Adding

2026-03-31 16:43:12 -05:00
parent 9be174da46
commit d639027028
198 changed files with 111474 additions and 0 deletions
@@ -0,0 +1,95 @@
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: member-preferences-api
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: member-preferences-api
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      labels:
+        app: member-preferences-api
+    spec:
+      containers:
+      - name: member-preferences-api
+        image: member-preferences-api
+        resources:
+          limits:
+            memory: "1536Mi"
+            cpu: "500m"
+        ports:
+          - containerPort: 8080
+        livenessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 8080
+        readinessProbe:
+                initialDelaySeconds: 5
+                periodSeconds: 5
+                httpGet:
+                  path: /api/status
+                  port: 8080
+        volumeMounts:
+        - name: volume-lcu-internal-cert
+          mountPath: /etc/ssl/certs/lcu-internal-cert.pem
+        - name: volume-appsettings
+          mountPath: /app/config/mapped-appsettings
+        - name: member-preferences-api-secrets
+          mountPath: /vault/secrets/member-preferences-api-member-preferences-api-key.json
+          subPath: member-preferences-api-member-preferences-api-key
+          readOnly: true
+        - name: member-preferences-api-secrets
+          mountPath: /vault/secrets/member-preferences-api-ftp-fingerprint.json
+          subPath: member-preferences-api-ftp-fingerprint
+          readOnly: true
+        - name: member-preferences-api-secrets
+          mountPath: /vault/secrets/member-preferences-api-ftp-password.json
+          subPath: member-preferences-api-ftp-password
+          readOnly: true
+        - name: member-preferences-api-secrets
+          mountPath: /vault/secrets/member-preferences-api-ftp-username.json
+          subPath: member-preferences-api-ftp-username
+          readOnly: true
+        - name: member-preferences-api-secrets
+          mountPath: /vault/secrets/member-preferences-api-queue-password.json
+          subPath: member-preferences-api-queue-password
+          readOnly: true
+        - name: member-preferences-api-secrets
+          mountPath: /vault/secrets/member-preferences-api-queue-username.json
+          subPath: member-preferences-api-queue-username
+          readOnly: true
+        - name: member-preferences-api-secrets
+          mountPath: /vault/secrets/member-preferences-api-db-connection.json
+          subPath: member-preferences-api-db-connection
+          readOnly: true
+        - name: member-preferences-api-secrets
+          mountPath: /vault/secrets/member-preferences-api-environment-from-vault.json
+          subPath: member-preferences-api-environment-from-vault
+          readOnly: true
+        - name: member-preferences-api-secrets
+          mountPath: /vault/secrets/member-preferences-api-seq-api-key.json
+          subPath: member-preferences-api-seq-api-key
+          readOnly: true
+      volumes:
+      - name: member-preferences-api-secrets
+        csi:
+          driver: secrets-store.csi.k8s.io
+          readOnly: true
+          volumeAttributes:
+            secretProviderClass: member-preferences-api-csi-key-vault-secrets-provider
+      - name: volume-lcu-internal-cert
+        configMap:
+          name: configmap-lcu-internal-cert
+      - name: volume-appsettings
+        configMap:
+          name: memberpreferencesapi-configmap
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: member-preferences-api
+spec:
+  selector:
+    app: member-preferences-api
+  ports:
+  - port: 8080
+    targetPort: 8080
@@ -0,0 +1,5 @@
+resources:
+  - Deployment.yaml
+  - Service.yaml
+  - virtual-service.yaml
+  - secrets-provider-class.yaml
@@ -0,0 +1,49 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: member-preferences-api-csi-key-vault-secrets-provider
+spec:
+  provider: azure
+  parameters:
+    usePodIdentity: "false"
+    useVMManagedIdentity: "true"
+    tenantId: 63cd1554-2783-4a86-ae50-b9e6c21c9499
+    objects: |
+      array: 
+        - | 
+          objectName: member-preferences-api-seq-api-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: member-preferences-api-environment-from-vault
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: member-preferences-api-db-connection
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: member-preferences-api-queue-username
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: member-preferences-api-queue-password
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: member-preferences-api-ftp-username
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: member-preferences-api-ftp-password
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: member-preferences-api-ftp-fingerprint
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: member-preferences-api-member-preferences-api-key
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1,18 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: member-preferences-api
+spec:
+  gateways:
+  - istio-system/ingress-gateway
+  http:
+  - name: member-preferences-api
+    match:
+    - uri:
+        prefix: /
+    route:
+    - destination:
+        host: member-preferences-api
+        port:
+          number: 8080
@@ -0,0 +1,8 @@
+resources:
+  - ../../../base
+patchesStrategicMerge:
+  - set_appsettings_deployment.yaml
+  - set_secrets_provider_class.yaml
+images:
+- name: member-preferences-api
+  newName: landmarkcu/lcu.api.internal.memberpreferences-memberpreferences
@@ -0,0 +1,12 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: member-preferences-api
+spec:
+  template:
+    spec:
+      containers:
+      - name: member-preferences-api
+        env:
+         - name: ASPNETCORE_ENVIRONMENT
+           value: "Development"
@@ -0,0 +1,9 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: member-preferences-api-csi-key-vault-secrets-provider
+spec:
+  parameters:
+    userAssignedIdentityID: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
+    keyvaultName: kv-lz-apps-qa-uscz
@@ -0,0 +1,2 @@
+resources:
+  - normal
@@ -0,0 +1,63 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: memberpreferencesapi-configmap
+data:
+  primary.json: |
+    {
+      "Primary": {
+        "AppName": "Member Preferences Api",
+        "SeqUrl": "https://qa-seq.lcu-internal.com",
+        "XdiBatchProcessCronSchedule": "1 5-18 * * *",
+        "DnaDataAuditProcessCronSchedule": "*/5 3-19 * * *",
+        "FeatureFlags": {
+            "RunHostedServices": true,
+            "RunXdiBatchProcessConsumer": true,
+            "RunXdiSshResponseConsumer": true,
+            "RunAccountDnaFieldChangeConsumer": true,
+            "RunAgreementDnaFieldChangeConsumer": true,
+            "RunOrganizationDnaFieldChangeConsumer": true
+        },
+        "FeatureGates": {
+            "EnableControllers": true,
+            "BounceBackNotifications": false
+        }
+      },
+      "ApiHealthCheckConfiguration": {
+         "VaultStatusConfiguration": {
+            "RunVaultStatusCheck": true,
+            "EnvironmentFromConfigmap": "local"
+         }
+      },
+      "SqlConnectionConfiguration": {
+        "MaxRetryCount": 3,
+        "MaxRetryDelay": "00:00:30"
+      },
+      "NotificationApiConfiguration": {
+        "Url": "https://qa-notificationsapi.lcu-internal.com/api/", 
+        "DNACoreErrorEmailList": [ "[email protected]" ],
+        "TestEmailList": [ "[email protected]" ],
+        "ShouldSendRealEmails": false
+      },
+      "FtpApiConfiguration": {
+        "Url": "https://qa-ftpapi.lcu-internal.com/"
+      },
+      "XdiSftpApiConfiguration": {
+        "HostName": "10.147.44.23",
+        "PortNumber": 22,
+        "SftpRootBasePath": "/home/devops/"
+      },
+      "CoreApiWrapperConfiguration": {
+        "CoreApiBaseUrl": "https://qa-core-api-wrapper-api.apps.azure.lcu-internal.com/api/core/"
+      },
+      "ConnectionConfiguration": {
+        "HostUrl": "qa-rabbitmq.lcu-internal.com"
+      },
+      "DnaAuditProcessConfiguration": {
+        "LookBackMinutes": -5,
+        "NumberOfAllowedConsecutiveFailures": 12
+      },
+      "ApiSecurityConfiguration": {
+        "ApiKeyAuthenticationFailureBehavior": "Error"
+      }
+    }
@@ -0,0 +1,5 @@
+resources:
+  - configmap.yaml
+  - ../common
+patchesStrategicMerge:
+  - set_virtual_service.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: member-preferences-api
+spec:
+  hosts:
+  - qa-member-preferences-api.apps.azure.lcu-internal.com
@@ -0,0 +1,8 @@
+resources:
+  - ../../../base
+patchesStrategicMerge:
+  - set_appsettings_deployment.yaml
+  - set_secrets_provider_class.yaml
+images:
+- name: member-preferences-api
+  newName: landmarkcu/lcu.api.internal.memberpreferences-memberpreferences
@@ -0,0 +1,12 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: member-preferences-api
+spec:
+  template:
+    spec:
+      containers:
+      - name: member-preferences-api
+        env:
+         - name: ASPNETCORE_ENVIRONMENT
+           value: "Production"
@@ -0,0 +1,9 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: member-preferences-api-csi-key-vault-secrets-provider
+spec:
+  parameters:
+    userAssignedIdentityID: 9eaefc49-e5d3-48d4-a2b9-b42cf2d8ca03
+    keyvaultName: kv-lz-apps-prod-uscz
@@ -0,0 +1,2 @@
+resources:
+  - normal
@@ -0,0 +1,63 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: memberpreferencesapi-configmap
+data:
+  primary.json: |
+    {
+      "Primary": {
+        "AppName": "Member Preferences Api",
+        "SeqUrl": "https://seq.lcu-internal.com",
+        "XdiBatchProcessCronSchedule": "1 * * * *",
+        "DnaDataAuditProcessCronSchedule": "*/5 3-19 * * *",
+        "FeatureFlags": {
+            "RunHostedServices": true,
+            "RunXdiBatchProcessConsumer": true,
+            "RunXdiSshResponseConsumer": true,
+            "RunAccountDnaFieldChangeConsumer": true,
+            "RunAgreementDnaFieldChangeConsumer": true,
+            "RunOrganizationDnaFieldChangeConsumer": true
+        },
+        "FeatureGates": {
+            "EnableControllers": true,
+            "BounceBackNotifications": false
+        }
+      },
+      "ApiHealthCheckConfiguration": {
+         "VaultStatusConfiguration": {
+            "RunVaultStatusCheck": true,
+            "EnvironmentFromConfigmap": "PROD"
+         }
+      },
+      "SqlConnectionConfiguration": {
+        "MaxRetryCount": 3,
+        "MaxRetryDelay": "00:00:30"
+      },
+      "NotificationApiConfiguration": {
+        "Url": "https://notificationsapi.lcu-internal.com/api/", 
+        "DNACoreErrorEmailList": [ "[email protected]", "[email protected]" ],
+        "TestEmailList": [],
+        "ShouldSendRealEmails": true
+      },
+      "FtpApiConfiguration": {
+        "Url": "https://ftpapi.lcu-internal.com/"
+      },
+      "XdiSftpApiConfiguration": { 
+        "HostName": "sftp.xdi.com",
+        "PortNumber": 22,
+         "SftpRootBasePath": ""
+      },
+      "CoreApiWrapperConfiguration": {
+        "CoreApiBaseUrl": "https://prd-core-api-wrapper-api.apps.azure.lcu-internal.com/api/core/"
+      },
+      "ConnectionConfiguration": {
+        "HostUrl": "rabbitmq.lcu-internal.com"
+      },
+      "DnaAuditProcessConfiguration": {
+        "LookBackMinutes": -5,
+        "NumberOfAllowedConsecutiveFailures": 12
+      },
+      "ApiSecurityConfiguration": {
+        "ApiKeyAuthenticationFailureBehavior": "Error"
+      }
+    }
@@ -0,0 +1,5 @@
+resources:
+  - configmap.yaml
+  - ../common
+patchesStrategicMerge:
+  - set_virtual_service.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: member-preferences-api
+spec:
+  hosts:
+  - prd-member-preferences-api.apps.azure.lcu-internal.com
@@ -0,0 +1,8 @@
+resources:
+  - ../../../base
+patchesStrategicMerge:
+  - set_appsettings_deployment.yaml
+  - set_secrets_provider_class.yaml
+images:
+- name: member-preferences-api
+  newName: landmarkcu/lcu.api.internal.memberpreferences-memberpreferences
@@ -0,0 +1,12 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: member-preferences-api
+spec:
+  template:
+    spec:
+      containers:
+      - name: member-preferences-api
+        env:
+         - name: ASPNETCORE_ENVIRONMENT
+           value: "Development"
@@ -0,0 +1,9 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: member-preferences-api-csi-key-vault-secrets-provider
+spec:
+  parameters:
+    userAssignedIdentityID: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
+    keyvaultName: kv-lz-apps-qa-uscz
@@ -0,0 +1,2 @@
+resources:
+  - normal
@@ -0,0 +1,63 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: memberpreferencesapi-configmap
+data:
+  primary.json: |
+    {
+      "Primary": {
+        "AppName": "Member Preferences Api",
+        "SeqUrl": "https://qa-seq.lcu-internal.com",
+        "XdiBatchProcessCronSchedule": "1 5-18 * * *",
+        "DnaDataAuditProcessCronSchedule": "*/5 3-19 * * *",
+        "FeatureFlags": {
+            "RunHostedServices": false,
+            "RunXdiBatchProcessConsumer": false,
+            "RunXdiSshResponseConsumer": true,
+            "RunAccountDnaFieldChangeConsumer": false,
+            "RunAgreementDnaFieldChangeConsumer": false,
+            "RunOrganizationDnaFieldChangeConsumer": false
+        },
+        "FeatureGates": {
+            "EnableControllers": true,
+            "BounceBackNotifications": true
+        }
+      },
+      "ApiHealthCheckConfiguration": {
+         "VaultStatusConfiguration": {
+            "RunVaultStatusCheck": true,
+            "EnvironmentFromConfigmap": "QA"
+         }
+      },
+      "SqlConnectionConfiguration": {
+        "MaxRetryCount": 3,
+        "MaxRetryDelay": "00:00:30"
+      },
+      "NotificationApiConfiguration": {
+        "Url": "https://qa-notificationsapi.lcu-internal.com/api/", 
+        "DNACoreErrorEmailList": [ "[email protected]" ],
+        "TestEmailList": [ "[email protected]" ],
+        "ShouldSendRealEmails": false
+      },
+      "FtpApiConfiguration": {
+        "Url": "https://qa-ftpapi.lcu-internal.com/"
+      },
+      "XdiSftpApiConfiguration": {
+        "HostName": "10.147.44.23",
+        "PortNumber": 22,
+        "SftpRootBasePath": "/home/devops/"
+      },
+      "CoreApiWrapperConfiguration": {
+        "CoreApiBaseUrl": "https://qa-core-api-wrapper-api.apps.azure.lcu-internal.com/api/core/"
+      },
+      "ConnectionConfiguration":{
+        "HostUrl": "qa-rabbitmq.lcu-internal.com"
+      },
+      "DnaAuditProcessConfiguration": {
+        "LookBackMinutes": -5,
+        "NumberOfAllowedConsecutiveFailures": 12
+      },
+      "ApiSecurityConfiguration": {
+        "ApiKeyAuthenticationFailureBehavior": "Error"
+      }
+    }
@@ -0,0 +1,5 @@
+resources:
+  - configmap.yaml
+  - ../common
+patchesStrategicMerge:
+  - set_virtual_service.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: member-preferences-api
+spec:
+  hosts:
+  - qa-member-preferences-api.apps.azure.lcu-internal.com
@@ -0,0 +1,8 @@
+resources:
+  - ../../../base
+patchesStrategicMerge:
+  - set_appsettings_deployment.yaml
+  - set_secrets_provider_class.yaml
+images:
+- name: member-preferences-api
+  newName: landmarkcu/lcu.api.internal.memberpreferences-memberpreferences
@@ -0,0 +1,12 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: member-preferences-api
+spec:
+  template:
+    spec:
+      containers:
+      - name: member-preferences-api
+        env:
+         - name: ASPNETCORE_ENVIRONMENT
+           value: "Staging"
@@ -0,0 +1,9 @@
+---
+apiVersion: secrets-store.csi.x-k8s.io/v1
+kind: SecretProviderClass
+metadata:
+  name: member-preferences-api-csi-key-vault-secrets-provider
+spec:
+  parameters:
+    userAssignedIdentityID: 64ba01ed-1ecc-4c9b-b56e-8d618f2b81ce
+    keyvaultName: kv-lz-apps-uat-uscz
@@ -0,0 +1,2 @@
+resources:
+  - normal
@@ -0,0 +1,63 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: memberpreferencesapi-configmap
+data:
+  primary.json: |
+    {
+      "Primary": {
+        "AppName": "Member Preferences Api",
+        "SeqUrl": "https://uat-seq.lcu-internal.com",
+        "XdiBatchProcessCronSchedule": "1 5-18 * * *",
+        "DnaDataAuditProcessCronSchedule": "*/5 3-19 * * *",
+        "FeatureFlags": {
+            "RunHostedServices": true,
+            "RunXdiBatchProcessConsumer": true,
+            "RunXdiSshResponseConsumer": true,
+            "RunAccountDnaFieldChangeConsumer": true,
+            "RunAgreementDnaFieldChangeConsumer": true,
+            "RunOrganizationDnaFieldChangeConsumer": true
+        },
+        "FeatureGates": {
+            "EnableControllers": true,
+            "BounceBackNotifications": true
+        }
+      },
+      "ApiHealthCheckConfiguration": {
+         "VaultStatusConfiguration": {
+            "RunVaultStatusCheck": true,
+            "EnvironmentFromConfigmap": "UAT"
+         }
+      },
+      "SqlConnectionConfiguration": {
+        "MaxRetryCount": 3,
+        "MaxRetryDelay": "00:00:30"
+      },
+      "NotificationApiConfiguration": {
+        "Url": "https://uat-notificationsapi.lcu-internal.com/api/", 
+        "DNACoreErrorEmailList": [ "[email protected]" ],
+        "TestEmailList": [ "[email protected]" ],
+        "ShouldSendRealEmails": false
+      },
+      "FtpApiConfiguration": {
+        "Url": "https://uat-ftpapi.lcu-internal.com/"
+      },
+      "XdiSftpApiConfiguration": {
+        "HostName": "10.147.44.23",
+        "PortNumber": 22,
+        "SftpRootBasePath": "/home/devops/"
+      },
+      "CoreApiWrapperConfiguration": {
+        "CoreApiBaseUrl": "https://uat-core-api-wrapper-api.apps.azure.lcu-internal.com/api/core/"
+      },
+      "ConnectionConfiguration": {
+        "HostUrl": "uat-rabbitmq.lcu-internal.com"
+      },
+      "DnaAuditProcessConfiguration": {
+        "LookBackMinutes": -5,
+        "NumberOfAllowedConsecutiveFailures": 12
+      },
+      "ApiSecurityConfiguration": {
+        "ApiKeyAuthenticationFailureBehavior": "Error"
+      }
+    }
@@ -0,0 +1,5 @@
+resources:
+  - configmap.yaml
+  - ../common
+patchesStrategicMerge:
+  - set_virtual_service.yaml
@@ -0,0 +1,8 @@
+---
+apiVersion: networking.istio.io/v1beta1
+kind: VirtualService
+metadata:
+  name: member-preferences-api
+spec:
+  hosts:
+  - uat-member-preferences-api.apps.azure.lcu-internal.com