++

apps/eav/base/backend-deployment.yaml

@@ -21,12 +21,12 @@ spec:
         vault.hashicorp.com/agent-pre-populate-only: "true"
         vault.hashicorp.com/auth-path: auth/kubernetes
         vault.hashicorp.com/role: eav
-        vault.hashicorp.com/agent-inject-secret-eav-db: secrets/data/postgresql/apps/eav
+        vault.hashicorp.com/agent-inject-secret-eav-db: secrets/data/apps/eav/postgres
         vault.hashicorp.com/agent-inject-template-eav-db: |-
-          {{- with secret "secrets/data/postgresql/apps/eav" -}}
+          {{- with secret "secrets/data/apps/eav/postgres" -}}
-          DJANGO_POSTGRES_HOST=postgresql.eav.svc.cluster.local
+          DJANGO_POSTGRES_HOST={{ index .Data.data "host" }}
-          DJANGO_POSTGRES_PORT=5432
+          DJANGO_POSTGRES_PORT={{ index .Data.data "port" }}
-          DJANGO_POSTGRES_DATABASE=eav_db
+          DJANGO_POSTGRES_DATABASE={{ index .Data.data "database" }}
           DJANGO_POSTGRES_USER={{ index .Data.data "username" }}
           DJANGO_POSTGRES_PASSWORD={{ index .Data.data "password" }}
           {{- end -}}

apps/eav/base/namespace.yaml

@@ -5,3 +5,4 @@ metadata:
   name: eav
   labels:
     istio-injection: enabled
+    security.deckhouse.io/pod-policy: privileged

apps/eav/d8-ugmk-prod/kustomization.yaml

@@ -0,0 +1,6 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: eav
+resources:
+  - ../base

clusters/d8-ugmk-prod/kustomization.yaml

@@ -24,4 +24,5 @@ resources:
   - ../../apps/auth-flow/d8-ugmk-prod
   - ../../apps/notes/d8-ugmk-prod
   - ../../apps/workspaces/d8-ugmk-prod
-  - ../../apps/rfi/d8-ugmk-prod
+  - ../../apps/rfi/d8-ugmk-prod
+  - ../../apps/eav/d8-ugmk-prod