add nginx resources

namespace/templates/clusterrole.yaml

@@ -0,0 +1,12 @@
+# kind: ClusterRole
+# apiVersion: rbac.authorization.k8s.io/v1
+# metadata:
+#   name: user-readonly
+# rules:
+# - apiGroups:
+#     - rbac.authorization.k8s.io
+#   resources: 
+#     - clusterroles
+#   verbs: 
+#     - list
+#     - watch

namespace/templates/resourcequota.yaml

@@ -1,11 +1,11 @@
-apiVersion: v1
-kind: ResourceQuota
-metadata:
-  name: default
-  namespace: {{ .Release.Name }}
-spec:
-  hard:
-    requests.cpu: "6"
-    requests.memory: "6Gi"
-    limits.cpu: "12"
-    limits.memory: "12Gi"
+# apiVersion: v1
+# kind: ResourceQuota
+# metadata:
+#   name: default
+#   namespace: {{ .Release.Name }}
+# spec:
+#   hard:
+#     requests.cpu: "6"
+#     requests.memory: "6Gi"
+#     limits.cpu: "24"
+#     limits.memory: "20Gi"

namespace/templates/role.yaml

@@ -15,6 +15,7 @@ rules:
     - rbac.authorization.k8s.io
     - metrics.k8s.io
     - policy
+    - cert-manager.io
   resources: 
     - deployments
     - replicasets
@@ -39,12 +40,16 @@ rules:
     - middlewares
     - endpoints
     - deployments/scale
+    - poddisruptionbudgets
+    - certificates
+    - roles
   verbs: 
     - "*"
 - apiGroups:
     - ""
     - metrics.k8s.io
     - rbac.authorization.k8s.io
+    - policy
   resources:
     - resourcequotas
     - roles
@@ -94,6 +99,7 @@ rules:
     - resourcequotas
     - roles
     - endpoints
+    - clusterroles
   verbs: 
     - list
     - watch

namespace/templates/rolebinding.yaml

@@ -11,3 +11,16 @@ roleRef:
   kind: Role
   name: namespace-manager
   apiGroup: ""
+# ---
+# kind: ClusterRoleBinding
+# apiVersion: rbac.authorization.k8s.io/v1
+# metadata:
+#   name: user-readonly
+# subjects:
+# - kind: User
+#   name: {{ .Values.user }}
+#   apiGroup: ""
+# roleRef:
+#   kind: ClusterRole
+#   name: user-readonly
+#   apiGroup: ""