Adding

2026-03-13 09:24:21 -05:00
parent c2d6bda458
commit 256f579489
282 changed files with 50136 additions and 0 deletions
@@ -0,0 +1,46 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: document-manager
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: document-manager
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: document-manager
+    spec:
+      volumes: []
+      containers:
+      - name: document-manager
+        image: document-manager
+        env: []
+        volumeMounts: []
+        resources:
+          requests:
+            cpu: 50m
+            memory: 512Mi
+          limits:
+            memory: 512Mi
+        ports:
+          - containerPort: 8080
+        livenessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 8080
+        readinessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 8080
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: document-manager
+spec:
+  selector:
+    app: document-manager
+  ports:
+  - port: 8080
+    targetPort: 8080
@@ -0,0 +1,9 @@
+resources:
+  - Deployment.yaml
+  - Service.yaml
+  - virtual-service.yaml
+  - secrets-provider-class.yaml
+
+images:
+- name: document-manager
+  newName: landmarkcu/lcu.api.internal.documentmanager-documentmanager
@@ -0,0 +1,11 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: document-manager-csi-key-vault-secrets-provider
+spec:
+  provider: azure
+  parameters:
+    usePodIdentity: "false"
+    useVMManagedIdentity: "true"
+    tenantId: 63cd1554-2783-4a86-ae50-b9e6c21c9499
@@ -0,0 +1,19 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: document-manager
+spec:
+  hosts: []
+  gateways:
+  - istio-system/ingress-gateway
+  http:
+  - name: document-manager
+    match:
+    - uri:
+        prefix: /
+    route:
+    - destination:
+        host: document-manager
+        port:
+          number: 8080
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,41 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: document-manager-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: historical-document-manager-csi-key-vault-secrets-provider
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-seq-api-key.json
+    readOnly: true
+    subPath: document-manager-seq-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-client-secret.json
+    readOnly: true
+    subPath: document-manager-client-secret
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-client-id.json
+    readOnly: true
+    subPath: document-manager-client-id
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-api-key.json
+    readOnly: true
+    subPath: document-manager-api-key
@@ -0,0 +1,20 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+      array: 
+        - | 
+          objectName: document-manager-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-client-secret
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-client-id
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-api-key
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,41 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: document-manager-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: normal-document-manager-csi-key-vault-secrets-provider
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-seq-api-key.json
+    readOnly: true
+    subPath: document-manager-seq-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-client-secret.json
+    readOnly: true
+    subPath: document-manager-client-secret
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-client-id.json
+    readOnly: true
+    subPath: document-manager-client-id
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-api-key.json
+    readOnly: true
+    subPath: document-manager-api-key
@@ -0,0 +1,20 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+      array: 
+        - | 
+          objectName: document-manager-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-client-secret
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-client-id
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-api-key
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://prd-document-ingestor-historical-api.apps.azure.lcu-internal.com",
+    "Scope": "api://2daa775f-3ad6-43e1-9d12-c4708f51d1cb/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://fileoperationsapi2.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://e13f2aea-c4f4-4b4d-8e63-8f160901f599/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://857d64c8-3342-4965-a4ae-17b77802eab4/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: historical-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://qa-document-ingestor-historical-api.apps.azure.lcu-internal.com",
+    "Scope": "api://27a3a812-7338-4c55-81ac-33c415e8b401/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://qa-fileoperationsapi2.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://f91af6f0-151b-4639-828d-939b8014cdda/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://e7c4a571-b574-4c9d-a8e5-187459140101/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: historical-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://uat-document-ingestor-historical-api.apps.azure.lcu-internal.com",
+    "Scope": "api://54798032-d762-4dc6-9ec3-dc4612b59007/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://uat-fileoperationsapi2.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://013f335a-147e-47e8-8cfd-39438be6e55a/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://58c64a44-c4bd-4f51-80ea-dd5c9c77d3f0/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: historical-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://prd-document-ingestor-api.apps.azure.lcu-internal.com",
+    "Scope": "api://2daa775f-3ad6-43e1-9d12-c4708f51d1cb/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://fileoperationsapi.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://e13f2aea-c4f4-4b4d-8e63-8f160901f599/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://857d64c8-3342-4965-a4ae-17b77802eab4/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://qa-document-ingestor-api.apps.azure.lcu-internal.com",
+    "Scope": "api://27a3a812-7338-4c55-81ac-33c415e8b401/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://qa-fileoperationsapi.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://f91af6f0-151b-4639-828d-939b8014cdda/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://e7c4a571-b574-4c9d-a8e5-187459140101/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://uat-document-ingestor-api.apps.azure.lcu-internal.com",
+    "Scope": "api://54798032-d762-4dc6-9ec3-dc4612b59007/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://uat-fileoperationsapi.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://013f335a-147e-47e8-8cfd-39438be6e55a/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://58c64a44-c4bd-4f51-80ea-dd5c9c77d3f0/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,93 @@
+{
+  "Primary": {
+    "seqUrl": "https://qa-seq.lcu-internal.com",
+    "AppBasePath": "document-manager/",
+    "CorsAllowedOrigins": [
+      "http://lcu-internal.com",
+      "https://lcu-internal.com",
+      "https://qa-api.lcu-internal.com"
+    ]
+  },
+  "AzureAd": {
+    "CallbackPath": "/document-manager/signin-oidc"
+  },
+  "DocumentIngestorApiConfiguration": {
+    "QueueReprocessDocumentAllCriticalFailuresTimeoutMinutes": 10,
+    "FilteredDocumentProcessingInfoEndpoint": "/DocumentProcessingInfo/GetFilteredDocumentProcessingInfo",
+    "QueueReprocessDocumentByIdEndpoint": "/DocumentReprocessing/QueueReprocessDocumentByDocumentProcessingInfoId/{documentProcessingInfoId}/{userName}",
+    "QueueReprocessDocumentWithOverrideByIdEndpoint": "/DocumentReprocessing/QueueOverrideDocumentByDocumentProcessingInfoId",
+    "QueueReprocessDocumentAllCriticalFailuresEndpoint": "/DocumentReprocessing/QueueReprocessAllCriticalFailures/{userName}"
+  },
+  "FileOperationsApiConfiguration": {
+    "GetPdfContentEndpoint": "/api/Pdf/GetPdfContent"
+  },
+  "CoreApiWrapperConfiguration": {
+    "Url": "https://qa-core-api-wrapper-api.apps.azure.lcu-internal.com/swagger/index.html",
+    "GetMemberByMemberNumberEndpoint": "/api/core/members/{memberNumber}",
+    "GetPersonEndpoint": "/api/core/Person/GetPerson/{personNumber}",
+    "GetPersonByNameEndpoint": "/api/core/Person/GetPerson",
+    "GetPersonByMemberAgreementNumber": "/api/core/Person/GetPersonByMemberAgreementNumber/{memberId}",
+    "GetOrganizationEndpoint": "/api/core/Organization/GetOrganization/{organizationNumber}",
+    "GetOwnersByAccountNumber": "/api/core/Account/GetOwnersByAccountNumber",
+    "GetPersonByPersonNumber": "/api/core/Person/GetPerson/{personNumber}",
+    "GetOrganizationByOrganizationNumber": "/api/core/Organization/GetOrganization/{organizationNumber}",
+    "GetOrganizationByNameEndpoint": "/api/core/Organization/Like/{organizationName}",
+    "GetOrganizationByMemberAgreementNumber": "/api/core/Organization/GetOrganizationByMemberAgreementNumber/{memberId}"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Url": "https://qa-document-type-retriever-api.apps.azure.lcu-internal.com",
+    "Scope": "api://f91af6f0-151b-4639-828d-939b8014cdda/user.groups",
+    "DocumentCodeDetailsRoute": "/DocumentCodeDetails/Get",
+    "DocumentCodeDetailsUpdateRoute": "/DocumentCodeDetails",
+    "DocumentCodeDetailsAuditLogsRoute": "/api/DocumentCodeDetails/{documentCode}/Logs",
+    "CountDocumentsRoute": "/Document/Count",
+    "DocumentContentRoute": "/Document/Content/{documentBlobId}",
+    "DocumentActionRoute": "/Document/{documentId}/Actions",
+    "DocumentsRoute": "/Document",
+    "DocumentAuditRoute": "/Document/AuditInformation/{documentId}"
+  },
+  "DetailedErrors": true,
+  "Security": {
+    "AccessPolicies": {
+      "Admin": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocumentLookup": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocumentLookupDownload": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocumentLookupEditVisibility": {
+        "Groups": "Doc_Mgr_IT_Admin"
+      },
+      "DocumentLookupShowDocumentId": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocCodeDetails": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocCodeDetailsCreate": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocCodeDetailsEdit": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ReprocessingTable": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ReprocessingTableAssignPrimaryOwner": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ReprocessingTableOpenDocument": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ITReprocessingTable": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ITReprocessingTableReprocess": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      }
+    }
+  }
+}
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,5 @@
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: ASPNETCORE_ENVIRONMENT
+    value: Development
@@ -0,0 +1,7 @@
+- op: add
+  path: /spec/parameters/userAssignedIdentityID
+  value: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
+
+- op: add
+  path: /spec/parameters/keyvaultName
+  value: kv-lz-apps-qa-uscz
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/historical-qa
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: qa-document-manager-historical.apps.azure.lcu-internal.com
@@ -0,0 +1,15 @@
+resources:
+  - normal
+  - historical
+
+configMapGenerator:
+  - name: document-manager-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal-qa
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: qa-document-manager.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: document-manager-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings
@@ -0,0 +1,67 @@
+{
+  "Primary": {
+    "seqUrl": "https://uat-seq.lcu-internal.com",
+    "AppBasePath": "",
+    "CorsAllowedOrigins": [
+      "http://lcu-internal.com",
+      "https://lcu-internal.com",
+      "https://qa-api.lcu-internal.com"
+    ]
+  },
+  "AzureAd": {
+    "CallbackPath": "/signin-oidc"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Url": "https://prd-document-type-uploader-api.apps.azure.lcu-internal.com"
+  },
+  "CoreApiWrapperConfiguration": {
+    "Url": "https://prd-core-api-wrapper-api.apps.azure.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Url": "https://prd-document-type-retriever-api.apps.azure.lcu-internal.com"
+  },
+  "DetailedErrors": true,
+  "Security": {
+    "AccessPolicies": {
+      "Admin": {
+        "Groups": "Doc_Mgr_IT_Admin,Doc_Mgr_Bus_Admin"
+      },
+      "DocumentLookup": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_Bus_Edit,Doc_Mgr_Bus_View_Only"
+      },
+      "DocumentLookupDownload": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_Bus_Edit,Doc_Mgr_Bus_View_Only"
+      },
+      "DocumentLookupEditVisibility": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_Bus_Edit"
+      },
+      "DocumentLookupShowDocumentId": {
+        "Groups": ""
+      },
+      "DocCodeDetails": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_IT_Admin"
+      },
+      "DocCodeDetailsCreate": {
+        "Groups": "Doc_Mgr_IT_Admin"
+      },
+      "DocCodeDetailsEdit": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_IT_Admin"
+      },
+      "ReprocessingTable": {
+        "Groups": "Doc_Mgr_Bus_Admin"
+      },
+      "ReprocessingTableAssignPrimaryOwner": {
+        "Groups": "Doc_Mgr_Bus_Admin"
+      },
+      "ReprocessingTableOpenDocument": {
+        "Groups": "Doc_Mgr_Bus_Admin"
+      },
+      "ITReprocessingTable": {
+        "Groups": "Doc_Mgr_IT_Admin"
+      },
+      "ITReprocessingTableReprocess": {
+        "Groups": "Doc_Mgr_IT_Admin"
+      }
+    }
+  }
+}
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,5 @@
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: ASPNETCORE_ENVIRONMENT
+    value: "Production"
@@ -0,0 +1,7 @@
+- op: add
+  path: /spec/parameters/userAssignedIdentityID
+  value: 9eaefc49-e5d3-48d4-a2b9-b42cf2d8ca03
+
+- op: add
+  path: /spec/parameters/keyvaultName
+  value: kv-lz-apps-prod-uscz
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/historical
+  - ../../../components/workloads/historical-prd
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: prd-document-manager-historical.apps.azure.lcu-internal.com
@@ -0,0 +1,15 @@
+resources:
+  - normal
+  - historical
+
+configMapGenerator:
+  - name: document-manager-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal-prd
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: prd-document-manager.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: document-manager-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings
@@ -0,0 +1,67 @@
+{
+  "Primary": {
+    "seqUrl": "https://qa-seq.lcu-internal.com",
+    "AppBasePath": "",
+    "CorsAllowedOrigins": [
+      "http://lcu-internal.com",
+      "https://lcu-internal.com",
+      "https://qa-api.lcu-internal.com"
+    ]
+  },
+  "AzureAd": {
+    "CallbackPath": "/signin-oidc"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Url": "https://qa-document-type-uploader-api.apps.azure.lcu-internal.com"
+  },
+  "CoreApiWrapperConfiguration": {
+    "Url": "https://qa-core-api-wrapper-api.apps.azure.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Url": "https://qa-document-type-retriever-api.apps.azure.lcu-internal.com"
+  },
+  "DetailedErrors": true,
+  "Security": {
+    "AccessPolicies": {
+      "Admin": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocumentLookup": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocumentLookupDownload": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocumentLookupEditVisibility": {
+        "Groups": "Doc_Mgr_IT_Admin"
+      },
+      "DocumentLookupShowDocumentId": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocCodeDetails": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocCodeDetailsCreate": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "DocCodeDetailsEdit": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ReprocessingTable": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ReprocessingTableAssignPrimaryOwner": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ReprocessingTableOpenDocument": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ITReprocessingTable": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      },
+      "ITReprocessingTableReprocess": {
+        "Groups": "Doc_Mgr_IT_Admin,QA_Testing"
+      }
+    }
+  }
+}
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,5 @@
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: ASPNETCORE_ENVIRONMENT
+    value: Development
@@ -0,0 +1,7 @@
+- op: add
+  path: /spec/parameters/userAssignedIdentityID
+  value: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
+
+- op: add
+  path: /spec/parameters/keyvaultName
+  value: kv-lz-apps-qa-uscz
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/historical
+  - ../../../components/workloads/historical-qa
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: qa-document-manager-historical.apps.azure.lcu-internal.com
@@ -0,0 +1,15 @@
+resources:
+  - normal
+  - historical
+
+configMapGenerator:
+  - name: document-manager-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal-qa
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: qa-document-manager.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: document-manager-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings
@@ -0,0 +1,67 @@
+{
+  "Primary": {
+    "seqUrl": "https://uat-seq.lcu-internal.com",
+    "AppBasePath": "",
+    "CorsAllowedOrigins": [
+      "http://lcu-internal.com",
+      "https://lcu-internal.com",
+      "https://qa-api.lcu-internal.com"
+    ]
+  },
+  "AzureAd": {
+    "CallbackPath": "/signin-oidc"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Url": "https://uat-document-type-uploader-api.apps.azure.lcu-internal.com"
+  },
+  "CoreApiWrapperConfiguration": {
+    "Url": "https://uat-core-api-wrapper-api.apps.azure.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Url": "https://uat-document-type-retriever-api.apps.azure.lcu-internal.com"
+  },
+  "DetailedErrors": true,
+  "Security": {
+    "AccessPolicies": {
+      "Admin": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_IT_Admin"
+      },
+      "DocumentLookup": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_Bus_Edit,Doc_Mgr_Bus_View_Only,Doc_Mgr_IT_Admin"
+      },
+      "DocumentLookupDownload": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_Bus_Edit,Doc_Mgr_Bus_View_Only,Doc_Mgr_IT_Admin"
+      },
+      "DocumentLookupEditVisibility": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_Bus_Edit,Doc_Mgr_IT_Admin"
+      },
+      "DocumentLookupShowDocumentId": {
+        "Groups": "Doc_Mgr_IT_Admin"
+      },
+      "DocCodeDetails": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_IT_Admin"
+      },
+      "DocCodeDetailsCreate": {
+        "Groups": "Doc_Mgr_IT_Admin"
+      },
+      "DocCodeDetailsEdit": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_IT_Admin"
+      },
+      "ReprocessingTable": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_IT_Admin"
+      },
+      "ReprocessingTableAssignPrimaryOwner": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_IT_Admin"
+      },
+      "ReprocessingTableOpenDocument": {
+        "Groups": "Doc_Mgr_Bus_Admin,Doc_Mgr_IT_Admin"
+      },
+      "ITReprocessingTable": {
+        "Groups": "Doc_Mgr_IT_Admin"
+      },
+      "ITReprocessingTableReprocess": {
+        "Groups": "Doc_Mgr_IT_Admin"
+      }
+    }
+  }
+}
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,5 @@
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: ASPNETCORE_ENVIRONMENT
+    value: "Staging"
@@ -0,0 +1,7 @@
+- op: add
+  path: /spec/parameters/userAssignedIdentityID
+  value: 64ba01ed-1ecc-4c9b-b56e-8d618f2b81ce
+
+- op: add
+  path: /spec/parameters/keyvaultName
+  value: kv-lz-apps-uat-uscz
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/historical
+  - ../../../components/workloads/historical-uat
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: uat-document-manager-historical.apps.azure.lcu-internal.com
@@ -0,0 +1,15 @@
+resources:
+  - normal
+  - historical
+
+configMapGenerator:
+  - name: document-manager-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal-uat
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: uat-document-manager.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: document-manager-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings