fix: skip backgound requests for atlantis secrets sync

2025-06-20 10:10:21 +02:00
parent efd7b6e6c1
commit 207c7abd8a
84 changed files with 6 additions and 0 deletions
@@ -0,0 +1,9 @@
+- op: replace
+  path: /spec/template/spec/containers/0/livenessProbe/httpGet/path
+  value: /healthz
+- op: replace
+  path: /spec/template/spec/containers/0/readinessProbe/httpGet/path
+  value: /healthz
+- op: add
+  path: /spec/template/spec/containers/0/envFrom
+  value: []
@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+patches:
+  - target:
+      version: v1
+      group: apps
+      kind: Deployment
+    path: deployment_patch.yaml
+resources:
+  - _manifest.yaml
@@ -0,0 +1 @@
+oceanbox/petimeter
@@ -0,0 +1,32 @@
+{
+    "oidc": {
+        "issuer": "https://idp.oceanbox.io/dex",
+        "authorization_endpoint": "https://idp.oceanbox.io/dex/auth",
+        "token_endpoint": "https://idp.oceanbox.io/dex/token",
+        "jwks_uri": "https://idp.oceanbox.io/dex/keys",
+        "userinfo_endpoint": "https://idp.oceanbox.io/dex/userinfo",
+        "device_authorization_endpoint": "https://idp.oceanbox.io/dex/device/code",
+        "clientId": "petimeter",
+        "clientSecret": "",
+        "scopes": [
+            "openid",
+            "email",
+            "offline_access",
+            "profile"
+        ]
+    },
+    "sso": {
+        "cookieDomain": ".oceanbox.io",
+        "signedOutRedirectUri": "https://idp.oceanbox.io/dex/static/logout.html",
+        "redis": "prod-redis-master.redis.svc,user=default,password=secret",
+        "appDomain": "atlantis",
+        "dataProtectionKeys": "DataProtection-Keys"
+    },
+    "allowedOrigins": [
+        "https://maps.oceanbox.io",
+        "https://atlantis.srv.oceanbox.io"
+    ],
+    "logService" : "https://seq.adm.oceanbox.io",
+    "logApiKey": "",
+    "deployEnv": "prod"
+}
@@ -0,0 +1,2 @@
+OIDC_CLIENT_SECRET=kkrKo3mmmseMnorf9qw3eklefkoOKFNs
+SEQ_APIKEY=jxkOkWGvN2Cro8C7pwm4
@@ -0,0 +1,23 @@
+- op: replace
+  path: /spec/template/spec/containers/0/env/0
+  value:
+    name: LOG_LEVEL
+    value: "4"
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: REDIS_USER
+    value: default
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: REDIS_PASSWORD
+    valueFrom:
+      secretKeyRef:
+        name: prod-redis
+        key: redis-password
+- op: add
+  path: /spec/template/spec/containers/0/envFrom/-
+  value:
+    secretRef:
+      name: prod-petimeter-env
@@ -0,0 +1,18 @@
+generatorOptions:
+  disableNameSuffixHash: true
+configMapGenerator:
+- name: prod-petimeter-appsettings
+  files:
+    - appsettings.json
+secretGenerator:
+- name: prod-petimeter-env
+  envs:
+  - default.env
+patches:
+  - target:
+      group: apps
+      version: v1
+      kind: Deployment
+    path: deployment_patch.yaml
+resources:
+  - ../base
@@ -0,0 +1,34 @@
+{
+    "oidc": {
+        "issuer": "https://idp.oceanbox.io/dex",
+        "authorization_endpoint": "https://idp.oceanbox.io/dex/auth",
+        "token_endpoint": "https://idp.oceanbox.io/dex/token",
+        "jwks_uri": "https://idp.oceanbox.io/dex/keys",
+        "userinfo_endpoint": "https://idp.oceanbox.io/dex/userinfo",
+        "device_authorization_endpoint": "https://idp.oceanbox.io/dex/device/code",
+        "clientId": "petimeter_dev",
+        "clientSecret": "",
+        "scopes": [
+            "openid",
+            "email",
+            "offline_access",
+            "profile"
+        ]
+    },
+    "sso": {
+        "cookieDomain": ".oceanbox.io",
+        "signedOutRedirectUri": "https://idp.oceanbox.io/dex/static/logout.html",
+        "redis": "staging-redis-master.redis.svc,user=default,password=secret",
+        "appDomain": "atlantis",
+        "dataProtectionKeys": "DataProtection-Keys"
+    },
+    "allowedOrigins": [
+        "https://atlantis.srv.oceanbox.io",
+        "https://maps.oceanbox.io",
+        "https://atlantis.srv.oceanbox.io",
+        "https://atlantis.local.oceanbox.io:8080"
+    ],
+    "logService" : "https://seq.adm.oceanbox.io",
+    "logApiKey": "",
+    "deployEnv": "staging"
+}
@@ -0,0 +1,2 @@
+OIDC_CLIENT_SECRET=kfngKJF9EKVBnnvgkdmPfs0qw3rmjslk
+SEQ_APIKEY=jxkOkWGvN2Cro8C7pwm4
@@ -0,0 +1,23 @@
+- op: replace
+  path: /spec/template/spec/containers/0/env/0
+  value:
+    name: LOG_LEVEL
+    value: "4"
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: REDIS_USER
+    value: default
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: REDIS_PASSWORD
+    valueFrom:
+      secretKeyRef:
+        name: staging-redis
+        key: redis-password
+- op: add
+  path: /spec/template/spec/containers/0/envFrom/-
+  value:
+    secretRef:
+      name: staging-petimeter-env
@@ -0,0 +1,18 @@
+generatorOptions:
+  disableNameSuffixHash: true
+configMapGenerator:
+- name: staging-petimeter-appsettings
+  files:
+    - appsettings.json
+secretGenerator:
+- name: staging-petimeter-env
+  envs:
+  - default.env
+patches:
+  - target:
+      group: apps
+      version: v1
+      kind: Deployment
+    path: deployment_patch.yaml
+resources:
+  - ../base
@@ -0,0 +1,32 @@
+replicaCount: 2
+
+podAnnotations:
+  dapr.io/app-id: "prod-petimeter"
+  dapr.io/enabled: "true"
+  dapr.io/app-port: "8000"
+  dapr.io/config: "tracing"
+  dapr.io/app-protocol: "http"
+  dapr.io/enable-app-health-check: "true"
+  dapr.io/app-health-check-path: "/healthz"
+  dapr.io/app-health-probe-interval: "3"
+  dapr.io/app-health-probe-timeout: "200"
+  dapr.io/app-health-threshold: "2"
+  dapr.io/sidecar-cpu-request: "100m"
+  dapr.io/sidecar-memory-request: "250Mi"
+  dapr.io/sidecar-cpu-limit: "300m"
+  dapr.io/sidecar-memory-limit: "1000Mi"
+  dapr.io/log-as-json: "true"
+
+ingress:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-production
+    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
+  hosts:
+    - host: petimeter.srv.oceanbox.io
+      paths:
+        - path: /
+          pathType: ImplementationSpecific
+  tls:
+    - hosts:
+       - petimeter.srv.oceanbox.io
+      secretName: prod-petimeter-tls
@@ -0,0 +1,33 @@
+replicaCount: 1
+podAnnotations:
+  dapr.io/app-id: "staging-petimeter"
+  dapr.io/enabled: "true"
+  dapr.io/app-port: "8000"
+  dapr.io/config: "tracing"
+  dapr.io/app-protocol: "http"
+  dapr.io/enable-app-health-check: "true"
+  dapr.io/app-health-check-path: "/healthz"
+  dapr.io/app-health-probe-interval: "3"
+  dapr.io/app-health-probe-timeout: "200"
+  dapr.io/app-health-threshold: "2"
+  dapr.io/sidecar-cpu-request: "100m"
+  dapr.io/sidecar-memory-request: "250Mi"
+  dapr.io/sidecar-cpu-limit: "300m"
+  dapr.io/sidecar-memory-limit: "1000Mi"
+  dapr.io/log-as-json: "true"
+image:
+  tag: 2da3ce09-debug
+ingress:
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-staging
+    nginx.ingress.kubernetes.io/proxy-buffer-size: 128k
+    # atlantis.oceanbox.io/expose: internal
+  hosts:
+    - host: petimeter.beta.oceanbox.io
+      paths:
+        - path: /
+          pathType: ImplementationSpecific
+  tls:
+    - hosts:
+        - petimeter.beta.oceanbox.io
+      secretName: staging-petimeter-tls