This commit is contained in:
Zeeshaun
2026-04-20 09:53:07 -05:00
parent 3b7195de7f
commit ed133b3470
105 changed files with 33830 additions and 0 deletions
@@ -0,0 +1,46 @@
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: spit
spec:
replicas: 1
selector:
matchLabels:
app: spit
strategy:
rollingUpdate:
maxSurge: 25%
maxUnavailable: 25%
type: RollingUpdate
template:
metadata:
labels:
app: spit
spec:
volumes: []
containers:
- name: spit
env: []
volumeMounts: []
image: spit
resources:
requests:
cpu: "50m"
memory: "512Mi"
limits:
memory: "512Mi"
ports:
- containerPort: 8080
livenessProbe:
initialDelaySeconds: 5
periodSeconds: 5
httpGet:
path: /api/status
port: 8080
readinessProbe:
initialDelaySeconds: 5
periodSeconds: 5
httpGet:
path: /api/status
port: 8080
@@ -0,0 +1,12 @@
---
apiVersion: v1
kind: Service
metadata:
name: spit
spec:
selector:
app: spit
ports:
- port: 8080
targetPort: 8080
@@ -0,0 +1,10 @@
resources:
- Deployment.yaml
- Service.yaml
- virtual-service.yaml
- secrets-provider-class.yaml
images:
- name: spit
newName: landmarkcu/lcu.webapps.marketing.spit-spit
@@ -0,0 +1,11 @@
---
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: spit-csi-key-vault-secrets-provider
spec:
provider: azure
parameters:
usePodIdentity: "false"
useVMManagedIdentity: "true"
tenantId: 63cd1554-2783-4a86-ae50-b9e6c21c9499
@@ -0,0 +1,19 @@
---
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
name: spit
spec:
hosts: []
gateways:
- istio-system/ingress-gateway
http:
- name: spit
match:
- uri:
prefix: /
route:
- destination:
host: spit
port:
number: 8080
@@ -0,0 +1,11 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_secrets_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider.yaml
@@ -0,0 +1,41 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: spit-secrets
csi:
driver: secrets-store.csi.k8s.io
readOnly: true
volumeAttributes:
secretProviderClass: normal-spit-csi-key-vault-secrets-provider
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: spit-secrets
mountPath: /vault/secrets/spit-seq-api-key.json
readOnly: true
subPath: spit-seq-api-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: spit-secrets
mountPath: /vault/secrets/spit-primary-subscription-key.json
readOnly: true
subPath: spit-primary-subscription-key
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: spit-secrets
mountPath: /vault/secrets/spit-azuread-client-id.json
readOnly: true
subPath: spit-azuread-client-id
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: spit-secrets
mountPath: /vault/secrets/spit-azuread-client-secret.json
readOnly: true
subPath: spit-azuread-client-secret
@@ -0,0 +1,21 @@
- op: add
path: /spec/parameters/objects
value: |
array:
- |
objectName: spit-seq-api-key
objectType: secret
objectVersion: ""
- |
objectName: spit-primary-subscription-key
objectType: secret
objectVersion: ""
- |
objectName: spit-azuread-client-id
objectType: secret
objectVersion: ""
- |
objectName: spit-azuread-client-secret
objectType: secret
objectVersion: ""
@@ -0,0 +1,39 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
namePrefix: normal-
configMapGenerator:
- name: spit-appsettings
files:
- appsettings/appsettings.json
generatorOptions:
disableNameSuffixHash: true
patches:
- target:
kind: Deployment
path: set_appsettings_deployment.yaml
replacements:
- source:
kind: Deployment
fieldPath: metadata.name
targets:
- select:
kind: Deployment
fieldPaths:
- spec.selector.matchLabels.app
- spec.template.metadata.labels.app
- spec.template.spec.containers.*.name
- select:
kind: Service
fieldPaths:
- spec.selector.app
- select:
kind: VirtualService
fieldPaths:
- spec.http.*.route.*.destination.host
- spec.http.*.name
@@ -0,0 +1,13 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: volume-appsettings
configMap:
name: spit-appsettings
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: volume-appsettings
mountPath: /app/config/workload-appsettings
@@ -0,0 +1,8 @@
{
"Primary": {
"FileDestination": "\\\\zeus\\DataIntegrationsQA\\Spit\\",
"SeqUrl": "https://qa-seq.lcu-internal.com",
"SpitRoles": "IT Development"
}
}
@@ -0,0 +1,11 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_appsettings_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider_class.yaml
@@ -0,0 +1,6 @@
- op: add
path: /spec/template/spec/containers/0/env/-
value:
name: ASPNETCORE_ENVIRONMENT
value: Development
@@ -0,0 +1,9 @@
---
apiVersion: secrets-store.csi.x-k8s.io/v1
kind: SecretProviderClass
metadata:
name: spit-csi-key-vault-secrets-provider
spec:
parameters:
userAssignedIdentityID: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
keyvaultName: kv-lz-apps-qa-uscz
@@ -0,0 +1,15 @@
resources:
- normal
configMapGenerator:
- name: spit-environment-appsettings
files:
- appsettings/appsettings.json
generatorOptions:
disableNameSuffixHash: true
patches:
- target:
kind: Deployment
path: set_configmap_deployment.yaml
@@ -0,0 +1,13 @@
resources:
- ../../../base
components:
- ../component
- ../../../components/keyvaults/normal
- ../../../components/workloads/normal
patches:
- target:
kind: VirtualService
path: set_virtual_service.yaml
@@ -0,0 +1,4 @@
- op: add
path: /spec/hosts/-
value: local-spit.apps.azure.lcu-internal.com
@@ -0,0 +1,13 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: volume-environment-appsettings
configMap:
name: spit-environment-appsettings
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: volume-environment-appsettings
mountPath: /app/config/environment-appsettings
@@ -0,0 +1,18 @@
{
"Primary": {
"FileDestination": "\\\\zeus\\DataIntegrations\\Spit\\",
"SeqUrl": "https://seq.lcu-internal.com",
"SpitRoles": "SpitUser"
},
"Security": {
"AccessPolicies": {
"SpitUser": {
"Groups": "SpitUser"
}
}
},
"FileOperationsConfiguration": {
"Url": "https://fileoperationsapi.lcu-internal.com"
}
}
@@ -0,0 +1,11 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_appsettings_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider_class.yaml
@@ -0,0 +1,6 @@
- op: add
path: /spec/template/spec/containers/0/env/-
value:
name: ASPNETCORE_ENVIRONMENT
value: Production
@@ -0,0 +1,8 @@
- op: add
path: /spec/parameters/userAssignedIdentityID
value: 9eaefc49-e5d3-48d4-a2b9-b42cf2d8ca03
- op: add
path: /spec/parameters/keyvaultName
value: kv-lz-apps-prod-uscz
@@ -0,0 +1,15 @@
resources:
- normal
configMapGenerator:
- name: spit-environment-appsettings
files:
- appsettings/appsettings.json
generatorOptions:
disableNameSuffixHash: true
patches:
- target:
kind: Deployment
path: set_configmap_deployment.yaml
@@ -0,0 +1,13 @@
resources:
- ../../../base
components:
- ../component
- ../../../components/keyvaults/normal
- ../../../components/workloads/normal
patches:
- target:
kind: VirtualService
path: set_virtual_service.yaml
@@ -0,0 +1,4 @@
- op: add
path: /spec/hosts/-
value: prd-spit.apps.azure.lcu-internal.com
@@ -0,0 +1,13 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: volume-environment-appsettings
configMap:
name: spit-environment-appsettings
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: volume-environment-appsettings
mountPath: /app/config/environment-appsettings
@@ -0,0 +1,18 @@
{
"Primary": {
"FileDestination": "\\\\zeus\\DataIntegrationsQA\\Spit\\",
"SeqUrl": "https://qa-seq.lcu-internal.com",
"SpitRoles": "IT Development"
},
"FileOperationsConfiguration": {
"Url": "https://qa-fileoperationsapi.lcu-internal.com"
},
"Security": {
"AccessPolicies": {
"IT Development": {
"Groups": "IT Development"
}
}
}
}
@@ -0,0 +1,11 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_appsettings_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider_class.yaml
@@ -0,0 +1,6 @@
- op: add
path: /spec/template/spec/containers/0/env/-
value:
name: ASPNETCORE_ENVIRONMENT
value: Development
@@ -0,0 +1,8 @@
- op: add
path: /spec/parameters/userAssignedIdentityID
value: 3286ed9a-f85c-4c50-b742-dbd3c1c3fe1f
- op: add
path: /spec/parameters/keyvaultName
value: kv-lz-apps-qa-uscz
@@ -0,0 +1,15 @@
resources:
- normal
configMapGenerator:
- name: spit-environment-appsettings
files:
- appsettings/appsettings.json
generatorOptions:
disableNameSuffixHash: true
patches:
- target:
kind: Deployment
path: set_configmap_deployment.yaml
@@ -0,0 +1,13 @@
resources:
- ../../../base
components:
- ../component
- ../../../components/keyvaults/normal
- ../../../components/workloads/normal
patches:
- target:
kind: VirtualService
path: set_virtual_service.yaml
@@ -0,0 +1,4 @@
- op: add
path: /spec/hosts/-
value: qa-spit.apps.azure.lcu-internal.com
@@ -0,0 +1,13 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: volume-environment-appsettings
configMap:
name: spit-environment-appsettings
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: volume-environment-appsettings
mountPath: /app/config/environment-appsettings
@@ -0,0 +1,18 @@
{
"Primary": {
"FileDestination": "\\\\zeus\\DataIntegrationsUAT\\Spit\\",
"SeqUrl": "https://uat-seq.lcu-internal.com",
"SpitRoles": "IT Development"
},
"FileOperationsConfiguration": {
"Url": "https://uat-fileoperationsapi.lcu-internal.com"
},
"Security": {
"AccessPolicies": {
"IT Development": {
"Groups": "IT Development"
}
}
}
}
@@ -0,0 +1,11 @@
apiVersion: kustomize.config.k8s.io/v1alpha1
kind: Component
patches:
- target:
kind: Deployment
path: set_appsettings_deployment.yaml
- target:
kind: SecretProviderClass
path: set_secrets_provider_class.yaml
@@ -0,0 +1,6 @@
- op: add
path: /spec/template/spec/containers/0/env/-
value:
name: ASPNETCORE_ENVIRONMENT
value: Staging
@@ -0,0 +1,8 @@
- op: add
path: /spec/parameters/userAssignedIdentityID
value: 64ba01ed-1ecc-4c9b-b56e-8d618f2b81ce
- op: add
path: /spec/parameters/keyvaultName
value: kv-lz-apps-uat-uscz
@@ -0,0 +1,15 @@
resources:
- normal
configMapGenerator:
- name: spit-environment-appsettings
files:
- appsettings/appsettings.json
generatorOptions:
disableNameSuffixHash: true
patches:
- target:
kind: Deployment
path: set_configmap_deployment.yaml
@@ -0,0 +1,13 @@
resources:
- ../../../base
components:
- ../component
- ../../../components/keyvaults/normal
- ../../../components/workloads/normal
patches:
- target:
kind: VirtualService
path: set_virtual_service.yaml
@@ -0,0 +1,4 @@
- op: add
path: /spec/hosts/-
value: uat-spit.apps.azure.lcu-internal.com
@@ -0,0 +1,13 @@
- op: add
path: /spec/template/spec/volumes/-
value:
name: volume-environment-appsettings
configMap:
name: spit-environment-appsettings
- op: add
path: /spec/template/spec/containers/0/volumeMounts/-
value:
name: volume-environment-appsettings
mountPath: /app/config/environment-appsettings