Adding

2026-03-17 09:53:09 -05:00
parent cdcba54aa4
commit 1a0702a79a
590 changed files with 62058 additions and 0 deletions
@@ -0,0 +1,98 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: incentive-manager-api
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: incentive-manager-api
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: incentive-manager-api
+    spec:
+      containers:
+      - name: incentive-manager-api
+        image: incentive-manager-api
+        resources:
+          limits:
+            memory: "10Gi"
+          requests:
+            memory: "10Gi"
+            cpu: "40m"
+        ports:
+          - containerPort: 8080
+        livenessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 8080
+        readinessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 8080
+        volumeMounts:
+        - name: volume-lcu-internal-cert
+          mountPath: /etc/ssl/certs/lcu-internal-cert.pem
+          subPath: lcu-internal-cert.pem
+        - name: volume-appsettings
+          mountPath: /app/config/mapped-appsettings
+        - name: incentive-manager-api-secrets
+          mountPath: /vault/secrets/incentive-manager-api-mass-queue-password.json
+          subPath: incentive-manager-api-mass-queue-password
+          readOnly: true
+        - name: incentive-manager-api-secrets
+          mountPath: /vault/secrets/incentive-manager-api-mass-queue-username.json
+          subPath: incentive-manager-api-mass-queue-username
+          readOnly: true
+        - name: incentive-manager-api-secrets
+          mountPath: /vault/secrets/incentive-manager-api-dayforce-username.json
+          subPath: incentive-manager-api-dayforce-username
+          readOnly: true
+        - name: incentive-manager-api-secrets
+          mountPath: /vault/secrets/incentive-manager-api-dayforce-password.json
+          subPath: incentive-manager-api-dayforce-password
+          readOnly: true
+        - name: incentive-manager-api-secrets
+          mountPath: /vault/secrets/incentive-manager-api-seq-api-key.json
+          subPath: incentive-manager-api-seq-api-key
+          readOnly: true
+        - name: incentive-manager-api-secrets
+          mountPath: /vault/secrets/incentive-manager-api-db-connection.json
+          subPath: incentive-manager-api-db-connection
+          readOnly: true
+        - name: incentive-manager-api-secrets
+          mountPath: /vault/secrets/incentive-manager-api-azure-valid-audience.json
+          subPath: incentive-manager-api-azure-valid-audience
+          readOnly: true
+        - name: incentive-manager-api-secrets
+          mountPath: /vault/secrets/incentive-manager-api-azure-client-id.json
+          subPath: incentive-manager-api-azure-client-id
+          readOnly: true
+        - name: incentive-manager-api-secrets
+          mountPath: /vault/secrets/incentive-manager-api-azure-tenant-id.json
+          subPath: incentive-manager-api-azure-tenant-id
+          readOnly: true
+      volumes:
+      - name: incentive-manager-api-secrets
+        csi:
+          driver: secrets-store.csi.k8s.io
+          readOnly: true
+          volumeAttributes:
+            secretProviderClass: incentive-manager-api-csi-key-vault-secrets-provider
+      - name: volume-lcu-internal-cert
+        configMap:
+          name: configmap-lcu-internal-cert
+      - name: volume-appsettings
+        configMap:
+          name: incentivemanagerapi-configmap