DO-1628_Add_test_namespace_messenger (!22)

Add test namespace/netpolicy/rbac

Co-authored-by: Denis Patrakeev <denis.patrakeev@avroid.team>
Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/22
Reviewed-by: Rustam Tagaev <rustam.tagaev@avroid.team>

clusters/k8s-avroid-office.prod.local/namespaces/tavro-cloud-test/.rbac/ingress-certs-secret.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: avroid-tech-tls
+  namespace: tavro-cloud-test
+data:
+# base64 encoded cert see values in vault. Don't push it to git!
+  tls.crt: ""
+  tls.key: ""
+type: kubernetes.io/tls

clusters/k8s-avroid-office.prod.local/namespaces/tavro-cloud-test/.rbac/jenkins-deploy-tavro-cloud-test-role-binding.yaml

@@ -0,0 +1,15 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/managed-by: manual
+  name: jenkins-deploy-tavro-cloud-test
+  namespace: tavro-cloud-test
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: tavro-cloud-test-full
+subjects:
+  - kind: ServiceAccount
+    name: jenkins-deploy
+    namespace: jenkins-builds

clusters/k8s-avroid-office.prod.local/namespaces/tavro-cloud-test/.rbac/jenkins-harbor-secret.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  labels:
+    app.kubernetes.io/managed-by: manual
+  name: harbor-registry-secret
+  namespace: tavro-cloud-test
+type: kubernetes.io/dockerconfigjson
+data:
+  .dockerconfigjson: eyJhdXRocyI6eyJoYXJib3IuYXZyb2lkLnRlY2giOnsidXNlcm5hbWUiOiJyb2JvdCRjaSIsInBhc3N3b3JkIjoiSFJqOWlIQXh2VUl1eVRab2d1S1BkR21US082UjlkUnoiLCJhdXRoIjoiY205aWIzUWtZMms2U0ZKcU9XbElRWGgyVlVsMWVWUmFiMmQxUzFCa1IyMVVTMDgyVWpsa1Vubz0ifX19

clusters/k8s-avroid-office.prod.local/namespaces/tavro-cloud-test/.rbac/tavro-cloud-test-role.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: tavro-cloud-test-full
+  namespace: tavro-cloud-test
+  labels:
+    app.kubernetes.io/managed-by: manual
+rules:
+- apiGroups:
+  - '*'
+  resources:
+  - '*'
+  verbs:
+  - '*'

clusters/k8s-avroid-office.prod.local/namespaces/tavro-cloud-test/.rbac/vault-service-account.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/name: serviceaccount
+    app.kubernetes.io/instance: vault-sa
+    app.kubernetes.io/component: rbac
+    app.kubernetes.io/created-by: vault-operator
+    app.kubernetes.io/part-of: vault-operator
+    app.kubernetes.io/managed-by: kustomize
+  name: vault
+  namespace: tavro-cloud-test