Adding

2026-03-17 08:54:34 -05:00
parent 64856c640e
commit cdcba54aa4
330 changed files with 54110 additions and 0 deletions
@@ -0,0 +1,54 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: reserve-management-system-api
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: reserve-management-system-api
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: reserve-management-system-api
+    spec:
+      volumes:
+      - name: volume-lcu-internal-cert
+        configMap:
+          name: configmap-lcu-internal-cert
+      containers:
+      - name: reserve-management-system-api
+        env: []
+        volumeMounts:
+        - name: volume-lcu-internal-cert
+          mountPath: /etc/ssl/certs/lcu-internal-cert.pem
+          subPath: lcu-internal-cert.pem
+        image: reserve-management-system-api
+        resources:
+            requests:
+              cpu: "50m"
+              memory: "512Mi"
+            limits:
+              memory: "512Mi"
+        ports:
+          - containerPort: 80
+        livenessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 80
+        readinessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 80
+        
+      
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: reserve-management-system-api
+spec:
+  selector:
+    app: reserve-management-system-api
+  ports:
+  - port: 80
+    targetPort: 80
@@ -0,0 +1,9 @@
+resources:
+  - Deployment.yaml
+  - Service.yaml
+  - virtual-service.yaml
+  - secrets-provider-class.yaml
+
+images:
+- name: reserve-management-system-api
+  newName: landmarkcu/lcu.api.internal.reservemanagementsystem-reservemanagementsystem
@@ -0,0 +1,11 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: reserve-management-system-api-csi-key-vault-secrets-provider
+spec:
+  provider: azure
+  parameters:
+    usePodIdentity: "false"
+    useVMManagedIdentity: "true"
+    tenantId: 63cd1554-2783-4a86-ae50-b9e6c21c9499
@@ -0,0 +1,19 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: reserve-management-system-api
+spec:
+  hosts: []
+  gateways:
+  - istio-system/ingress-gateway
+  http:
+  - name: reserve-management-system-api
+    match:
+    - uri:
+        prefix: /
+    route:
+    - destination:
+        host: reserve-management-system-api
+        port:
+          number: 80
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,49 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: reserve-management-system-api-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: reserve-management-system-api-csi-key-vault-secrets-provider
+        
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: reserve-management-system-api-secrets
+    mountPath: /vault/secrets/reserve-management-system-seq-api-key.json
+    readOnly: true
+    subPath: reserve-management-system-seq-api-key
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: reserve-management-system-api-secrets
+    mountPath: /vault/secrets/reserve-management-system-rms-database-connection.json
+    readOnly: true
+    subPath: reserve-management-system-rms-database-connection
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: reserve-management-system-api-secrets
+    mountPath: /vault/secrets/reserve-management-system-connection-configuration-queue-username.json
+    readOnly: true
+    subPath: reserve-management-system-connection-configuration-queue-username
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: reserve-management-system-api-secrets
+    mountPath: /vault/secrets/reserve-management-system-connection-configuration-queue-password.json
+    readOnly: true
+    subPath: reserve-management-system-connection-configuration-queue-password
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: reserve-management-system-api-secrets
+    mountPath: /vault/secrets/reserve-management-system-api-security-configuration-internal-api-key-set.json
+    readOnly: true
+    subPath: reserve-management-system-api-security-configuration-internal-api-key-set
@@ -0,0 +1,24 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+      array: 
+        - | 
+          objectName: reserve-management-system-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: reserve-management-system-rms-database-connection
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: reserve-management-system-connection-configuration-queue-username
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: reserve-management-system-connection-configuration-queue-password
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: reserve-management-system-api-security-configuration-internal-api-key-set
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1 @@
+{}
@@ -0,0 +1,14 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+configMapGenerator:
+  - name: reserve-management-system-api-workload-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-workload-appsettings
+    configMap:
+      name: reserve-management-system-api-workload-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-workload-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,22 @@
+ {
+    "Primary": {
+         "SeqUrl": "https://qa-seq.lcu-internal.com",
+         "CorsAllowedOrigins": [
+              "http://localhost:3000",
+              "http://lcu-internal.com",
+              "https://lcu-internal.com",
+              "https://qa-api.lcu-internal.com"
+         ],
+         "FeatureFlags": {
+              "RunRmsActiveLoanConsumer": true,
+              "RunWithQuorumQueues": false
+         }
+     },
+     "ConnectionConfiguration": {
+         "HostUrl": "d1msg01q.lcu-internal.com"
+     },
+     "CoreApiConfiguration": {
+         "ApiTimeOutInSeconds": 420,
+         "BaseUrl": "https://qa-core-api-wrapper-api.apps.azure.lcu-internal.com/"
+     }
+  }
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
+images:
+- name: reserve-management-system-api
+  newName: landmarkcu/lcu.api.internal.reservemanagementsystem-reservemanagementsystem
@@ -0,0 +1,12 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: reserve-management-system-api
+spec:
+  template:
+    spec:
+      containers:
+      - name: reserve-management-system-api
+        env:
+         - name: ASPNETCORE_ENVIRONMENT
+           value: "Development"
@@ -0,0 +1,9 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: reserve-management-system-api-csi-key-vault-secrets-provider
+spec:
+  parameters:
+    userAssignedIdentityID: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
+    keyvaultName: kv-lz-apps-qa-uscz
@@ -0,0 +1,14 @@
+resources:
+  - normal
+
+configMapGenerator:
+  - name: reserve-management-system-api-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,6 @@
+resources:
+  - ../common
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: reserve-management-system-api
+spec:
+  hosts:
+  - qa-reserve-management-system-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: reserve-management-system-api-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings
@@ -0,0 +1,25 @@
+{
+   "Primary": {
+       "SeqUrl": "https://seq.lcu-internal.com",
+       "CorsAllowedOrigins": [
+           "http://lcu-internal.com",
+           "https://lcu-internal.com"
+        ],
+        "FeatureFlags": {
+           "RunRmsActiveLoanConsumer": true,
+           "EnableImportExportActive": true,
+           "EnableImportExportClosed": true
+        }
+    },
+    "ConnectionConfiguration": {
+        "HostUrl": "rabbitmq.lcu-internal.com"
+    },
+    "CoreApiConfiguration": {
+		"ApiTimeOutInSeconds": 420,
+        "BaseUrl": "https://prd-core-api-wrapper-api.apps.azure.lcu-internal.com"
+    },
+    "HostedServices": {
+        "ImportExportActiveCronSchedule": "0 19 * * 0-6",
+        "ImportExportClosedCronSchedule": "15 19 * * 0-6"
+    }
+}
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: reserve-management-system-api-csi-key-vault-secrets-provider
+spec:
+  parameters:
+    userAssignedIdentityID: 9eaefc49-e5d3-48d4-a2b9-b42cf2d8ca03
+    keyvaultName: kv-lz-apps-prod-uscz
@@ -0,0 +1,14 @@
+resources:
+  - normal
+
+configMapGenerator:
+  - name: reserve-management-system-api-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: reserve-management-system-api
+spec:
+  hosts:
+  - prd-reserve-management-system-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: reserve-management-system-api-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings
@@ -0,0 +1,27 @@
+{
+   "Primary": {
+       "SeqUrl": "https://qa-seq.lcu-internal.com",
+       "CorsAllowedOrigins": [
+           "http://localhost:3000",
+           "http://lcu-internal.com",
+           "https://lcu-internal.com",
+           "https://qa-api.lcu-internal.com"
+        ],
+        "FeatureFlags": {
+           "RunRmsActiveLoanConsumer": true,
+           "EnableImportExportActive": true,
+           "EnableImportExportClosed": true
+        }
+    },
+    "ConnectionConfiguration": {
+        "HostUrl": "qa-rabbitmq.lcu-internal.com"
+    },
+    "CoreApiConfiguration": {
+		"ApiTimeOutInSeconds": 420,
+        "BaseUrl": "https://qa-core-api-wrapper-api.apps.azure.lcu-internal.com"
+    },
+    "HostedServices": {
+        "ImportExportActiveCronSchedule": "0 19 * * 0-6",
+        "ImportExportClosedCronSchedule": "15 19 * * 0-6"
+    }
+}
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: reserve-management-system-api-csi-key-vault-secrets-provider
+spec:
+  parameters:
+    userAssignedIdentityID: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
+    keyvaultName: kv-lz-apps-qa-uscz
@@ -0,0 +1,14 @@
+resources:
+  - normal
+
+configMapGenerator:
+  - name: reserve-management-system-api-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: reserve-management-system-api
+spec:
+  hosts:
+  - qa-reserve-management-system-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: reserve-management-system-api-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings
@@ -0,0 +1,25 @@
+{
+   "Primary": {
+       "SeqUrl": "https://uat-seq.lcu-internal.com",
+       "CorsAllowedOrigins": [
+           "http://lcu-internal.com",
+           "https://lcu-internal.com"
+        ],
+        "FeatureFlags": {
+           "RunRmsActiveLoanConsumer": true,
+           "EnableImportExportActive": true,
+           "EnableImportExportClosed": true
+        }
+    },
+    "ConnectionConfiguration": {
+        "HostUrl": "uat-rabbitmq.lcu-internal.com"
+    },
+    "CoreApiConfiguration": {
+		"ApiTimeOutInSeconds": 420,
+        "BaseUrl": "https://uat-core-api-wrapper-api.apps.azure.lcu-internal.com"
+    },
+    "HostedServices": {
+        "ImportExportActiveCronSchedule": "0 19 * * 0-6",
+        "ImportExportClosedCronSchedule": "15 19 * * 0-6"
+    }
+}
@@ -0,0 +1,7 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider_class.yaml
@@ -0,0 +1,9 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: reserve-management-system-api-csi-key-vault-secrets-provider
+spec:
+  parameters:
+    userAssignedIdentityID: 64ba01ed-1ecc-4c9b-b56e-8d618f2b81ce
+    keyvaultName: kv-lz-apps-uat-uscz
@@ -0,0 +1,14 @@
+resources:
+  - normal
+
+configMapGenerator:
+  - name: reserve-management-system-api-environment-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_configmap_deployment.yaml
@@ -0,0 +1,12 @@
+resources:
+  - ../../../base
+
+components:
+  - ../component
+  - ../../../components/keyvaults/normal
+  - ../../../components/workloads/normal
+
+patches:
+  - target:
+      kind: VirtualService
+    path: set_virtual_service.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: reserve-management-system-api
+spec:
+  hosts:
+  - uat-reserve-management-system-api.apps.azure.lcu-internal.com
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-environment-appsettings
+    configMap:
+      name: reserve-management-system-api-environment-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-environment-appsettings
+    mountPath: /app/config/environment-appsettings