devel: rename manifests/ to kustomizations/

2024-06-06 08:52:13 +02:00
parent e0af3046ca
commit accd4d3e4e
149 changed files with 0 additions and 0 deletions
@@ -0,0 +1,48 @@
+{
+    "connString": "Username=app;Password=secret;Host=prod-archmeister-rw;Port=5432;Database=app;Pooling=true;",
+    "oidc": {
+        "issuer": "https://idp.oceanbox.io/dex",
+        "authorization_endpoint": "https://idp.oceanbox.io/dex/auth",
+        "token_endpoint": "https://idp.oceanbox.io/dex/token",
+        "jwks_uri": "https://idp.oceanbox.io/dex/keys",
+        "userinfo_endpoint": "https://idp.oceanbox.io/dex/userinfo",
+        "device_authorization_endpoint": "https://idp.oceanbox.io/dex/device/code",
+        "clientId": "archmeister",
+        "clientSecret": "",
+        "scopes": [
+            "openid",
+            "email",
+            "offline_access",
+            "profile"
+        ]
+    },
+    "sso": {
+        "cookieDomain": ".oceanbox.io",
+        "signedOutRedirectUri": "https://idp.oceanbox.io/dex/static/logout.html",
+        "redis": "prod-redis-master.redis.svc,user=default,password=secret",
+        "appDomain": "atlantis",
+        "dataProtectionKeys": "DataProtection-Keys"
+    },
+    "allowedOrigins": [
+        "https://maps.oceanbox.io",
+        "https://atlantis.srv.oceanbox.io",
+        "https://maps.relic.oceanbox.io",
+        "https://sorcerer.data.oceanbox.io",
+        "https://sorcerer.ekman.oceanbox.io",
+        "https://sorcerer.jonas.ekman.oceanbox.io",
+        "https://sorcerer.simkir.ekman.oceanbox.io",
+        "https://sorcerer.stig.ekman.oceanbox.io",
+        "https://atlantis.beta.oceanbox.io",
+        "https://atlantis.jonas.dev.oceanbox.io",
+        "https://atlantis.stig.dev.oceanbox.io",
+        "https://atlantis.simkir.dev.oceanbox.io",
+        "https://atlantis.local.oceanbox.io:8080"
+    ],
+    "logService" : "https://seq.adm.oceanbox.io",
+    "logApiKey": "",
+    "cliUsers": [
+        "admin:en-to-tre-fire"
+    ],
+    "cerbosUrl": "http://prod-cerbos.idp.svc:3593",
+    "deployEnv": "prod"
+}
@@ -0,0 +1,2 @@
+OIDC_CLIENT_SECRET=ieK3yak9zoh3yeewee8quahY6seiv7Ro
+SEQ_APIKEY=mxv08mP4RDQE7vgUkbfC
@@ -0,0 +1,44 @@
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: DB_PASSWORD
+    valueFrom:
+      secretKeyRef:
+        name: prod-archmeister-app
+        key: password
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: DB_USERNAME
+    valueFrom:
+      secretKeyRef:
+        name: prod-archmeister-app
+        key: username
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: DB_HOST
+    value: prod-archmeister-rw
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: REDIS_USER
+    value: default
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: REDIS_PASSWORD
+    valueFrom:
+      secretKeyRef:
+        name: prod-redis
+        key: redis-password
+- op: add
+  path: /spec/template/spec/containers/0/env/-
+  value:
+    name: RABBITMQ_USER
+    value: user
+- op: add
+  path: /spec/template/spec/containers/0/envFrom/-
+  value:
+    secretRef:
+      name: prod-archmeister-env
@@ -0,0 +1,3 @@
+- op: replace
+  path: /spec/rules/0/http/paths/0/path
+  value: /internal
@@ -0,0 +1,24 @@
+generatorOptions:
+  disableNameSuffixHash: true
+secretGenerator:
+- name: prod-archmeister-appsettings
+  files:
+  - appsettings.json
+- name: prod-archmeister-env
+  envs:
+  - default.env
+patches:
+- path: deployment_patch.yaml
+  target:
+    version: v1
+    group: apps
+    kind: Deployment
+- path: ingress_patch.yaml
+  target:
+    group: networking.k8s.io
+    kind: Ingress
+    name: prod-archmeister-internal
+    annotationSelector: atlantis.oceanbox.io/expose=internal
+    version: v1
+resources:
+- ../base