DO-1628_Add_test_namespace_messenger (!22)

Add test namespace/netpolicy/rbac

Co-authored-by: Denis Patrakeev <denis.patrakeev@avroid.team>
Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/22
Reviewed-by: Rustam Tagaev <rustam.tagaev@avroid.team>
This commit is contained in:
Dmitrij Prokov
2025-02-21 12:27:06 +03:00
parent 99c5cce4d2
commit 8e718ef1e2
8 changed files with 172 additions and 0 deletions

View File

@@ -0,0 +1,56 @@
---
apiVersion: v1
kind: Namespace
metadata:
name: tavro-cloud-test
labels:
name: tavro-cloud-test
app.kubernetes.io/managed-by: manual
annotations:
scheduler.alpha.kubernetes.io/node-selector: "nodetype=worker"
---
apiVersion: v1
kind: ResourceQuota
metadata:
name: tavro-cloud-test
namespace: tavro-cloud-test
labels:
app.kubernetes.io/managed-by: manual
spec:
hard:
configmaps: "20"
limits.cpu: "5"
limits.memory: 5Gi
persistentvolumeclaims: "1"
pods: "10"
requests.cpu: "5"
requests.memory: "5Gi"
requests.storage: "2Gi"
resourcequotas: "1"
secrets: "10"
services: "10"
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: tavro-cloud-test-common
namespace: tavro-cloud-test
spec:
podSelector: {}
policyTypes:
- Ingress
- Egress
ingress: []
egress:
- to:
- ipBlock:
# vault.avroid.tech
cidr: 10.2.16.2/32
ports:
- port: 443
protocol: TCP
- ports:
- port: 53
protocol: TCP
- port: 53
protocol: UDP