Adding

2026-03-25 14:50:13 -05:00
parent 883009770f
commit b690921fd7
592 changed files with 46618 additions and 0 deletions
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,89 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: document-ingestor-api-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: historical-document-ingestor-api-secrets-provider
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-application-insights-instrumentation-key.json
+    readOnly: true
+    subPath: document-ingestor-historical-application-insights-instrumentation-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-azure-ad-client-secret.json
+    readOnly: true
+    subPath: document-ingestor-historical-azure-ad-client-secret
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-database-connection.json
+    readOnly: true
+    subPath: document-ingestor-historical-database-connection
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-environment-from-vault.json
+    readOnly: true
+    subPath: document-ingestor-historical-environment-from-vault
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-document-ingestor-api-key.json
+    readOnly: true
+    subPath: document-ingestor-historical-document-ingestor-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-document-manager.json
+    readOnly: true
+    subPath: document-ingestor-historical-document-manager
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-queue-password.json
+    readOnly: true
+    subPath: document-ingestor-historical-queue-password
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-queue-user-name.json
+    readOnly: true
+    subPath: document-ingestor-historical-queue-user-name
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-seq-api-key.json
+    readOnly: true
+    subPath: document-ingestor-historical-seq-api-key
+ 
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-mobile-banking-api-key.json
+    readOnly: true
+    subPath: document-ingestor-historical-mobile-banking-api-key
@@ -0,0 +1,44 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+     array: 
+        - | 
+          objectName: document-ingestor-historical-application-insights-instrumentation-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-historical-azure-ad-client-secret
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-historical-database-connection
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-historical-document-ingestor-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-historical-document-manager
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-historical-environment-from-vault
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-historical-queue-password
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-historical-queue-user-name
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-historical-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-historical-mobile-banking-api-key
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,89 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: document-ingestor-api-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: normal-document-ingestor-api-secrets-provider
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-application-insights-instrumentation-key.json
+    readOnly: true
+    subPath: document-ingestor-application-insights-instrumentation-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-azure-ad-client-secret.json
+    readOnly: true
+    subPath: document-ingestor-azure-ad-client-secret
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-database-connection.json
+    readOnly: true
+    subPath: document-ingestor-database-connection
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-environment-from-vault.json
+    readOnly: true
+    subPath: document-ingestor-environment-from-vault
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-document-ingestor-api-key.json
+    readOnly: true
+    subPath: document-ingestor-document-ingestor-api-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-document-manager.json
+    readOnly: true
+    subPath: document-ingestor-document-manager
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-queue-password.json
+    readOnly: true
+    subPath: document-ingestor-queue-password
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-queue-user-name.json
+    readOnly: true
+    subPath: document-ingestor-queue-user-name
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-seq-api-key.json
+    readOnly: true
+    subPath: document-ingestor-seq-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: document-ingestor-api-secrets
+    mountPath: /vault/secrets/document-ingestor-mobile-banking-api-key.json
+    readOnly: true
+    subPath: document-ingestor-mobile-banking-api-key
@@ -0,0 +1,44 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+     array: 
+        - | 
+          objectName: document-ingestor-application-insights-instrumentation-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-azure-ad-client-secret
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-database-connection
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-document-ingestor-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-document-manager
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-environment-from-vault
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-queue-password
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-queue-user-name
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: document-ingestor-mobile-banking-api-key
+          objectType: secret
+          objectVersion: ""