26 lines
759 B
Plaintext
26 lines
759 B
Plaintext
|
# Kubernetes Namespace with Resource Quotas and Network Policies
|
||
|
|
# Supports 4 deployment modes: solo, multiuser, cicd, enterprise
|
||
|
|
# Includes RBAC setup, resource limits, and network isolation
|
||
|
|
#
|
||
|
|
# Usage:
|
||
|
|
# nickel eval --format json namespace.yaml.ncl | yq -P > namespace.yaml
|
||
|
|
# kubectl apply -f namespace.yaml
|
||
|
|
|
||
|
|
{
|
||
|
|
apiVersion = "v1",
|
||
|
|
kind = "Namespace",
|
||
|
|
metadata = {
|
||
|
|
name = "provisioning",
|
||
|
|
labels = {
|
||
|
|
name = "provisioning",
|
||
|
|
component = "provisioning-platform",
|
||
|
|
"pod-security.kubernetes.io/enforce" = "baseline",
|
||
|
|
"pod-security.kubernetes.io/audit" = "baseline",
|
||
|
|
"pod-security.kubernetes.io/warn" = "baseline",
|
||
|
|
},
|
||
|
|
annotations = {
|
||
|
|
description = "Provisioning platform services namespace",
|
||
|
|
},
|
||
|
|
},
|
||
|
|
}
|