gcloud-lab/apps/base/customer1/waitlist-api/kustomization.yaml

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
  - deployment.yaml
  - waitlist-telegram-secret.yaml
  - http-route.yaml
  - network-policy.yaml
feat: add siriusdevops CNPG cluster + waitlist API K8s manifests (#112) - New CNPG PostgreSQL cluster (siriusdevops-pgdb) in customer1 namespace - Single-instance, 20Gi storage, GCS backups to siriusdevops-backups/ - Waitlist database definition (waitlist-db.yaml) - Scheduled backup manifest - Waitlist API deployment, service, HTTPRoute, and Telegram secret placeholder - Kustomization wiring for both siriusdevops-db and waitlist-api 2026-05-14 19:24:33 -04:00			`apiVersion: kustomize.config.k8s.io/v1beta1`
			`kind: Kustomization`
			`resources:`
			`- deployment.yaml`
			`- waitlist-telegram-secret.yaml`
			`- http-route.yaml`
fix: container hardening + NetworkPolicy for waitlist-api - deployment.yaml: securityContext (runAsNonRoot, readOnlyRootFilesystem, drop ALL caps) - network-policy.yaml: egress only to CNPG PG (5432) + api.telegram.org (443) - kustomization.yaml: register new NetworkPolicy resource - waitlist-telegram-secret: add admin_api_key field 2026-05-15 00:00:58 +00:00			`- network-policy.yaml`