Validation: Kustomize overlay pal-enterprises prod (#156)
Ticket
ldraney/pal-e-deployments#156 — Kustomize overlay: overlays/pal-enterprises/prod/
Shipped: PR #157 merged (
f980c45).Environment
Prod cluster. Namespace:
pal-enterprises.Checks
| # | Criterion | How to Verify | Result | Evidence |
|---|---|---|---|---|
| 1 | Overlay directory exists | <code>ls overlays/pal-enterprises/prod/</code> | PASS | Contains kustomization.yaml + deployment-patch.yaml |
| 2 | Image set correctly | Inspect kustomization.yaml | PASS | <code>harbor.tail5b443a.ts.net/pal-enterprises/app:latest</code> |
| 3 | Port consistency | Check containerPort, service targetPort, probes | PASS | All port 3000 |
| 4 | Secrets by reference | Grep for inline values | PASS | All via <code>pal-enterprises-secrets</code> secretRef |
| 5 | App running | <code>kubectl get pods -n pal-enterprises</code> | PASS | 1/1 Ready, deployment Available |
| 6 | Health check | <code>/up</code> endpoint | PASS | Returns 200 |
Discovered Issues
Minor: in-cluster service-to-service calls via
pal-enterprises:3000 return 403 due to Rails Host Authorization. Not blocking — only affects hypothetical internal service consumers. Fix: config.hosts << "pal-enterprises" if needed later.Verdict
PASS — all checks green. Ready for done.