- Scaffold trading-platform under apps/base/customer1/trading-platform/
- Add 4 microservice deployments: data-service, execute-service, news-service, dashboard
- Add ConfigMaps with DB/Kafka/Redis connection configs
- Add HTTPRoutes via Gateway API (external-http-gateway)
- Add NetworkPolicies for inter-service and DB/Kafka/Redis egress
- Add SOPS-encrypted secrets (age key)
- Add Kafka (KRaft) and Redis infrastructure to hermes-db/
- Update root and staging kustomizations
All containers: non-root, readOnlyRootFilesystem, resource limits, health probes
Images: ghcr.io/sirius0xdev/trading-{service}:latest
53 lines
1.1 KiB
YAML
53 lines
1.1 KiB
YAML
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: trading-dashboard-route
|
|
namespace: customer1
|
|
spec:
|
|
parentRefs:
|
|
- name: external-http-gateway
|
|
hostnames:
|
|
- "sirius-sec.com"
|
|
- "www.sirius-sec.com"
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /trade
|
|
backendRefs:
|
|
- name: trading-dashboard-svc
|
|
port: 80
|
|
---
|
|
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: trading-api-routes
|
|
namespace: customer1
|
|
spec:
|
|
parentRefs:
|
|
- name: external-http-gateway
|
|
hostnames:
|
|
- "sirius-sec.com"
|
|
- "www.sirius-sec.com"
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /api/data
|
|
backendRefs:
|
|
- name: trading-data-service
|
|
port: 80
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /api/execute
|
|
backendRefs:
|
|
- name: trading-execute-service
|
|
port: 80
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /api/news
|
|
backendRefs:
|
|
- name: trading-news-service
|
|
port: 80
|