first commit

2026-03-11 11:18:25 -05:00
commit f3cb730f3b
472 changed files with 53651 additions and 0 deletions
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+patches:
+  - target: 
+      kind: Deployment
+    path: set_secrets_deployment.yaml
+  - target:
+      kind: SecretProviderClass
+    path: set_secrets_provider.yaml
@@ -0,0 +1,89 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: online-loan-app-api-secrets
+    csi:
+      driver: secrets-store.csi.k8s.io
+      readOnly: true
+      volumeAttributes:
+        secretProviderClass: normal-online-loan-app-api-csi-key-vault-secrets-provider
+        
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-primary-seq-key.json
+    readOnly: true
+    subPath: online-loan-app-api-primary-seq-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-usps-settings-username.json
+    readOnly: true
+    subPath: online-loan-app-api-usps-settings-username
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-application-storage-password.json
+    readOnly: true
+    subPath: online-loan-app-api-application-storage-password
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-crif-settings-api-settings-username.json
+    readOnly: true
+    subPath: online-loan-app-api-crif-settings-api-settings-username
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-security-settings-private-cert-azure-thumbprint.json
+    readOnly: true
+    subPath: online-loan-app-api-security-settings-private-cert-azure-thumbprint
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-security-settings-public-cert-azure-thumbprint.json
+    readOnly: true
+    subPath: online-loan-app-api-security-settings-public-cert-azure-thumbprint
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-security-settings-token-secret.json
+    readOnly: true
+    subPath: online-loan-app-api-security-settings-token-secret
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-security-settings-digital-insight-consumer-key.json
+    readOnly: true
+    subPath: online-loan-app-api-security-settings-digital-insight-consumer-key
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-security-settings-digital-insight-consumer-secret.json
+    readOnly: true
+    subPath: online-loan-app-api-security-settings-digital-insight-consumer-secret
+    
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: online-loan-app-api-secrets
+    mountPath: /vault/secrets/online-loan-app-api-blob-storage-connection-settings-account-key.json
+    readOnly: true
+    subPath: online-loan-app-api-blob-storage-connection-settings-account-key
@@ -0,0 +1,44 @@
+- op: add
+  path: /spec/parameters/objects
+  value: |
+      array: 
+        - | 
+          objectName: online-loan-app-api-primary-seq-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: online-loan-app-api-usps-settings-username
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: online-loan-app-api-application-storage-password
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: online-loan-app-api-crif-settings-api-settings-username
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: online-loan-app-api-security-settings-private-cert-azure-thumbprint
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: online-loan-app-api-security-settings-public-cert-azure-thumbprint
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: online-loan-app-api-security-settings-token-secret
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: online-loan-app-api-security-settings-digital-insight-consumer-key
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: online-loan-app-api-security-settings-digital-insight-consumer-secret
+          objectType: secret
+          objectVersion: ""
+        - | 
+          objectName: online-loan-app-api-blob-storage-connection-settings-account-key
+          objectType: secret
+          objectVersion: ""
@@ -0,0 +1,3 @@
+{
+
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: online-loan-app-api-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: online-loan-app-api-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings
@@ -0,0 +1,3 @@
+{
+
+}
@@ -0,0 +1,40 @@
+apiVersion: kustomize.config.k8s.io/v1alpha1
+kind: Component
+
+#Test istio process
+namePrefix: normal-
+
+configMapGenerator:
+  - name: online-loan-app-api-appsettings
+    files:
+      - appsettings/appsettings.json
+generatorOptions:
+  disableNameSuffixHash: true
+
+patches:
+  - target:
+      kind: Deployment
+    path: set_appsettings_deployment.yaml
+
+replacements:
+  - source:
+      kind: Deployment
+      fieldPath: metadata.name
+    targets:
+      - select:
+          kind: Deployment
+        fieldPaths:
+          - spec.selector.matchLabels.app
+          - spec.template.metadata.labels.app
+          - spec.template.spec.containers.*.name
+
+      - select:
+          kind: Service
+        fieldPaths:
+          - spec.selector.app
+      
+      - select:
+          kind: VirtualService
+        fieldPaths:
+          - spec.http.*.route.*.destination.host
+          - spec.http.*.name
@@ -0,0 +1,12 @@
+- op: add
+  path: /spec/template/spec/volumes/-
+  value:
+    name: volume-appsettings
+    configMap:
+      name: online-loan-app-api-appsettings
+
+- op: add
+  path: /spec/template/spec/containers/0/volumeMounts/-
+  value:
+    name: volume-appsettings
+    mountPath: /app/config/workload-appsettings