Merge pull request #265 from openinfradev/policy-serving

policy: add a decapod app for policies

다른 것들과 충돌이 없으므로 임의 merge 하겠습니다.

Author: intelliguy

policy/base/kustomization.yaml

@@ -0,0 +1,5 @@
+resources:
+  - resources.yaml
+
+transformers:
+  - site-values.yaml

policy/base/resources.yaml

@@ -0,0 +1,37 @@
+---
+apiVersion: helm.fluxcd.io/v1
+kind: HelmRelease
+metadata:
+  labels:
+    name: opa-gatekeeper
+  name: opa-gatekeeper
+spec:
+  chart:
+    type: helmrepo
+    repository: https://harbor-cicd.taco-cat.xyz/chartrepo/tks
+    name: gatekeeper
+    version: 3.11.0
+    origin: https://open-policy-agent.github.io/gatekeeper/charts
+  helmVersion: v3
+  releaseName: opa-gatekeeper
+  targetNamespace: taco-system
+  values: 
+    enableDeleteOperations: true
+---
+apiVersion: helm.fluxcd.io/v1
+kind: HelmRelease
+metadata:
+  labels:
+    name: policy-resources
+  name: policy-resources
+spec:
+  chart:
+    type: helmrepo
+    repository: https://harbor-cicd.taco-cat.xyz/chartrepo/tks
+    name: policy-resources
+    version: 1.0.0
+    origin: https://openinfradev.github.io/helm-charts/policy-resources
+  helmVersion: v3
+  releaseName: policy-resources
+  targetNamespace: taco-system
+  values: {}

policy/base/site-values.yaml

@@ -0,0 +1,20 @@
+apiVersion: openinfradev.github.com/v1
+kind: HelmValuesTransformer
+metadata:
+  name: site
+
+global:
+  # Specify nodes to install workload
+  nodeSelector:
+    taco-lma: enabled
+  # Specify cluster name. It is useful in multi-cluster env.
+  clusterName: cluster.local
+  # Storageclass to install persistant
+  storageClassName: taco-storage
+
+charts:
+- name: opa-gatekeeper
+  override:
+    prometheusOperator.nodeSelector: $(nodeSelector)
+
+- name: policy-resources