My Manifest

snippet.yaml

apiVersion: v1
kind: Namespace
metadata:
  labels:
    istio-injection: enabled
  name: websocket-api
---
apiVersion: v1
kind: ServiceAccount
metadata:
  annotations:
    eks.amazonaws.com/role-arn: arn:aws:iam::013206719121:role/external-secrets-s-001-websockets
    meta.helm.sh/release-name: external-secrets
    meta.helm.sh/release-namespace: external-secrets
  labels:
    app.kubernetes.io/instance: external-secrets
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: external-secrets
    app.kubernetes.io/version: v0.9.4
    helm.sh/chart: external-secrets-0.9.4
  name: external-secrets
  namespace: websocket-api
---
apiVersion: v1
data:
  streamers.yaml: |
    ---
    streamerAddresses:
      SPOT_ORDER_BOOK_EVENT: event-streamer-spot-order-book-updates.websocket-api.svc.cluster.local:9000
kind: ConfigMap
metadata:
  name: streamer-config-tkckhh7h9k
  namespace: websocket-api
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: event-streamer-spot-order-book-events
  name: event-streamer-spot-order-book-events
  namespace: websocket-api
spec:
  ports:
  - name: grpc
    port: 9000
    protocol: TCP
    targetPort: 9000
  - name: http
    port: 8080
    protocol: TCP
    targetPort: 8080
  selector:
    app: event-streamer-spot-order-book-events
---
apiVersion: v1
kind: Service
metadata:
  name: websocket-adaptor
  namespace: websocket-api
spec:
  ports:
  - name: http
    port: 8000
    protocol: TCP
    targetPort: 8000
  selector:
    app: websocket-adaptor
  type: ClusterIP
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: event-streamer-spot-order-book-events
  name: event-streamer-spot-order-book-events
  namespace: websocket-api
spec:
  replicas: 2
  selector:
    matchLabels:
      app: event-streamer-spot-order-book-events
  template:
    metadata:
      labels:
        app: event-streamer-spot-order-book-events
      name: event-streamer
    spec:
      containers:
      - env:
        - name: LOG_LEVEL
          value: info
        - name: FEATURE
          value: SPOT_ORDER_BOOK_EVENT
        - name: GRPC_PORT
          value: "9000"
        - name: KAFKA_BROKERS
          value: production-0001-kafka-market-data5-01.amberdata.internal:9092
        image: event_streamer
        imagePullPolicy: IfNotPresent
        name: event-streamer
      restartPolicy: Always
---
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: websocket-adaptor
  name: websocket-adaptor
  namespace: websocket-api
spec:
  replicas: 2
  selector:
    matchLabels:
      app: websocket-adaptor
  template:
    metadata:
      annotations:
        prometheus.io/path: /metrics
        prometheus.io/port: "8000"
        prometheus.io/scrape: "true"
        prometheus.istio.io/merge-metrics: "false"
      labels:
        app: websocket-adaptor
      name: websocket-adaptor
    spec:
      containers:
      - env:
        - name: PG_USER
          valueFrom:
            secretKeyRef:
              key: username
              name: auth-db-credentials
        - name: PG_PASSWORD
          valueFrom:
            secretKeyRef:
              key: password
              name: auth-db-credentials
        - name: PG_HOST
          valueFrom:
            secretKeyRef:
              key: host
              name: auth-db-credentials
        - name: PG_DATABASE
          valueFrom:
            secretKeyRef:
              key: dbname
              name: auth-db-credentials
        - name: PG_PORT
          valueFrom:
            secretKeyRef:
              key: port
              name: auth-db-credentials
        - name: HTTP_PORT
          value: "8000"
        - name: CONFIGMAP_PATH
          value: /etc/configs/streamers.yaml
        image: websocket_adaptor
        imagePullPolicy: IfNotPresent
        name: websocket-adaptor
        volumeMounts:
        - mountPath: /etc/configs
          name: configs
          readOnly: true
      restartPolicy: Always
      volumes:
      - configMap:
          name: streamer-config-tkckhh7h9k
        name: configs
---
apiVersion: external-secrets.io/v1beta1
kind: ExternalSecret
metadata:
  name: auth-db-credentials
  namespace: websocket-api
spec:
  data:
  - remoteRef:
      key: auth-db-credentials
      property: username
    secretKey: username
  - remoteRef:
      key: auth-db-credentials
      property: password
    secretKey: password
  - remoteRef:
      key: auth-db-credentials
      property: host
    secretKey: host
  - remoteRef:
      key: auth-db-credentials
      property: dbname
    secretKey: dbname
  - remoteRef:
      key: auth-db-credentials
      property: port
    secretKey: port
  refreshInterval: 60m
  secretStoreRef:
    kind: SecretStore
    name: secret-store-ssm
  target:
    name: auth-db-credentials