path: /
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 15
+          resources:
+            requests:
+              cpu: 50m
+              memory: 32Mi
+            limits:
+              cpu: 250m
+              memory: 128Mi
+      nodeSelector:
+        node-role.kubernetes.io/worker: ""

clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/diagrams-tools/mermaid/kustomize/mermaid-ingress.yaml

@@ -0,0 +1,21 @@
+---
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: mermaid
+  labels:
+    app.kubernetes.io/name: mermaid
+    app.kubernetes.io/instance: mermaid
+spec:
+  ingressClassName: nginx
+  rules:
+    - host: mermaid.avroid.tech
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: mermaid
+                port:
+                  name: http

clusters/k8s-avroid-office.prod.local/namespaces/avroid-prod/diagrams-tools/mermaid/kustomize/mermaid-service.yaml

@@ -0,0 +1,18 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: mermaid
+  labels:
+    app.kubernetes.io/name: mermaid
+    app.kubernetes.io/instance: mermaid
+spec:
+  type: ClusterIP
+  ports:
+    - name: http
+      protocol: TCP
+      port: 80
+      targetPort: 80
+  selector:
+    app.kubernetes.io/name: mermaid
+    app.kubernetes.io/instance: mermaid