Adding

2026-03-31 14:32:23 -05:00
parent f4646dc97f
commit 9be174da46
485 changed files with 37290 additions and 0 deletions
@@ -0,0 +1,44 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: core-api-wrapper-api
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: core-api-wrapper-api
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: core-api-wrapper-api
+    spec:
+      volumes: []
+      containers:
+      - name: core-api-wrapper-api
+        env: []
+        volumeMounts: []
+        image: core-api-wrapper-api
+        resources:
+          limits:
+            memory: "1536Mi"
+            cpu: "500m"
+        ports:
+          - containerPort: 8080
+        livenessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 8080
+        readinessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 8080
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: core-api-wrapper-api
+spec:
+  selector:
+    app: core-api-wrapper-api
+  ports:
+  - port: 8080
+    targetPort: 8080
@@ -0,0 +1,9 @@
+resources:
+  - Deployment.yaml
+  - Service.yaml
+  - secrets-provider-class.yaml
+  - virtual-service.yaml
+
+images:
+- name: core-api-wrapper-api
+  newName: landmarkcu/lcu.api.internal.coreapiwrapper-coreapiwrapper
@@ -0,0 +1,11 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: core-api-wrapper-api-csi-key-vault-secrets-provider
+spec:
+  provider: azure
+  parameters:
+    usePodIdentity: "false"
+    useVMManagedIdentity: "true"
+    tenantId: 63cd1554-2783-4a86-ae50-b9e6c21c9499
@@ -0,0 +1,19 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: core-api-wrapper-api
+spec:
+  hosts: []
+  gateways:
+  - istio-system/ingress-gateway
+  http:
+  - name: core-api-wrapper-api
+    match:
+    - uri:
+        prefix: /
+    route:
+    - destination:
+        host: core-api-wrapper-api
+        port:
+          number: 8080
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,105 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: core-api-wrapper-api-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: normal-core-api-wrapper-api-csi-key-vault-secrets-provider
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-core-api-wrapper-api-key.json
+    readOnly: true
+    subPath: core-api-wrapper-core-api-wrapper-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-core-soap-api-wrapper-api-key.json
+    readOnly: true
+    subPath: core-api-wrapper-core-soap-api-wrapper-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-remote-deposit-capture-api-key.json
+    readOnly: true
+    subPath: core-api-wrapper-remote-deposit-capture-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-reserve-management-system-api-key.json
+    readOnly: true
+    subPath: core-api-wrapper-reserve-management-system-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-member-preferences-api-key.json
+    readOnly: true
+    subPath: core-api-wrapper-member-preferences-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-data-cleanup-api-key.json
+    readOnly: true
+    subPath: core-api-wrapper-data-cleanup-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-client-secret-id.json
+    readOnly: true
+    subPath: core-api-wrapper-client-secret-id
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-environment-from-vault.json
+    readOnly: true
+    subPath: core-api-wrapper-environment-from-vault
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-seq-api-key.json
+    readOnly: true
+    subPath: core-api-wrapper-seq-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-temenos-action-handler-api-key.json
+    readOnly: true
+    subPath: core-api-wrapper-temenos-action-handler-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-core-relying-password.json
+    readOnly: true
+    subPath: core-api-wrapper-core-relying-password
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-core-database-connection-string.json
+    readOnly: true
+    subPath: core-api-wrapper-core-database-connection-string
@@ -0,0 +1,52 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+      array: 
+        - | 
+          objectName: core-api-wrapper-environment-from-vault
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-client-secret-id
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-data-cleanup-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-member-preferences-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-reserve-management-system-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-remote-deposit-capture-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-core-api-wrapper-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-core-soap-api-wrapper-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-temenos-action-handler-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-core-relying-password
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: core-api-wrapper-core-database-connection-string
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,105 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: core-api-wrapper-api-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: scanbi-core-api-wrapper-api-csi-key-vault-secrets-provider
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-core-api-wrapper-api-key.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-core-api-wrapper-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-core-soap-api-wrapper-api-key.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-core-soap-api-wrapper-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-remote-deposit-capture-api-key.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-remote-deposit-capture-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-reserve-management-system-api-key.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-reserve-management-system-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-member-preferences-api-key.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-member-preferences-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-data-cleanup-api-key.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-data-cleanup-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-client-secret-id.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-client-secret-id
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-environment-from-vault.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-environment-from-vault
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-seq-api-key.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-seq-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-temenos-action-handler-api-key.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-temenos-action-handler-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-core-relying-password.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-core-relying-password
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: core-api-wrapper-api-secrets
+    mountPath: /vault/secrets/core-api-wrapper-core-database-connection-string.json
+    readOnly: true
+    subPath: scanbi-core-api-wrapper-core-database-connection-string
@@ -0,0 +1,52 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+      array: 
+        - | 
+          objectName: scanbi-core-api-wrapper-environment-from-vault
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-client-secret-id
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-data-cleanup-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-member-preferences-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-reserve-management-system-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-remote-deposit-capture-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-core-api-wrapper-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-core-soap-api-wrapper-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-temenos-action-handler-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-core-relying-password
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: scanbi-core-api-wrapper-core-database-connection-string
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1,7 @@
+{
+   "Primary": {
+       "FeatureFlags": {
+        "DisableCoreDBWrite": false
+       }
+   }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: core-api-wrapper-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: core-api-wrapper-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,7 @@
+{
+   "Primary": {
+       "FeatureFlags": {
+        "DisableCoreDBWrite": false
+       }
+   }
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: core-api-wrapper-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: core-api-wrapper-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,7 @@
+{
+   "Primary": {
+       "FeatureFlags": {
+         "DisableCoreDBWrite": true
+       }
+   }
+}
@@ -0,0 +1,39 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+namePrefix: scanbi-
+
+configMapGenerator:
+  - name: core-api-wrapper-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: core-api-wrapper-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,7 @@
+{
+   "Primary": {
+       "FeatureFlags": {
+         "DisableCoreDBWrite": true
+       }
+   }
+}
@@ -0,0 +1,39 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+namePrefix: scanbi-
+
+configMapGenerator:
+  - name: core-api-wrapper-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: core-api-wrapper-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,8 @@
+resources:
+  - ../../../base
+patchesStrategicMerge:
+  - set_appsettings_deployment.yaml
+  - set_secrets_provider_class.yaml
+images:
+- name: core-api-wrapper-api
+  newName: landmarkcu/lcu.api.internal.coreapiwrapper-coreapiwrapper
@@ -0,0 +1,12 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: core-api-wrapper-api
+spec:
+  template:
+    spec:
+      containers:
+      - name: core-api-wrapper-api
+        env:
+         - name: ASPNETCORE_ENVIRONMENT
+           value: "Development"
@@ -0,0 +1,9 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: core-api-wrapper-api-csi-key-vault-secrets-provider
+spec:
+  parameters:
+    userAssignedIdentityID: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
+    keyvaultName: kv-lz-apps-qa-uscz
@@ -0,0 +1,2 @@
+resources:
+  - normal
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: coreapiwrapperapi-configmap
+data:
+  primary.json: |
+    {
+      "Primary": {
+        "SeqUrl": "https://qa-seq.lcu-internal.com",
+        "CorsAllowedOrigins": [
+          "http://localhost:3000",
+          "http://lcu-internal.com",
+          "https://lcu-internal.com",
+          "https://qa-api.lcu-internal.com"
+        ]
+      }
+    }
@@ -0,0 +1,5 @@
+resources:
+  - configmap.yaml
+  - ../common
+patchesStrategicMerge:
+  - set_virtual_service.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: core-api-wrapper-api
+spec:
+  hosts:
+  - qa-core-api-wrapper-api.apps.azure.lcu-internal.com
@@ -0,0 +1,23 @@
+{
+  "Primary": {
+	"SeqUrl": "https://seq.lcu-internal.com"
+  },
+  "ApiHealthCheckConfiguration": {
+	"VaultStatusConfiguration": {
+		"RunVaultStatusCheck": true,
+		"EnvironmentFromConfigmap": "PROD"
+	}
+  },
+  "CoreConfiguration": {
+	"CoreApiConfiguration": {
+	  "HostUrl": "Prodapi.dna.lcu-internal.com",
+	  "HostPort": "10002"
+	},
+		"CoreSoapApiConfiguration": {
+			"CoreSoapApiWrapperHost": "prd-core-soap-api-wrapper-api.apps.azure.lcu-internal.com"
+		},
+	"CoreDbconfiguration":{
+		"CommandTimeout": 300
+	}
+  }      
+}
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,5 @@
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: ASPNETCORE_ENVIRONMENT
+    value: "Production"
@@ -0,0 +1,7 @@
+- op: add
+  path: /spec/parameters/userAssignedIdentityID
+  value: 9eaefc49-e5d3-48d4-a2b9-b42cf2d8ca03
+
+- op: add
+  path: /spec/parameters/keyvaultName
+  value: kv-lz-apps-prod-uscz
@@ -0,0 +1,15 @@
+resources:
+  - normal
+  - scanbi
+
+configMapGenerator:
+  - name: core-api-wrapper-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal-prod
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: prd-core-api-wrapper-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/scanbi  
+  - ../../../components/workloads/scanbi-prod
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: prd-scanbi-core-api-wrapper-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: core-api-wrapper-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings
@@ -0,0 +1,23 @@
+{
+  "Primary": {
+	"SeqUrl": "https://qa-seq.lcu-internal.com"
+  },
+  "ApiHealthCheckConfiguration": {
+	"VaultStatusConfiguration": {
+		"RunVaultStatusCheck": true,
+		"EnvironmentFromConfigmap": "QA"
+	}
+  },
+  "CoreConfiguration": {
+	"CoreApiConfiguration": {
+	  "HostUrl": "UATapi.dna.lcu-internal.com",
+	  "HostPort": "10005"
+	},
+		"CoreSoapApiConfiguration": {
+			"CoreSoapApiWrapperHost": "qa-core-soap-api-wrapper-api.apps.azure.lcu-internal.com"
+		},
+	"CoreDbconfiguration":{
+		"CommandTimeout": 60
+	}
+  }
+}
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,5 @@
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: ASPNETCORE_ENVIRONMENT
+    value: Development
@@ -0,0 +1,7 @@
+- op: add
+  path: /spec/parameters/userAssignedIdentityID
+  value: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
+
+- op: add
+  path: /spec/parameters/keyvaultName
+  value: kv-lz-apps-qa-uscz
@@ -0,0 +1,15 @@
+resources:
+  - normal
+  - scanbi
+
+configMapGenerator:
+  - name: core-api-wrapper-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: qa-core-api-wrapper-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/workloads/scanbi
+  - ../../../components/keyvaults/scanbi
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: qa-scanbi-core-api-wrapper-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: core-api-wrapper-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings
@@ -0,0 +1,23 @@
+{
+  "Primary": {
+	"SeqUrl": "https://uat-seq.lcu-internal.com"
+  },
+  "ApiHealthCheckConfiguration": {
+	"VaultStatusConfiguration": {
+		"RunVaultStatusCheck": true,
+		"EnvironmentFromConfigmap": "UAT"
+	}
+  },
+  "CoreConfiguration": {
+	"CoreApiConfiguration": {
+	  "HostUrl": "UATapi.dna.lcu-internal.com",
+	  "HostPort": "10005"
+	},
+		"CoreSoapApiConfiguration": {
+			"CoreSoapApiWrapperHost": "uat-core-soap-api-wrapper-api.apps.azure.lcu-internal.com"
+		},
+	"CoreDbconfiguration":{
+		"CommandTimeout": 60
+	}
+  }
+}
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,5 @@
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: ASPNETCORE_ENVIRONMENT
+    value: "Staging"
@@ -0,0 +1,7 @@
+- op: add
+  path: /spec/parameters/userAssignedIdentityID
+  value: 64ba01ed-1ecc-4c9b-b56e-8d618f2b81ce
+
+- op: add
+  path: /spec/parameters/keyvaultName
+  value: kv-lz-apps-uat-uscz
@@ -0,0 +1,15 @@
+resources:
+  - normal
+  - scanbi
+
+configMapGenerator:
+  - name: core-api-wrapper-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: uat-core-api-wrapper-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/workloads/scanbi
+  - ../../../components/keyvaults/scanbi
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /spec/hosts/-
+  value: uat-scanbi-core-api-wrapper-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: core-api-wrapper-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings