diff --git a/apps/eav/base/backend-deployment.yaml b/apps/eav/base/backend-deployment.yaml index 892bfa7..5bbbf25 100644 --- a/apps/eav/base/backend-deployment.yaml +++ b/apps/eav/base/backend-deployment.yaml @@ -21,12 +21,12 @@ spec: vault.hashicorp.com/agent-pre-populate-only: "true" vault.hashicorp.com/auth-path: auth/kubernetes vault.hashicorp.com/role: eav - vault.hashicorp.com/agent-inject-secret-eav-db: secrets/data/postgresql/apps/eav + vault.hashicorp.com/agent-inject-secret-eav-db: secrets/data/apps/eav/postgres vault.hashicorp.com/agent-inject-template-eav-db: |- - {{- with secret "secrets/data/postgresql/apps/eav" -}} - DJANGO_POSTGRES_HOST=postgresql.eav.svc.cluster.local - DJANGO_POSTGRES_PORT=5432 - DJANGO_POSTGRES_DATABASE=eav_db + {{- with secret "secrets/data/apps/eav/postgres" -}} + DJANGO_POSTGRES_HOST={{ index .Data.data "host" }} + DJANGO_POSTGRES_PORT={{ index .Data.data "port" }} + DJANGO_POSTGRES_DATABASE={{ index .Data.data "database" }} DJANGO_POSTGRES_USER={{ index .Data.data "username" }} DJANGO_POSTGRES_PASSWORD={{ index .Data.data "password" }} {{- end -}} diff --git a/apps/eav/base/namespace.yaml b/apps/eav/base/namespace.yaml index 0587374..2b1ff7b 100644 --- a/apps/eav/base/namespace.yaml +++ b/apps/eav/base/namespace.yaml @@ -5,3 +5,4 @@ metadata: name: eav labels: istio-injection: enabled + security.deckhouse.io/pod-policy: privileged diff --git a/apps/eav/d8-ugmk-prod/kustomization.yaml b/apps/eav/d8-ugmk-prod/kustomization.yaml new file mode 100644 index 0000000..c837f1f --- /dev/null +++ b/apps/eav/d8-ugmk-prod/kustomization.yaml @@ -0,0 +1,6 @@ +--- +apiVersion: kustomize.config.k8s.io/v1beta1 +kind: Kustomization +namespace: eav +resources: + - ../base \ No newline at end of file diff --git a/clusters/d8-ugmk-prod/kustomization.yaml b/clusters/d8-ugmk-prod/kustomization.yaml index d33e947..0bac459 100644 --- a/clusters/d8-ugmk-prod/kustomization.yaml +++ b/clusters/d8-ugmk-prod/kustomization.yaml @@ -24,4 +24,5 @@ resources: - ../../apps/auth-flow/d8-ugmk-prod - ../../apps/notes/d8-ugmk-prod - ../../apps/workspaces/d8-ugmk-prod - - ../../apps/rfi/d8-ugmk-prod \ No newline at end of file + - ../../apps/rfi/d8-ugmk-prod + - ../../apps/eav/d8-ugmk-prod \ No newline at end of file