New service on universal-chart with Vault Agent: role premises, SA premises-vault, creds for its own postgres, kafka and S3 plus the five neighbour databases the sync script reads. The vad overlay mounts the Kafka CA and drops the prod-sized resource requests; istio-config routes sarex.vadroad.ru/premises/api/ to backend-svc.premises.
11 lines
203 B
YAML
11 lines
203 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- ../base
|
|
- kafka-ca-configmap.yaml
|
|
patches:
|
|
- path: backend.yaml
|
|
target:
|
|
kind: HelmRelease
|
|
name: backend
|