[DO-1496] add limits and network-policy (!4)

схлопнул networkpolicy limits и namespace в один файл и назвал его так же как namespace

Co-authored-by: Rustam Tagaev <rustam.tagaev@avroid.tech>
Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/4
Reviewed-by: Denis Patrakeev <denis.patrakeev@avroid.team>
Co-authored-by: Rustam Tagaev <rustam.tagaev@avroid.team>
Co-committed-by: Rustam Tagaev <rustam.tagaev@avroid.team>
This commit is contained in:
Rustam Tagaev
2025-01-31 10:49:39 +03:00
committed by Denis Patrakeev
parent 7f14546f78
commit da6bf80454
17 changed files with 302 additions and 57 deletions

View File

@@ -1,10 +0,0 @@
---
apiVersion: v1
kind: Namespace
metadata:
name: vault-infra
labels:
name: vault-infra
app.kubernetes.io/managed-by: manual
annotations:
scheduler.alpha.kubernetes.io/node-selector: node-role.kubernetes.io/worker=

View File

@@ -0,0 +1,30 @@
---
apiVersion: v1
kind: Namespace
metadata:
name: vault-infra
labels:
name: vault-infra
app.kubernetes.io/managed-by: manual
annotations:
scheduler.alpha.kubernetes.io/node-selector: node-role.kubernetes.io/worker=
---
apiVersion: v1
kind: ResourceQuota
metadata:
name: vault-infra
namespace: vault-infra
labels:
app.kubernetes.io/managed-by: manual
spec:
hard:
configmaps: "10"
limits.cpu: "4"
limits.memory: 2Gi
persistentvolumeclaims: "1"
pods: "10"
requests.cpu: "3"
requests.memory: 1Gi
resourcequotas: "1"
secrets: "10"
services: "1"

View File

@@ -1 +1,9 @@
# helm upgrade -n vault-infra --install --wait vault-secrets-webhook oci://ghcr.io/bank-vaults/helm-charts/vault-secrets-webhook
# helm upgrade -n vault-infra -f values.yaml --install --wait vault-secrets-webhook oci://ghcr.io/bank-vaults/helm-charts/vault-secrets-webhook
resources:
limits:
cpu: 100m
memory: 50Mi
requests:
cpu: 50m
memory: 25Mi