This commit is contained in:
Zeeshaun
2026-04-07 13:11:39 -05:00
parent d9931b3c36
commit e37826fe30
184 changed files with 2192 additions and 2196 deletions
@@ -0,0 +1,10 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_secrets_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider.yaml
@@ -0,0 +1,57 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: member-preferences-api-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: member-preferences-api-csi-key-vault-secrets-provider
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: member-preferences-api-secrets
mountPath: /vault/secrets/member-preferences-api-member-preferences-api-key.json
readOnly: true
subPath: member-preferences-api-member-preferences-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: member-preferences-api-secrets
mountPath: /vault/secrets/member-preferences-api-queue-password.json
readOnly: true
subPath: member-preferences-api-queue-password
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: member-preferences-api-secrets
mountPath: /vault/secrets/member-preferences-api-queue-username.json
readOnly: true
subPath: member-preferences-api-queue-username
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: member-preferences-api-secrets
mountPath: /vault/secrets/member-preferences-api-db-connection.json
readOnly: true
subPath: member-preferences-api-db-connection
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: member-preferences-api-secrets
mountPath: /vault/secrets/member-preferences-api-environment-from-vault.json
readOnly: true
subPath: member-preferences-api-environment-from-vault
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: member-preferences-api-secrets
mountPath: /vault/secrets/member-preferences-api-seq-api-key.json
readOnly: true
subPath: member-preferences-api-seq-api-key
@@ -0,0 +1,28 @@
- op: add
path: /spec/parameters/objects
value: |
array:
- |
objectName: member-preferences-api-member-preferences-api-key
objectType: secret
objectVersion: ""
- |
objectName: member-preferences-api-queue-password
objectType: secret
objectVersion: ""
- |
objectName: member-preferences-api-queue-username
objectType: secret
objectVersion: ""
- |
objectName: member-preferences-api-db-connection
objectType: secret
objectVersion: ""
- |
objectName: member-preferences-api-environment-from-vault
objectType: secret
objectVersion: ""
- |
objectName: member-preferences-api-seq-api-key
objectType: secret
objectVersion: ""
@@ -0,0 +1,8 @@
{
"Primary": {
"FeatureFlags": {
"RunXdiBatchProcessConsumer": false,
"RunDnaAuditProcessConsumer": true
}
}
}
@@ -0,0 +1,40 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
#Test istio process
namePrefix: dna-audit-
configMapGenerator:
- name: member-preferences-api-appsettings
files:
- appsettings/appsettings.json
generatorOptions:
disableNameSuffixHash: true
patches:
- target:
kind: Deployment
path: set_appsettings_deployment.yaml
replacements:
- source:
kind: Deployment
fieldPath: metadata.name
targets:
- select:
kind: Deployment
fieldPaths:
- spec.selector.matchLabels.app
- spec.template.metadata.labels.app
- spec.template.spec.containers.*.name
- select:
kind: Service
fieldPaths:
- spec.selector.app
- select:
kind: VirtualService
fieldPaths:
- spec.http.*.route.*.destination.host
- spec.http.*.name
@@ -0,0 +1,12 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: volume-appsettings
configMap:
name: member-preferences-api-appsettings
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: volume-appsettings
mountPath: /app/config/workload-appsettings
@@ -0,0 +1,10 @@
{
"Primary": {
"FeatureFlags": {
"RunHostedServices": true,
"RunXdiBatchProcessConsumer": true,
"RunXdiSshResponseConsumer": true,
"RunDnaAuditProcessConsumer": false
}
}
}
@@ -0,0 +1,40 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
#Test istio process
namePrefix: normal-
configMapGenerator:
- name: member-preferences-api-appsettings
files:
- appsettings/appsettings.json
generatorOptions:
disableNameSuffixHash: true
patches:
- target:
kind: Deployment
path: set_appsettings_deployment.yaml
replacements:
- source:
kind: Deployment
fieldPath: metadata.name
targets:
- select:
kind: Deployment
fieldPaths:
- spec.selector.matchLabels.app
- spec.template.metadata.labels.app
- spec.template.spec.containers.*.name
- select:
kind: Service
fieldPaths:
- spec.selector.app
- select:
kind: VirtualService
fieldPaths:
- spec.http.*.route.*.destination.host
- spec.http.*.name
@@ -0,0 +1,12 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: volume-appsettings
configMap:
name: member-preferences-api-appsettings
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: volume-appsettings
mountPath: /app/config/workload-appsettings
@@ -0,0 +1,8 @@
{
"Primary": {
"FeatureFlags": {
"RunXdiBatchProcessConsumer": true,
"RunDnaAuditProcessConsumer": false
}
}
}
@@ -0,0 +1,39 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
namePrefix: xdi-batch-
configMapGenerator:
- name: member-preferences-api-appsettings
files:
- appsettings/appsettings.json
generatorOptions:
disableNameSuffixHash: true
patches:
- target:
kind: Deployment
path: set_appsettings_deployment.yaml
replacements:
- source:
kind: Deployment
fieldPath: metadata.name
targets:
- select:
kind: Deployment
fieldPaths:
- spec.selector.matchLabels.app
- spec.template.metadata.labels.app
- spec.template.spec.containers.*.name
- select:
kind: Service
fieldPaths:
- spec.selector.app
- select:
kind: VirtualService
fieldPaths:
- spec.http.*.route.*.destination.host
- spec.http.*.name
@@ -0,0 +1,12 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: volume-appsettings
configMap:
name: member-preferences-api-appsettings
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: volume-appsettings
mountPath: /app/config/workload-appsettings