- Add Helm chart with 19 templates (Deployments, Services, Ingress, ConfigMaps, Secrets, NetworkPolicy, cert-manager) - Add Dockerfiles for 4 microservices (dashboard, data-service, execute-service, news-service) - Add CI/CD workflows (build-test, build-push, deploy) - Add raw K8s manifests, per-service Helm charts, and deploy scripts - Add SOPS-encrypted secrets template and config - Configure deployment to customer1 namespace - Include infrastructure components: PostgreSQL, Redis, Kafka
24 lines
591 B
YAML
24 lines
591 B
YAML
apiVersion: cert-manager.io/v1
|
|
kind: Certificate
|
|
metadata:
|
|
name: api-gateway-mtls-cert
|
|
namespace: customer1
|
|
spec:
|
|
secretName: api-gateway-mtls-secret
|
|
duration: 2160h # 90 days
|
|
renewBefore: 360h # 15 days
|
|
commonName: api-gateway.customer1.svc.cluster.local
|
|
dnsNames:
|
|
- api-gateway
|
|
- api-gateway.customer1
|
|
- api-gateway.customer1.svc
|
|
- api-gateway.customer1.svc.cluster.local
|
|
usages:
|
|
- digital signature
|
|
- key encipherment
|
|
- client auth
|
|
- server auth
|
|
issuerRef:
|
|
name: trading-platform-ca-issuer
|
|
kind: Issuer
|
|
group: cert-manager.io
|