Stéphane Tailland
18a3a6488a
CONTROL_PLANE_REF_NAME held the random suffix the Gateway operator gives
its auto-created mirror CR, looked up by hand. Replacing the Konnect org
recreated those CRs under new suffixes, so the ref named an object that
no longer existed and the domain's Kong entities sat Programmed=False.
Name the ${NAME}-cp mirror declared in k8s-platform's dataplane-template
instead — derived from NAME, so it stays valid across Gateway
recreations and Konnect org changes.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
35 lines
1.1 KiB
YAML
35 lines
1.1 KiB
YAML
apiVersion: kustomize.toolkit.fluxcd.io/v1
|
|
kind: Kustomization
|
|
metadata:
|
|
name: sales-dev-api
|
|
namespace: sales
|
|
spec:
|
|
interval: 10m
|
|
sourceRef:
|
|
kind: GitRepository
|
|
name: sales-api-dev
|
|
path: ./kong
|
|
prune: true
|
|
dependsOn:
|
|
- name: sales-dev-api-gateway
|
|
namespace: flux-system
|
|
postBuild:
|
|
substitute:
|
|
NAME: sales-dev
|
|
NAMESPACE: sales
|
|
CONTROL_PLANE_REF_NAME: sales-dev-cp
|
|
BACKEND_HOST: classic-models-api.classic-models.svc.cluster.local
|
|
OIDC_ISSUER: https://keycloak.sttlab.local/realms/classic-models
|
|
API_AUDIENCE: '["sales-api"]'
|
|
BACKEND_AUDIENCE: '["classic-models-api"]'
|
|
BACKEND_SCOPES: '[]'
|
|
API_RATE_LIMIT_MINUTE: "60"
|
|
# The URI path is the collector's routing key: Fluent Bit tags the
|
|
# record `sales` and turns that into the Loki label domain=sales.
|
|
AUDIT_LOG_ENDPOINT: http://audit-log-collector.observability.svc.cluster.local/sales
|
|
REST_HOSTNAME: sales-dev.sttlab.local
|
|
TOKEN_EXCHANGE_CLIENT_ID: kong-token-exchange-broker
|
|
substituteFrom:
|
|
- kind: Secret
|
|
name: sales-token-exchange-broker
|