Folder and kustomize restructure setup for oauth-proxy, redis, backstage and hc swiss internal app

- removal of vault agent
- adaptation to preprod env
- folder restructure
- kustomize resources restructure
- enablement of kutomize-argocd vault plugin

Author: LukasCuperDT

kubernetes/helm_charts/local/argo-cd/values/preprod/values-argocd-applications.yaml

@@ -315,7 +315,7 @@ applications:
     config:
       namespace: backstage-dev
       repoURL: 'https://github.com/opentelekomcloud-infra/system-config.git'
-      targetRevision: 'Helm_charts_restructure&Pre-Prod_setup'
+      targetRevision: 'Providing_backstage_kustomize_app'
       path: kubernetes/kustomize/backstage/overlays/dev/
       project: infra
       kustomize: {}

kubernetes/helm_charts/upstream/argo-cd/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: argo-cd
+  repository: https://argoproj.github.io/argo-helm
+  version: 8.1.0
+digest: sha256:621680d81abad601a118427fe36d8a97ebe285aeec023a73ab1abd99807fb8ea
+generated: "2025-09-26T10:55:05.317503+02:00"

kubernetes/helm_charts/upstream/argo-cd/charts/argo-cd-8.1.0.tgz

@@ -0,0 +1,3 @@
+# Environment variables for backstage
+LOG_LEVEL=debug
+NODE_ENV=production

kubernetes/kustomize/backstage/base/backstage.env

@@ -14,6 +14,7 @@ spec:
       labels:
         app.kubernetes.io/component: backstage
     spec:
+      serviceAccountName: backstage
       terminationGracePeriodSeconds: 10
       containers:
         - name: backstage
@@ -22,9 +23,11 @@ spec:
           ports:
             - name: http
               containerPort: 7007
-          env:
-            - name: LOG_LEVEL
-              value: debug
+          envFrom:
+            - configMapRef:
+                name: config
+            - secretRef:
+                name: backstage-secret
           resources:
             requests:
               cpu: "50m"

kubernetes/kustomize/backstage/base/deployment.yaml

@@ -13,3 +13,15 @@ resources:
 - service.yaml
 - ingress.yaml
 - deployment.yaml
+- sa.yaml
+- secret.yaml
+
+configMapGenerator:
+- name: config
+  envs:
+  - backstage.env
+
+generatorOptions:
+  disableNameSuffixHash: false
+  labels:
+    app.kubernetes.io/managed-by: kustomize

kubernetes/kustomize/backstage/base/kustomization.yaml

@@ -0,0 +1,5 @@
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: backstage

kubernetes/kustomize/backstage/base/sa.yaml

@@ -0,0 +1,25 @@
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: backstage-secret
+type: Opaque
+stringData:
+  # Database configuration
+  POSTGRES_HOST: <path:secret/data/backstage/database#host>
+  POSTGRES_PORT: <path:secret/data/backstage/database#port>
+  POSTGRES_USER: <path:secret/data/backstage/database#username>
+  POSTGRES_PASSWORD: <path:secret/data/backstage/database#password>
+
+  # Auth configuration
+  AUTH_GITHUB_CLIENT_ID: <path:secret/data/backstage/auth#github_client_id>
+  AUTH_GITHUB_CLIENT_SECRET: >-
+    <path:secret/data/backstage/auth#github_client_secret>
+
+  # Integration tokens
+  GITHUB_TOKEN: <path:secret/data/backstage/integrations#github_token>
+  GITLAB_TOKEN: <path:secret/data/backstage/integrations#gitlab_token>
+
+  # App configuration
+  BACKEND_SECRET: <path:secret/data/backstage/config#backend_secret>
+  CATALOG_TOKEN: <path:secret/data/backstage/config#catalog_token>