Adding

2026-03-13 09:24:21 -05:00
parent c2d6bda458
commit 256f579489
282 changed files with 50136 additions and 0 deletions
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,41 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: document-manager-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: historical-document-manager-csi-key-vault-secrets-provider
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-seq-api-key.json
+    readOnly: true
+    subPath: document-manager-seq-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-client-secret.json
+    readOnly: true
+    subPath: document-manager-client-secret
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-client-id.json
+    readOnly: true
+    subPath: document-manager-client-id
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-api-key.json
+    readOnly: true
+    subPath: document-manager-api-key
@@ -0,0 +1,20 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+      array: 
+        - | 
+          objectName: document-manager-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-client-secret
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-client-id
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-api-key
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,41 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: document-manager-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: normal-document-manager-csi-key-vault-secrets-provider
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-seq-api-key.json
+    readOnly: true
+    subPath: document-manager-seq-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-client-secret.json
+    readOnly: true
+    subPath: document-manager-client-secret
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-client-id.json
+    readOnly: true
+    subPath: document-manager-client-id
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-manager-secrets
+    mountPath: /vault/secrets/document-manager-api-key.json
+    readOnly: true
+    subPath: document-manager-api-key
@@ -0,0 +1,20 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+      array: 
+        - | 
+          objectName: document-manager-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-client-secret
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-client-id
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-manager-api-key
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://prd-document-ingestor-historical-api.apps.azure.lcu-internal.com",
+    "Scope": "api://2daa775f-3ad6-43e1-9d12-c4708f51d1cb/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://fileoperationsapi2.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://e13f2aea-c4f4-4b4d-8e63-8f160901f599/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://857d64c8-3342-4965-a4ae-17b77802eab4/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: historical-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://qa-document-ingestor-historical-api.apps.azure.lcu-internal.com",
+    "Scope": "api://27a3a812-7338-4c55-81ac-33c415e8b401/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://qa-fileoperationsapi2.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://f91af6f0-151b-4639-828d-939b8014cdda/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://e7c4a571-b574-4c9d-a8e5-187459140101/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: historical-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://uat-document-ingestor-historical-api.apps.azure.lcu-internal.com",
+    "Scope": "api://54798032-d762-4dc6-9ec3-dc4612b59007/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://uat-fileoperationsapi2.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://013f335a-147e-47e8-8cfd-39438be6e55a/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://58c64a44-c4bd-4f51-80ea-dd5c9c77d3f0/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: historical-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://prd-document-ingestor-api.apps.azure.lcu-internal.com",
+    "Scope": "api://2daa775f-3ad6-43e1-9d12-c4708f51d1cb/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://fileoperationsapi.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://e13f2aea-c4f4-4b4d-8e63-8f160901f599/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://857d64c8-3342-4965-a4ae-17b77802eab4/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://qa-document-ingestor-api.apps.azure.lcu-internal.com",
+    "Scope": "api://27a3a812-7338-4c55-81ac-33c415e8b401/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://qa-fileoperationsapi.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://f91af6f0-151b-4639-828d-939b8014cdda/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://e7c4a571-b574-4c9d-a8e5-187459140101/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,15 @@
+{
+  "DocumentIngestorApiConfiguration": {
+    "Url": "https://uat-document-ingestor-api.apps.azure.lcu-internal.com",
+    "Scope": "api://54798032-d762-4dc6-9ec3-dc4612b59007/user.groups"
+  },
+  "FileOperationsApiConfiguration": {
+    "Url": "https://uat-fileoperationsapi.lcu-internal.com"
+  },
+  "DocumentTypeRetrieverApiConfiguration": {
+    "Scope": "api://013f335a-147e-47e8-8cfd-39438be6e55a/user.groups"
+  },
+  "DocumentTypeUploaderApiConfiguration": {
+    "Scope": "api://58c64a44-c4bd-4f51-80ea-dd5c9c77d3f0/user.groups"
+  }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: document-manager-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: document-manager-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings