fix ingress destination

base/deployment.yaml

@@ -21,12 +21,12 @@ spec:
         ports:
         - containerPort: 8000
         env:
+        - name: MEMCACHED_HOST_PATH
+          value: "memcached:11211"
         - name: NUM_WORKERS
           value: "3"
         - name: OSM_CACHE_DIR
           value: "/osm-cache"
-        - name: MEMCACHED_HOST_PATH
-          value: "memcached:11211"
         volumeMounts:
         - name: osm-cache
           mountPath: /osm-cache

overlays/prod/kustomization.yaml

@@ -17,3 +17,7 @@ patches:
     target:
       kind: IngressRoute
       name: anyway-ingress
+  - path: patch-deployment-memcached-address.yaml
+    target:
+      kind: Deployment
+      name: anyway-backend

overlays/prod/patch-deployment-memcached-address.yaml

@@ -0,0 +1,3 @@
+- op: replace
+  path: /spec/template/spec/containers/0/env/0/value
+  value: "memcached-prod:11211"

overlays/prod/patch-ingress.yaml

@@ -1,3 +1,6 @@
-- op: replace #action 
+- op: replace
   path: /spec/routes/0/match
   value: Host(`anyway.anydev.info`) || Host(`anyway.kluster.moll.re`) 
+- op: replace
+  path: /spec/routes/0/services/0/name
+  value: anyway-backend-prod

overlays/stg/kustomization.yaml

@@ -16,3 +16,7 @@ patches:
     target:
       kind: IngressRoute
       name: anyway-ingress
+  - path: patch-deployment-memcached-address.yaml
+    target:
+      kind: Deployment
+      name: anyway-backend

overlays/stg/patch-deployment-memcached-address.yaml

@@ -0,0 +1,3 @@
+- op: replace
+  path: /spec/template/spec/containers/0/env/0/value
+  value: "memcached-stg:11211"

overlays/stg/patch-ingress.yaml

@@ -1,3 +1,6 @@
 - op: replace #action 
   path: /spec/routes/0/match
   value: Host(`anyway-stg.anydev.info`) || Host(`anyway-stg.kluster.moll.re`) 
+- op: replace
+  path: /spec/routes/0/services/0/name
+  value: anyway-backend-stg

rbac.yaml

@@ -4,12 +4,16 @@ metadata:
   namespace: anyway-backend
   name: deployment-role
 rules:
-- apiGroups: [""] # "" indicates the core API group
+- apiGroups:
+    - ""
+    - "apps"
+    - "traefik.io"
   resources:
     - pods
     - services
     - deployments
-    - ingresses
+    - ingressroutes
+    - persistentvolumeclaims
   verbs:
     - create
     - delete
@@ -55,5 +59,3 @@ metadata:
   annotations:
     kubernetes.io/service-account.name: deployment-sa
 type: kubernetes.io/service-account-token
-
-