Initial commit

.gitignore

@@ -0,0 +1 @@
+delete-*

ace/config/argocd/ci/ci-app-rest.yaml

@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: apps-ace-rest-ci-1
+  annotations:
+    argocd.argoproj.io/sync-wave: "300"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: ci
+    server: https://kubernetes.default.svc
+  project: applications
+  source:
+    path: ace/environments/ci
+    repoURL: https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps.git
+    targetRevision: master
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

ace/config/argocd/ci/ci-scc.yaml

@@ -0,0 +1,24 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: ci-scc
+  annotations:
+    argocd.argoproj.io/sync-wave: "250"
+  labels:
+    gitops.tier.group: cntk
+    gitops.tier.layer: applications
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: ci
+    server: https://kubernetes.default.svc
+  project: applications
+  source:
+    path: shared/config/ci/instances/scc
+    repoURL: https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps.git
+    targetRevision: master
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

ace/config/argocd/ci/ci-shared-secrets.yaml

@@ -0,0 +1,24 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: shared-secrets
+  annotations:
+    argocd.argoproj.io/sync-wave: "260"
+  labels:
+    gitops.tier.group: cloudpak
+    gitops.tier.layer: applications
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: tools
+    server: https://kubernetes.default.svc
+  project: applications
+  source:
+    path: shared/config/tools/secrets/
+    repoURL: https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps.git
+    targetRevision: master
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

ace/config/argocd/dev/dev-app-rest.yaml

@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: apps-ace-rest-dev-1
+  annotations:
+    argocd.argoproj.io/sync-wave: "300"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: dev
+    server: https://kubernetes.default.svc
+  project: applications
+  source:
+    path: ace/environments/overlays/dev
+    repoURL: https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps.git
+    targetRevision: master
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

ace/config/argocd/prod/prod-app-rest.yaml

@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: apps-ace-rest-prod-1
+  annotations:
+    argocd.argoproj.io/sync-wave: "300"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: prod
+    server: https://kubernetes.default.svc
+  project: applications
+  source:
+    path: ace/environments/overlays/prod
+    repoURL: https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps.git
+    targetRevision: master
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

ace/config/argocd/staging/stage-app-rest.yaml

@@ -0,0 +1,21 @@
+apiVersion: argoproj.io/v1alpha1
+kind: Application
+metadata:
+  name: apps-ace-rest-staging-1
+  annotations:
+    argocd.argoproj.io/sync-wave: "300"
+  finalizers:
+    - resources-finalizer.argocd.argoproj.io
+spec:
+  destination:
+    namespace: staging
+    server: https://kubernetes.default.svc
+  project: applications
+  source:
+    path: ace/environments/overlays/staging
+    repoURL: https://github.com/cloud-native-toolkit-demos/multi-tenancy-gitops-apps.git
+    targetRevision: master
+  syncPolicy:
+    automated:
+      prune: true
+      selfHeal: true

ace/environments/base/configurations/ibm_ace_server_jks.yaml

@@ -0,0 +1,7 @@
+apiVersion: appconnect.ibm.com/v1beta1
+kind: Configuration
+metadata:
+  name: ibm-ace-server.jks
+spec:
+  type: keystore
+  secretName: ibm-ace-server.jks

ace/environments/base/configurations/ibm_ca_jks.yaml

@@ -0,0 +1,7 @@
+apiVersion: appconnect.ibm.com/v1beta1
+kind: Configuration
+metadata:
+  name: ibm-ca.jks
+spec:
+  type: truststore
+  secretName: ibm-ca.jks

ace/environments/base/configurations/ibm_rest_dbparms_txt.yaml

@@ -0,0 +1,7 @@
+apiVersion: appconnect.ibm.com/v1beta1
+kind: Configuration
+metadata:
+  name: ibm-rest-dbparms.txt
+spec:
+  type: setdbparms
+  secretName: ibm-rest-dbparms.txt

ace/environments/base/configurations/ibm_rest_policy.yaml

@@ -0,0 +1,7 @@
+apiVersion: appconnect.ibm.com/v1beta1
+kind: Configuration
+metadata:
+  name: ibm-rest-policy
+spec:
+  type: policyproject
+  contents: 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

ace/environments/base/configurations/ibm_rest_serverconf_yaml.yaml

@@ -0,0 +1,7 @@
+apiVersion: appconnect.ibm.com/v1beta1
+kind: Configuration
+metadata:
+  name: ibm-rest-serverconf.yaml
+spec:
+  type: serverconf
+  contents: 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

ace/environments/base/integrationServer/IntegrationServer.yaml

@@ -0,0 +1,29 @@
+apiVersion: appconnect.ibm.com/v1beta1
+kind: IntegrationServer
+metadata:
+  name: create-customer-details-rest
+spec:
+  designerFlowsOperationMode: disabled
+  license:
+    accept: true
+    license: L-KSBM-C37J2R
+    use: CloudPakForIntegrationNonProduction
+  replicas: 1
+  router:
+    timeout: 120s
+  service:
+    endpointType: https
+  useCommonServices: true
+  version: 12.0.1.0-r3
+  adminServerSecure: true
+  pod:
+    containers:
+      runtime:
+        image: TO BE REPLACE BY PROMOTIONS PIPELINES
+        imagePullPolicy: Always
+  configurations:
+    - ibm-rest-dbparms.txt
+    - ibm-rest-serverconf.yaml
+    - ibm-rest-policy
+    - ibm-ace-server.jks
+    - ibm-ca.jks

ace/environments/base/kustomization.yaml

@@ -0,0 +1,12 @@
+resources:
+  - secrets/basic-auth-rest-secret.yaml
+  - secrets/ibm-ace-server-jks-secret.yaml
+  - secrets/ibm-ca-jks-secret.yaml
+  - secrets/ibm-client-key-certs-secret.yaml
+  - secrets/ibm-rest-dbparms-secret.yaml
+  - configurations/ibm_rest_serverconf_yaml.yaml
+  - configurations/ibm_rest_dbparms_txt.yaml
+  - configurations/ibm_ace_server_jks.yaml
+  - configurations/ibm_ca_jks.yaml
+  - configurations/ibm_rest_policy.yaml
+  - integrationServer/IntegrationServer.yaml

ace/environments/base/secrets/basic-auth-rest-secret.yaml

@@ -0,0 +1,19 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  creationTimestamp: null
+  name: basic-auth-rest
+spec:
+  encryptedData:
+    password: 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
+    username: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      creationTimestamp: null
+      name: basic-auth-rest
+    type: Opaque
+

ace/environments/base/secrets/functional-test-secrets.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+# Set variables
+USERNAME=<ace_integrationserver username> (aceuser)
+PASSWORD=<ace_integrationserver password> (changeit)
+CERT_PATH=<CERT-PATH>
+SEALEDSECRET_NAMESPACE=sealed-secrets
+
+# Create Kubernetes Secret yaml
+oc create secret generic basic-auth-rest \
+--from-literal=username=${USERNAME} \
+--from-literal=password=${PASSWORD} \
+--type Opaque \
+--dry-run=true -o yaml > delete-basic-auth-rest-secret.yaml
+
+oc create secret generic ibm-client-key-certs \
+--from-file=ibm-ca.crt=${CERT_PATH}/ibm-ca.crt \
+--from-file=ibm-client.crt=${CERT_PATH}/ibm-client.crt \
+--from-file=ibm-client.key=${CERT_PATH}/ibm-client.key \
+--type Opaque \
+--dry-run=true -o yaml > delete-ibm-client-key-certs-secret.yaml
+
+
+# Encrypt the secret using kubeseal and private key from the cluster
+kubeseal --scope cluster-wide --controller-name=sealedsecretcontroller-sealed-secrets --controller-namespace=${SEALEDSECRET_NAMESPACE} -o yaml < delete-basic-auth-rest-secret.yaml > basic-auth-rest-secret.yaml
+kubeseal --scope cluster-wide --controller-name=sealedsecretcontroller-sealed-secrets --controller-namespace=${SEALEDSECRET_NAMESPACE} -o yaml < delete-ibm-client-key-certs-secret.yaml > ibm-client-key-certs-secret.yaml
+
+# NOTE, do not check delete-ibm-entitled-key-secret.yaml into git!
+rm delete-basic-auth-rest-secret.yaml
+rm delete-ibm-client-key-certs-secret.yaml

ace/environments/base/secrets/ibm-ace-server-jks-secret.yaml

@@ -0,0 +1,18 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  creationTimestamp: null
+  name: ibm-ace-server.jks
+spec:
+  encryptedData:
+    configuration: AgBIppieDw4vq9/1nuU3oVx4x653JqHH2rvtuQIsOGE/WL1eYxZqQsaTJm5gxGpYvWq7FEZkPxDPomKgUkvHDx3bsr9sgXs6IPqZRReiE9gPEVfbks8IS+CEl8hJltAt9sR5zTEBBKXbQjUUHSHkoI82Xe23idodjqhHR4hzYC0hmFua9VtR61czjf0J22ivKMMLjXUjKW8nc5dQliRC6KUUtXkR4GqKlhajO5B88vzwU521k3DZm+BiycbtXeqi9U3n2GIWahJ8gO7364osIYuNShFRBLgDn4X76nXXsPWpIY53U29AVB71SeFhLP6vr66x3LNGdc5NWRJkFum2wv/0YPjnAZjIRUk+kSnZctsVrWkS3qXiLxw+FqtKJ02RM+Zh5VkCJu1oxG133l9ynz4Lr5EctbErQw4yX9uYRi4SqA7qOCkik7lgGnIQ6EQu6lbixv+KW/uloJen1yNE6IXEWw2ijvOZ2LYeZuynxKo7IgkjJ8XxLpo3umEyMwtvGYKF0xYm4o94n5xyc+7QvGR/iE4DeLFu2lvVzLDp0HahdxUZ4B/1cz8jjcubq1SSXhfk9NVm6fdJC845Mbn4DDJucbG4a6XK8gowNaUDEQfzJuJutpRkLYk8KuIbKklhplaWivHfHBBNCB52xdOWP60zhAmUXcosjID+vYLI4+RxvtTz8fdV/fe+GDu1UL+LERkEL8CIhOMfjk6HJe/+URxN5ubbJMbGodPqVENIg8NIqAEobezg8Q1yZbzjLgc2OLCV3MRWRyWJTgP1QUNKtiOol5S4xktYRwIy0cyjlrTYJkojqzBCSg+1FaGaoIFWkBvusr9hUnsm0GWFcfATjmkxKe4/kquKJHzAVLbsieLsXg7gYBkWDz/ucWIfq67ENaqr0H3iKnhqT/IF444P+0RdVezCq6ZeI4a8aN13rwBY9xCiX+FIdZvrkfIU7SEETmvxxlHHCHPmdF+EEgPa8Og4OsMEUpYVSB1OQ3a5T6O12GuqRjVeo8yl0xxHa/owqG0sv4ysep8dysGBmi64pxbcyyjgKYB1X8PqHMZe4Q6z6EE+CjqDDJee5LjnW97pQ/HlHu0daZATDI0uBpuW4Ca79wCH53+GMqiFErlIuuJxGszFnBTM/jqAEZffVrJqbnHDyNIHjzMstTOc1h47RuUk/LPafcur+KY0t7kzKHUn1/19PoLT405UB6a7BN1YPsVTwuhp4OP21Yc21xCjkR2xDdg2eCtTatuQ/qHofYwQ5/n5B9/oQKb/SyIZK0jxxKnAB56O2/qIJXNSRcV+gEHB+swfgJhg45MiFA9DCvBmnsQZo0SllYVMU/QRqPFu+Dde7fD3egUOa2bDKUYVQwi/koeBLKTm0fpdG/wwM0qNiNvcII7WuSQ8VtJxdHY4CQ72nIGLxbLZgxThxAUPFjToL8M15IhAKDpt2pg+p5AL+ggYHkWwENiG7MqmLv5nRfKw59gp+wNb9EyJLwa1X1cJsBhp17qgtymYo5pMB4URyzEPVMNeRsYkB8airX8KrUHp0LNdvtiCUDpLn1wDgayjlOQGRozEyH+ryVbpbbgeZr6l1gyBmDi2/6qm3RRFBYkTcLzCvBp5bLOROA1T3MaZvmdIEf1FEXy0KrCn+cfPFbyuf8IWdGaKrS0QssIVsm6O04F/hAwk9pprXkf3lJxZ6Hey3IaVbeneQNpU+ke3RodlIEhP42tEjmCTeRAmPQn0FeHLvRsf3Ja8HZYKqBXK76+I6ktzbUaaL4cBG7/FPdafxEKTh2nqI2383GD9ipJ0AiNKV6w+d5jafeF8F+B+LHv+GQA5sn4+6lWhvogGomoy47JhpFDxXlavlDVrIyM2s7akfbem1Xdi/mPewGQYWHiGg7KwOTHVjH1a8UZUIm+nX/vzGQ7Xv8VahpHHc1J5rrK9NyjtVm1AOpRZFpsK/MNbPrhNzkrESP5vy5N70Ud6UJeuaxNL6HaWuYYaAG04Zbw7ClBtky1cY2zBJz7kvlYbYKMogyiHLCzbyIIvEV1VEKuSH12mj375L4cP9mLRX/fW8p9W2E9HuTEKjDw8LIL0/VebJAbQ+AKd8cZd9T04grC3qoRRH29biHiqzOjzxjIbZP+bQj1euQoQllVP3Rza5OpVppi0V6ltJVOBi8EaTEORSkkbB9DbRXKmY0LtutS9PmZRItn1TFPh6Wj8rhAhWcUaxOcmjw1jBK7v2ltK6LODcoMwiV0bC95CwqI2SnvUZpWdXpH6BJqWUODBdee1C7bwWoMUN3LpCO2b44EPAgPZLo7yRQBrt4V8j0XNEyxM+3ezKe3NIulNN0q5tBfz8MxrqKVzeJTxEW8srh0Zrh/f/xsy66m0FfxOme8YnMBPmXww0Dn7UGdBzIrwlbzSsSSUoe8gLXYPQ9ksGv4+VKf7woEsRj0JF0yBFvvTBjEXxk9FUfv6TslTVYiyAWE2tojSXtGposdlGhykBqzi1XIp6UOXvIwetYojCfzm8YmL1KOHSMQsjGp/ovFk1EdUFyGCaAM9mHGSrBW8bIfioEwouFrRS21QNDYdpG6VzxmRG/umvmK9Id92A5tu2M4DYWg+dZ6HqTSBzSVRSf4bN8TbeqWfAbHrpS0RkqhVOOiMjpLGy1TgIo1hYCZkB6VxCOd+tQLDLcPpWkePdC/jWUJXVCB6rPjeOWKJykQHNAG10DcLxNT/qhqEcaFwigR6q4vKSGB5cfokU2wex0lqzXwtfrTyJgxEb3ZLtf4stfAv57D2IZelfHzFN6BSTIfKC6UDeghG+EkDqecH8jgq8XLFurlKjeFU+GDME7yUEy1wxms3MZ703zC9A8TkJB9sAfStdsIPcNtFKrUqmFk593JDnH4KZRJLf7qWwHOKlokIFHoOkUy0z58w1RszLly7qzG5GBTLEkEPVB10FWYQel465qT616HbTi8+UIplFraRQEHW7DjzIQZlHm2Lyf45EF2hiHV05HsBiqZdcAaKcXG18yNCq1jsfTYNhploX89/or0S52CecKenU5zXoIXbrXff7lYtmf+z3qoS88uG3rpNzmHE5Jry7ZCynpyONCA6J4B+HtIw21+i4ZPADX8EUjsESrgKTYm1Tas+E4GjPLIbBZXlosEOW0SQ4yJz7efyACK8ZviZbJQUGrr4CgqQw05xETmtRIke1YbX0u0CHjdszkHPbN5SFm+Yoi3N4hf7hosLsRp8kulFrCTew1p6Cd8xJ/1oIpiWKIBV+XpNBZMVdO7PWu/PLRN5fI7rtkbKeOfGNvusO1wkUveMAAPaVts+7FYbXPU2zm8rTcd9iftFyXLOjOLmvbSIoa+gxbWDB5puL/viru8T+Mgq+zc+8EtscLKEnQ/Mdx5SL97Eu4jKWbBtTSBNJQlcf60iLlUrhO2E4NQyA8t4MY6rrnnREg2dcahFmy7VOKoDUIP5c4ZLhkH7P45WZ+72WhROLTA7xoZ7uAsnh/v2mlIUUru3eXa/IJEmsK+k6nl6nYBZO4gVraT1eajGrfa1b9o2AuyMKO0TzaLZK5G1k0ICKP4Z0N/q47ZOUEzvKJ2C3DxnQ92yE2CsehQ9QuyRwL8CazIhnHQ6GiiiGrd/gtDI6rIK2nW57t4FvtUhleJivtqgKtHF7CrOZ4VF9PotXksw6LkGbHcZJgman/xgilcLMwWPJ2j3T0604Bx/SHjg/JbKqhM9h1G314TLtaLILNuoFGPgQA8uEkubZCdyY+ufh/0PM7K5bCnH+P9aoVA8OgQE8St7ONObR+BYd2qBAuvnw5JknLaQ8Ty4+P0UlrvLdVMWViYb4rF0gzXdj+FVNW/YoaqURb4ONVBXpV+QGaqK40W/H8pTsdIoxnRAxsgpthuGlxyLOu1aSi3VVOilQ4xkJbMYYPYpLU2dVt1FV7oS2oQXKXi0DuT3IOmPptGECSI3Bi5SpcJfFTv2SkAK0V/R+1chwOA4WJwihBfspuXcCmgR6qK4miHBo4vIasP3fNLfgI6tD7TldgBvtldvE4MGfENzgiBg03GrlxWltRjG/qdnYbiE1KTKpCECo0PriuqFJxRnEyXqLKmcWoJDg9KgkEI52KdR4UiskkSDAFcxA+BQFTD1DjIa2twLTGfHa2yoEywDa+CNJx40a8jhMTlFp0ipV54R3AobCSLkvkMiMdXsEtVcDFvZuKkpYM0itoLyoYAg57Ndx0Xv
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      creationTimestamp: null
+      name: ibm-ace-server.jks
+    type: Opaque
+

ace/environments/base/secrets/ibm-ca-jks-secret.yaml

@@ -0,0 +1,18 @@
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  annotations:
+    sealedsecrets.bitnami.com/cluster-wide: "true"
+  creationTimestamp: null
+  name: ibm-ca.jks
+spec:
+  encryptedData:
+    configuration: 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
+  template:
+    metadata:
+      annotations:
+        sealedsecrets.bitnami.com/cluster-wide: "true"
+      creationTimestamp: null
+      name: ibm-ca.jks
+    type: Opaque
+