This commit is contained in:
Zeeshaun
2026-03-17 08:54:34 -05:00
parent 64856c640e
commit cdcba54aa4
330 changed files with 54110 additions and 0 deletions
@@ -0,0 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_secrets_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider.yaml
@@ -0,0 +1,49 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: reserve-management-system-api-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: reserve-management-system-api-csi-key-vault-secrets-provider
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: reserve-management-system-api-secrets
mountPath: /vault/secrets/reserve-management-system-seq-api-key.json
readOnly: true
subPath: reserve-management-system-seq-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: reserve-management-system-api-secrets
mountPath: /vault/secrets/reserve-management-system-rms-database-connection.json
readOnly: true
subPath: reserve-management-system-rms-database-connection
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: reserve-management-system-api-secrets
mountPath: /vault/secrets/reserve-management-system-connection-configuration-queue-username.json
readOnly: true
subPath: reserve-management-system-connection-configuration-queue-username
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: reserve-management-system-api-secrets
mountPath: /vault/secrets/reserve-management-system-connection-configuration-queue-password.json
readOnly: true
subPath: reserve-management-system-connection-configuration-queue-password
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: reserve-management-system-api-secrets
mountPath: /vault/secrets/reserve-management-system-api-security-configuration-internal-api-key-set.json
readOnly: true
subPath: reserve-management-system-api-security-configuration-internal-api-key-set
@@ -0,0 +1,24 @@
- op: add
path: /spec/parameters/objects
value: |
array:
- |
objectName: reserve-management-system-seq-api-key
objectType: secret
objectVersion: ""
- |
objectName: reserve-management-system-rms-database-connection
objectType: secret
objectVersion: ""
- |
objectName: reserve-management-system-connection-configuration-queue-username
objectType: secret
objectVersion: ""
- |
objectName: reserve-management-system-connection-configuration-queue-password
objectType: secret
objectVersion: ""
- |
objectName: reserve-management-system-api-security-configuration-internal-api-key-set
objectType: secret
objectVersion: ""
@@ -0,0 +1,14 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
configMapGenerator:
- name: reserve-management-system-api-workload-appsettings
files:
- appsettings/appsettings.json
generatorOptions:
disableNameSuffixHash: true
patches:
- target:
kind: Deployment
path: set_appsettings_deployment.yaml
@@ -0,0 +1,12 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: volume-workload-appsettings
configMap:
name: reserve-management-system-api-workload-appsettings
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: volume-workload-appsettings
mountPath: /app/config/workload-appsettings