++

apps/workspaces/base/backend-deployment.yaml

@@ -22,12 +22,12 @@ spec:
         vault.hashicorp.com/agent-pre-populate-only: "true"
         vault.hashicorp.com/auth-path: auth/kubernetes
         vault.hashicorp.com/role: workspaces
-        vault.hashicorp.com/agent-inject-secret-workspaces-db: secrets/data/postgresql/apps/workspaces
+        vault.hashicorp.com/agent-inject-secret-workspaces-db: secrets/data/apps/workspaces/postgres
         vault.hashicorp.com/agent-inject-template-workspaces-db: |-
-          {{- with secret "secrets/data/postgresql/apps/workspaces" -}}
-          POSTGRES_ADDRESS=postgresql.workspaces.svc.cluster.local
-          POSTGRES_PORT=5432
-          POSTGRES_DB=workspaces_db
+          {{- with secret "secrets/data/apps/workspaces/postgres" -}}
+          POSTGRES_ADDRESS={{ index .Data.data "host" }}
+          POSTGRES_PORT={{ index .Data.data "port" }}
+          POSTGRES_DB={{ index .Data.data "database" }}
           POSTGRES_USER={{ index .Data.data "username" }}
           POSTGRES_PASSWORD={{ index .Data.data "password" }}
           {{- end -}}

apps/workspaces/d8-ugmk-prod/kustomization.yaml

@@ -0,0 +1,11 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+namespace: workspaces
+resources:
+  - ../base
+patches:
+  - path: patch.yaml
+    target:
+      kind: HelmRelease
+      name: frontend

apps/workspaces/d8-ugmk-prod/patch.yaml

@@ -0,0 +1,13 @@
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: frontend
+  namespace: workspaces
+spec:
+  values:
+    services:
+      frontend:
+        deployment:
+          replicaCount:
+            _default: 1

clusters/d8-ugmk-prod/kustomization.yaml

@@ -23,3 +23,4 @@ resources:
   - ../../apps/remarks/d8-ugmk-prod
   - ../../apps/auth-flow/d8-ugmk-prod
   - ../../apps/notes/d8-ugmk-prod
+  - ../../apps/workspaces/d8-ugmk-prod