Initial render: k3s-dev environment

2026-03-07 15:00:05 +00:00
commit a787720f2a
306 changed files with 75879 additions and 0 deletions
--- a/rendered/manifests/k3s-dev/abinitio-platform/queryit/apps_v1_deployment_queryit-0.yaml
+++ b/rendered/manifests/k3s-dev/abinitio-platform/queryit/apps_v1_deployment_queryit-0.yaml
@@ -0,0 +1,409 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/instance: queryit-0
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: queryit
+    app.kubernetes.io/part-of: AbInitio
+    app.kubernetes.io/version: 4.4.1
+    helm.sh/chart: queryit-2.4.3-a
+  name: queryit-0
+  namespace: abinitio
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: queryit-0
+      app.kubernetes.io/name: queryit
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/instance: queryit-0
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: queryit
+        app.kubernetes.io/part-of: AbInitio
+        app.kubernetes.io/version: 4.4.1
+        helm.sh/chart: queryit-2.4.3-a
+      name: queryit-0
+    spec:
+      containers:
+      - args:
+        - --ab-k8s-start-reporter
+        - "true"
+        - --ab-k8s-job-launch-script
+        - /ab-setup/setup_pod.sh
+        command:
+        - ab-container-entrypoint.ksh
+        env:
+        - name: AB_AIR_ENCRYPTED_PASSWORD
+          value: file=/secrets/aiadmin/password
+        - name: AB_AIR_ROOT
+          value: //eme-0.eme-headless/abinitio/eme/eme
+        - name: AB_AIR_USER
+          value: aiadmin
+        - name: AB_ALLOW_FILE_LOCK_ON_REMOTE_FILE_SYSTEM
+          value: "true"
+        - name: AB_AUTHORIZATION_GATEWAY_URL
+          value: http://authgateway:8080/authgateway
+        - name: AB_BRIDGE_CONFIGURATION_DIR
+          value: /abinitio/bridge
+        - name: AB_BRIDGE_CONFIGURATION_NAME
+          value: container-bridge
+        - name: AB_CHARSET
+          value: utf-8
+        - name: AB_CONFIGURATION
+          value: /config/pod/abinitiorc:/config/pod/apphubrc
+        - name: AB_CONNECTION_BRIDGE_ENCRYPTED_RPC_ENCRYPTION_KEY
+          value: file=/secrets/bridge/password
+        - name: AB_CONNECTION_BRIDGE_PORT
+          value: "7070"
+        - name: AB_CONNECTION_BRIDGE_RPC_ENCRYPTION_TYPE
+          value: aes128-gcm
+        - name: AB_CONNECTION_BRIDGE_SECURITY_CONFIGURATION
+          value: container-bridge-security
+        - name: AB_HOSTNAME_KEYSERVER_URLS
+          value: abks://key-server:6151
+        - name: AB_IPV4_ONLY
+          value: "true"
+        - name: AB_K8S_MAX_IDLE_SECONDS
+          value: "0"
+        - name: AB_K8S_START_BRIDGE
+          value: background
+        - name: AB_K8S_START_REPORTER
+          value: "true"
+        - name: AB_KEY_DAEMON_DIR
+          value: /tmp/abkc/data
+        - name: AB_MHUB_ENCRYPTED_PASSWORD
+          value: file=/secrets/aiadmin/password
+        - name: AB_MHUB_URL
+          value: http://metadatahub:8080/metadatahub
+        - name: AB_MHUB_USERNAME
+          value: aiadmin
+        - name: AB_MUX_ENABLE_AG_CREDENTIAL_MAPPING
+          value: "false"
+        - name: AB_OPS_CONSOLE_URL
+          value: http://controlcenter:8080/controlcenter
+        - name: AB_OPS_PHYSICAL_HOSTNAME
+          value: queryit-0
+        - name: AB_OPS_WSS_ENCRYPTED_PASSWORD
+          value: file=/secrets/ocagent/password
+        - name: AB_OPS_WSS_USERNAME
+          value: ocagent
+        - name: AB_PASSWORD_KEY_FILE
+          value: /secrets/password_key_file/password
+        - name: BRIDGE_AB_ENCRYPTED_KEY
+          value: file=/secrets/bridge/password
+        - name: CC_ADMIN_ENCRYPTED_PASSWORD
+          value: file=/secrets/aiadmin/password
+        - name: CC_ADMIN_USERNAME
+          value: aiadmin
+        - name: CMAP_MOUNT
+          value: /config/pod
+        - name: DATACATALOG_ENABLE
+          value: "true"
+        - name: DATACATALOG_ENCRYPTED_PASSWORD
+          value: file=/secrets/aiadmin/password
+        - name: DATACATALOG_USERNAME
+          value: aiadmin
+        - name: DEPLOY_NAME
+          value: queryit
+        - name: LOAD_PHYSOBJECTS
+          value: "true"
+        - name: METADATA_LOADER_HOST
+          value: metadata-loader
+        - name: METADATA_LOADER_PKG_DIR
+          value: /abinitio/package/physobjects
+        - name: NAMESPACE
+          value: abinitio
+        - name: POD_IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        - name: POD_LABEL
+          value: 'abinitio/product: queryit, abinitio/deployment: queryit'
+        - name: POD_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
+        - name: POD_SERVICE
+          value: queryit-0
+        - name: POD_SERVICE_HEADLESS
+          value: queryit-0-headless
+        image: asia-southeast1-docker.pkg.dev/str-22391/cloudplatform-proxy/aidp/queryit:4.4.1.1-1
+        imagePullPolicy: IfNotPresent
+        name: queryit
+        readinessProbe:
+          exec:
+            command:
+            - stat
+            - /tmp/.pod.ready
+          failureThreshold: 240
+          periodSeconds: 10
+        resources:
+          limits:
+            ephemeral-storage: 8Gi
+            memory: 8Gi
+          requests:
+            cpu: "1"
+            ephemeral-storage: 8Gi
+            memory: 4Gi
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsGroup: 1000
+          runAsNonRoot: true
+          runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
+        volumeMounts:
+        - mountPath: /config/pod
+          name: pod-config
+        - mountPath: /config/pod/enterprise-data-masking
+          name: enterprise-data-masking
+          readOnly: true
+        - mountPath: /abinitio
+          name: abinitio-local
+        - mountPath: /secrets/aiadmin/password
+          name: aiadmin
+          subPath: password
+        - mountPath: /secrets/ocagent/password
+          name: ocagent
+          subPath: password
+        - mountPath: /secrets/bridge/password
+          name: bridge
+          subPath: password
+        - mountPath: /secrets/eme_join_user/password
+          name: eme-join-user
+          subPath: password
+        - mountPath: /secrets/qi_join_user/password
+          name: qi-join-user
+          subPath: password
+        - mountPath: /secrets/dcs_utility_user/password
+          name: dcs-utility-user
+          subPath: password
+        - mountPath: /secrets/mhub_utility_user/password
+          name: mhub-utility-user
+          subPath: password
+        - mountPath: /secrets/ag_db_importer/password
+          name: ag-db-importer
+          subPath: password
+        - mountPath: /secrets/admin/password
+          name: admin
+          subPath: password
+        - mountPath: /secrets/ag_ui_importer/password
+          name: ag-ui-importer
+          subPath: password
+        - mountPath: /secrets/cafe_join_user/password
+          name: cafe-join-user
+          subPath: password
+        - mountPath: /secrets/cc_join_user/password
+          name: cc-join-user
+          subPath: password
+        - mountPath: /secrets/dcs_join_user/password
+          name: dcs-join-user
+          subPath: password
+        - mountPath: /secrets/ei_join_user/password
+          name: ei-join-user
+          subPath: password
+        - mountPath: /secrets/mhub_join_user/password
+          name: mhub-join-user
+          subPath: password
+        - mountPath: /secrets/qiadmin_join_user/password
+          name: qiadmin-join-user
+          subPath: password
+        - mountPath: /secrets/sd_join_user/password
+          name: sd-join-user
+          subPath: password
+        - mountPath: /secrets/trw_join_user/password
+          name: trw-join-user
+          subPath: password
+        - mountPath: /secrets/mhub_db_importer/password
+          name: mhub-db-importer
+          subPath: password
+        - mountPath: /secrets/mhub_ui_importer/password
+          name: mhub-ui-importer
+          subPath: password
+        - mountPath: /secrets/ag_appserver/password
+          name: ag-appserver
+          subPath: password
+        - mountPath: /secrets/ag_report/password
+          name: ag-report
+          subPath: password
+        - mountPath: /secrets/cc_jdbc/password
+          name: cc-jdbc
+          subPath: password
+        - mountPath: /secrets/dcs_hmac_key/password
+          name: dcs-hmac-key
+          subPath: password
+        - mountPath: /secrets/abinitio/password
+          name: abinitio
+          subPath: password
+        - mountPath: /secrets/mhub_appserver/password
+          name: mhub-appserver
+          subPath: password
+        - mountPath: /secrets/mhub_report/password
+          name: mhub-report
+          subPath: password
+        - mountPath: /secrets/runtime_locator_join_user/password
+          name: runtime-locator-join-user
+          subPath: password
+        - mountPath: /secrets/password_key_file/password
+          name: password-key-file
+          subPath: password
+        - mountPath: /ab_share
+          name: ab-share-data-and-appconf-root
+        - mountPath: /tmp
+          name: tmp-volume
+      hostAliases:
+      - hostnames:
+        - queryit-0.abinitio
+        ip: 127.0.0.1
+      hostname: queryit-0
+      initContainers:
+      - args:
+        - -c
+        - cp /edm.tar.gz /tmp/edm.tar.gz
+        command:
+        - sh
+        image: asia-southeast1-docker.pkg.dev/str-22391/cloudplatform-proxy/aidp/enterprise-data-masking:4.4.1.1-1
+        imagePullPolicy: IfNotPresent
+        name: copy-edm
+        resources:
+          limits:
+            ephemeral-storage: 2Gi
+            memory: 1Gi
+          requests:
+            cpu: 500m
+            ephemeral-storage: 1Gi
+            memory: 1Gi
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsGroup: 1000
+          runAsNonRoot: true
+          runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
+        volumeMounts:
+        - mountPath: /tmp
+          name: tmp-volume
+      securityContext:
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
+        runAsGroup: 1000
+        runAsNonRoot: true
+        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
+      serviceAccountName: abinitio-sa
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - configMap:
+          defaultMode: 511
+          name: queryit-0
+        name: pod-config
+      - configMap:
+          name: enterprise-data-masking
+        name: enterprise-data-masking
+      - name: abinitio-local
+        persistentVolumeClaim:
+          claimName: queryit-0-claim
+      - emptyDir: {}
+        name: tmp-volume
+      - name: aiadmin
+        secret:
+          secretName: aiadmin
+      - name: ocagent
+        secret:
+          secretName: ocagent
+      - name: bridge
+        secret:
+          secretName: bridge
+      - name: eme-join-user
+        secret:
+          secretName: eme-join-user
+      - name: qi-join-user
+        secret:
+          secretName: qi-join-user
+      - name: dcs-utility-user
+        secret:
+          secretName: dcs-utility-user
+      - name: mhub-utility-user
+        secret:
+          secretName: mhub-utility-user
+      - name: ag-db-importer
+        secret:
+          secretName: ag-db-importer
+      - name: admin
+        secret:
+          secretName: admin
+      - name: ag-ui-importer
+        secret:
+          secretName: ag-ui-importer
+      - name: cafe-join-user
+        secret:
+          secretName: cafe-join-user
+      - name: cc-join-user
+        secret:
+          secretName: cc-join-user
+      - name: dcs-join-user
+        secret:
+          secretName: dcs-join-user
+      - name: ei-join-user
+        secret:
+          secretName: ei-join-user
+      - name: mhub-join-user
+        secret:
+          secretName: mhub-join-user
+      - name: qiadmin-join-user
+        secret:
+          secretName: qiadmin-join-user
+      - name: sd-join-user
+        secret:
+          secretName: sd-join-user
+      - name: trw-join-user
+        secret:
+          secretName: trw-join-user
+      - name: mhub-db-importer
+        secret:
+          secretName: mhub-db-importer
+      - name: mhub-ui-importer
+        secret:
+          secretName: mhub-ui-importer
+      - name: ag-appserver
+        secret:
+          secretName: ag-appserver
+      - name: ag-report
+        secret:
+          secretName: ag-report
+      - name: cc-jdbc
+        secret:
+          secretName: cc-jdbc
+      - name: dcs-hmac-key
+        secret:
+          secretName: dcs-hmac-key
+      - name: abinitio
+        secret:
+          secretName: abinitio
+      - name: mhub-appserver
+        secret:
+          secretName: mhub-appserver
+      - name: mhub-report
+        secret:
+          secretName: mhub-report
+      - name: runtime-locator-join-user
+        secret:
+          secretName: runtime-locator-join-user
+      - name: password-key-file
+        secret:
+          secretName: password-key-file
+      - name: ab-share-data-and-appconf-root
+        persistentVolumeClaim:
+          claimName: ab-shared-data-and-appconf-root-claim
--- a/rendered/manifests/k3s-dev/abinitio-platform/queryit/apps_v1_deployment_queryit-admin.yaml
+++ b/rendered/manifests/k3s-dev/abinitio-platform/queryit/apps_v1_deployment_queryit-admin.yaml
@@ -0,0 +1,312 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    abinitio/deployment: qiadmin
+    app.kubernetes.io/instance: queryit-admin
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: queryit-admin
+    app.kubernetes.io/part-of: AbInitio
+    app.kubernetes.io/version: 4.4.1
+    helm.sh/chart: queryit-admin-2.4.3-a
+  name: queryit-admin
+  namespace: abinitio
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/instance: queryit-admin
+      app.kubernetes.io/name: queryit-admin
+  template:
+    metadata:
+      labels:
+        abinitio/deployment: qiadmin
+        app.kubernetes.io/instance: queryit-admin
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: queryit-admin
+        app.kubernetes.io/part-of: AbInitio
+        app.kubernetes.io/version: 4.4.1
+        helm.sh/chart: queryit-admin-2.4.3-a
+      name: queryit-admin
+    spec:
+      containers:
+      - env:
+        - name: AB_CONFIG_PROVIDER_URL
+          value: file://localhost/config
+        - name: AB_IPV4_ONLY
+          value: "true"
+        - name: AB_PASSWORD_KEY_FILE
+          value: /secrets/password_key_file/password
+        - name: CATALINA_TMPDIR
+          value: /tmp
+        - name: DEPLOY_NAME
+          value: qiadmin
+        - name: JAVA_OPTS
+          value: -XX:InitialRAMPercentage=50.0 -XX:MaxRAMPercentage=75.0
+        - name: LOAD_PHYSOBJECTS
+          value: "true"
+        - name: NAMESPACE
+          value: abinitio
+        - name: POD_IP
+          valueFrom:
+            fieldRef:
+              fieldPath: status.podIP
+        - name: POD_LABEL
+          value: 'abinitio/product: queryit-admin, abinitio/deployment: qiadmin'
+        - name: POD_NAME
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.name
+        - name: POD_SERVICE
+          value: queryit-admin
+        image: asia-southeast1-docker.pkg.dev/str-22391/cloudplatform-proxy/aidp/queryit-admin:4.4.1.1-1
+        imagePullPolicy: IfNotPresent
+        lifecycle:
+          preStop:
+            exec:
+              command:
+              - /bin/sh
+              - -c
+              - ${CATALINA_HOME}/bin/catalina.sh stop
+        livenessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /qiadmin/api/abwebinternal/health/k8s/liveness
+            port: 8080
+          initialDelaySeconds: 5
+          periodSeconds: 30
+        name: queryit-admin-app
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /qiadmin/api/abwebinternal/health/k8s/readiness
+            port: 8080
+          initialDelaySeconds: 10
+          periodSeconds: 30
+        resources:
+          limits:
+            ephemeral-storage: 2Gi
+            memory: 4Gi
+          requests:
+            cpu: 100m
+            ephemeral-storage: 2Gi
+            memory: 4Gi
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsGroup: 1000
+          runAsNonRoot: true
+          runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
+        startupProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /qiadmin/api/abwebinternal/health/k8s/startup
+            port: 8080
+          initialDelaySeconds: 15
+          periodSeconds: 30
+        volumeMounts:
+        - mountPath: /config/qiadmin
+          name: app-external-config
+        - mountPath: /abinitio
+          name: abinitio-local
+        - mountPath: /tmp
+          name: tmp-volume
+        - mountPath: /secrets/aiadmin/password
+          name: aiadmin
+          subPath: password
+        - mountPath: /secrets/ocagent/password
+          name: ocagent
+          subPath: password
+        - mountPath: /secrets/bridge/password
+          name: bridge
+          subPath: password
+        - mountPath: /secrets/eme_join_user/password
+          name: eme-join-user
+          subPath: password
+        - mountPath: /secrets/qi_join_user/password
+          name: qi-join-user
+          subPath: password
+        - mountPath: /secrets/dcs_utility_user/password
+          name: dcs-utility-user
+          subPath: password
+        - mountPath: /secrets/mhub_utility_user/password
+          name: mhub-utility-user
+          subPath: password
+        - mountPath: /secrets/ag_db_importer/password
+          name: ag-db-importer
+          subPath: password
+        - mountPath: /secrets/admin/password
+          name: admin
+          subPath: password
+        - mountPath: /secrets/ag_ui_importer/password
+          name: ag-ui-importer
+          subPath: password
+        - mountPath: /secrets/cafe_join_user/password
+          name: cafe-join-user
+          subPath: password
+        - mountPath: /secrets/cc_join_user/password
+          name: cc-join-user
+          subPath: password
+        - mountPath: /secrets/dcs_join_user/password
+          name: dcs-join-user
+          subPath: password
+        - mountPath: /secrets/ei_join_user/password
+          name: ei-join-user
+          subPath: password
+        - mountPath: /secrets/mhub_join_user/password
+          name: mhub-join-user
+          subPath: password
+        - mountPath: /secrets/qiadmin_join_user/password
+          name: qiadmin-join-user
+          subPath: password
+        - mountPath: /secrets/sd_join_user/password
+          name: sd-join-user
+          subPath: password
+        - mountPath: /secrets/trw_join_user/password
+          name: trw-join-user
+          subPath: password
+        - mountPath: /secrets/mhub_db_importer/password
+          name: mhub-db-importer
+          subPath: password
+        - mountPath: /secrets/mhub_ui_importer/password
+          name: mhub-ui-importer
+          subPath: password
+        - mountPath: /secrets/ag_appserver/password
+          name: ag-appserver
+          subPath: password
+        - mountPath: /secrets/ag_report/password
+          name: ag-report
+          subPath: password
+        - mountPath: /secrets/cc_jdbc/password
+          name: cc-jdbc
+          subPath: password
+        - mountPath: /secrets/dcs_hmac_key/password
+          name: dcs-hmac-key
+          subPath: password
+        - mountPath: /secrets/abinitio/password
+          name: abinitio
+          subPath: password
+        - mountPath: /secrets/mhub_appserver/password
+          name: mhub-appserver
+          subPath: password
+        - mountPath: /secrets/mhub_report/password
+          name: mhub-report
+          subPath: password
+        - mountPath: /secrets/runtime_locator_join_user/password
+          name: runtime-locator-join-user
+          subPath: password
+        - mountPath: /secrets/password_key_file/password
+          name: password-key-file
+          subPath: password
+      hostname: queryit-admin
+      initContainers: null
+      securityContext:
+        fsGroup: 1000
+        fsGroupChangePolicy: OnRootMismatch
+        runAsGroup: 1000
+        runAsNonRoot: true
+        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
+      serviceAccountName: abinitio-sa
+      terminationGracePeriodSeconds: 30
+      volumes:
+      - emptyDir: {}
+        name: abinitio-local
+      - configMap:
+          defaultMode: 511
+          name: queryit-admin-external-config
+        name: app-external-config
+      - emptyDir: {}
+        name: tmp-volume
+      - name: aiadmin
+        secret:
+          secretName: aiadmin
+      - name: ocagent
+        secret:
+          secretName: ocagent
+      - name: bridge
+        secret:
+          secretName: bridge
+      - name: eme-join-user
+        secret:
+          secretName: eme-join-user
+      - name: qi-join-user
+        secret:
+          secretName: qi-join-user
+      - name: dcs-utility-user
+        secret:
+          secretName: dcs-utility-user
+      - name: mhub-utility-user
+        secret:
+          secretName: mhub-utility-user
+      - name: ag-db-importer
+        secret:
+          secretName: ag-db-importer
+      - name: admin
+        secret:
+          secretName: admin
+      - name: ag-ui-importer
+        secret:
+          secretName: ag-ui-importer
+      - name: cafe-join-user
+        secret:
+          secretName: cafe-join-user
+      - name: cc-join-user
+        secret:
+          secretName: cc-join-user
+      - name: dcs-join-user
+        secret:
+          secretName: dcs-join-user
+      - name: ei-join-user
+        secret:
+          secretName: ei-join-user
+      - name: mhub-join-user
+        secret:
+          secretName: mhub-join-user
+      - name: qiadmin-join-user
+        secret:
+          secretName: qiadmin-join-user
+      - name: sd-join-user
+        secret:
+          secretName: sd-join-user
+      - name: trw-join-user
+        secret:
+          secretName: trw-join-user
+      - name: mhub-db-importer
+        secret:
+          secretName: mhub-db-importer
+      - name: mhub-ui-importer
+        secret:
+          secretName: mhub-ui-importer
+      - name: ag-appserver
+        secret:
+          secretName: ag-appserver
+      - name: ag-report
+        secret:
+          secretName: ag-report
+      - name: cc-jdbc
+        secret:
+          secretName: cc-jdbc
+      - name: dcs-hmac-key
+        secret:
+          secretName: dcs-hmac-key
+      - name: abinitio
+        secret:
+          secretName: abinitio
+      - name: mhub-appserver
+        secret:
+          secretName: mhub-appserver
+      - name: mhub-report
+        secret:
+          secretName: mhub-report
+      - name: runtime-locator-join-user
+        secret:
+          secretName: runtime-locator-join-user
+      - name: password-key-file
+        secret:
+          secretName: password-key-file
--- a/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_configmap_queryit-0.yaml
+++ b/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_configmap_queryit-0.yaml
@@ -0,0 +1,71 @@
+apiVersion: v1
+data:
+  abinitiorc: |
+    AB_AIR_ROOT : //eme-0.eme-headless/abinitio/eme/eme
+    AB_BRIDGE_WORKDIR @ container-bridge : /tmp/container-bridge-workdir
+    AB_CHARSET : utf-8
+    AB_CONNECTION : bridge
+    AB_CONNECTION_BRIDGE_ENCRYPTED_RPC_ENCRYPTION_KEY : file=/secrets/bridge/password
+    AB_CONNECTION_BRIDGE_PORT : 7070
+    AB_CONNECTION_BRIDGE_RPC_ENCRYPTION_TYPE : aes128-gcm
+    AB_CONNECTION_BRIDGE_SECURITY_CONFIGURATION : container-bridge-security
+    AB_ENV_ROOT : /abinitio/sandboxes/sand/stdenv
+    AB_HOME @ emeabeme : /usr/local/abinitio
+    AB_HOSTNAME_KEYSERVER_URLS : abks://key-server:6151
+    AB_NODES @ emeabeme : eme-0.eme-headless metadatahub-importer
+    AB_SQL_SANDBOX : /abinitio/sandboxes/private_sand/queryit-instance-0
+  apphubrc: |
+    AB_AIR_BRANCH @ eme : main
+    AB_AIR_ROOT : //eme-0.eme-headless/abinitio/eme/eme
+    AB_AIR_ROOT @ eme : //eme-0.eme-headless/abinitio/eme/eme
+    AB_BRIDGE_VOLATILE_DIR : /tmp/ab-bridge-volatile-dir
+    AB_DESCRIPTION @ eme : Ab Initio Data Platform technical repository
+    AB_DESCRIPTION @ queryit-instance-0 : Sandbox path queryit-instance-0
+    AB_DISPLAY_NAME @ eme : Default technical repository deployed in eme StatefulSet
+    AB_DISPLAY_NAME @ queryit-instance-0 : queryit-instance-0
+    AB_EME_REPOSITORIES : eme
+    AB_KEYSERVER_GROUP : AI-IC-AWS001a
+    AB_KEYSERVER_URLS : abks://key-server:6150
+    AB_SQL_INSTANCES : queryit-instance-0
+    AB_SQL_INSTANCE_PATH @ queryit-instance-0 : /abinitio/sandboxes/private_sand/queryit-instance-0
+  physobjects.properties: |
+    AB_MHUB_LOCAL_DIR=/abinitio/deploy/metadatahub-importer
+    DCS_URL=http://datacatalog:8080/datacatalog
+    DO_MHUB_INSTALL=y
+    INSTALL_CONFIG_USING_ABAPP_MHUB=y
+    MHUB_ABAPP_NAME=metadatahub
+    MHUB_DATASTORE_NAME=metadatahub-importer
+    MHUB_IMPORTER_USERNAME=aiadmin
+    MHUB_IMPORT_PROFILE_PATH=/abinitio/deploy/metadatahub-importer/config/import.profile
+    MHUB_URL=http://metadatahub:8080/metadatahub
+    SKIP_MHUB_BACKUP=y
+    product_name=physical-objects
+    property_file_version=PF_V1
+    MHUB_IMPORTER_ENCRYPTED_PASSWORD=file=/secrets/aiadmin/password
+  qi_instance.config: |
+    QI_DEPLOY_NAME=queryit
+    QI_INSTANCE_NAME="queryit-instance-0"
+    QI_INSTANCE_NUMBER=0
+    QI_FLAG_BARE=
+    QI_FLAG_RESTORE=false
+    QI_BACKUP_PATH=
+    QI_AB_ENCRYPTED_PASSWORD=file=/secrets/aiadmin/password
+    MHUB_LOCAL_DIR=/abinitio/deploy/metadatahub-importer
+    AG_URL=http://authgateway:8080/authgateway
+    AG_USERNAME=qi_join_user
+    AG_PASSWORD=file=/secrets/qi_join_user/password
+    DCS_URL=http://datacatalog:8080/datacatalog
+    ## The requirement of qi pod as a mh importer will be released soon after 4.2.1
+    ## TODO: this env can be removed after
+    MHUB_URL=http://metadatahub:8080/metadatahub
+kind: ConfigMap
+metadata:
+  labels:
+    app.kubernetes.io/instance: queryit-0
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: queryit
+    app.kubernetes.io/part-of: AbInitio
+    app.kubernetes.io/version: 4.4.1
+    helm.sh/chart: queryit-2.4.3-a
+  name: queryit-0
+  namespace: abinitio
--- a/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_configmap_queryit-admin-external-config.yaml
+++ b/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_configmap_queryit-admin-external-config.yaml
@@ -0,0 +1,52 @@
+apiVersion: v1
+data:
+  qiadmin.yaml: |
+    externalConfig:
+      queryItAdministrator:
+        appserverType: tomcat
+        authentication:
+          type: ag
+        authorization:
+          type: ag
+        authorizationGateway:
+          password: file=/secrets/qiadmin_join_user/password
+          productIdentifier: Query>It Administrator
+          productName: Query>It Administrator
+          url: http://authgateway:8080/authgateway
+          username: qiadmin_join_user
+        bridgeConnection:
+          encryptionType: aes128-gcm
+          name: container-bridge
+          rpcSecret: file=/secrets/bridge/password
+          securityConfig: container-bridge-security
+          url: http://queryit-0:7070
+        cluster:
+          autoConfig:
+            hosts: queryit-admin-jgroup
+            port: 7800
+            protocol: tcp
+          channelName: ch01
+          enabled: true
+        logging:
+          directoryPath: /abinitio/webapp/logs
+          maxBackups: 3
+        packageForSupport:
+          encrypted: EncryptForNonAdmins
+        security:
+          dataCatalog:
+            hmacKey: file=/secrets/dcs_hmac_key/password
+        urlFromBrowser: https://aidp.k3s.sg.ic.cloudguild.gcp.abinitio.com/qiadmin
+        websockets:
+          forceDisable: false
+kind: ConfigMap
+metadata:
+  labels:
+    abinitio/deployment: qiadmin
+    app.kubernetes.io/instance: queryit-admin
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: queryit-admin
+    app.kubernetes.io/part-of: AbInitio
+    app.kubernetes.io/version: 4.4.1
+    helm.sh/chart: queryit-admin-2.4.3-a
+  name: queryit-admin-external-config
+  namespace: abinitio
--- a/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_persistentvolumeclaim_queryit-0-claim.yaml
+++ b/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_persistentvolumeclaim_queryit-0-claim.yaml
@@ -0,0 +1,18 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  labels:
+    app.kubernetes.io/instance: queryit-0
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: queryit
+    app.kubernetes.io/part-of: AbInitio
+    app.kubernetes.io/version: 4.4.1
+    helm.sh/chart: queryit-2.4.3-a
+  name: queryit-0-claim
+  namespace: abinitio
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi
--- a/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_service_queryit-0.yaml
+++ b/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_service_queryit-0.yaml
@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/instance: queryit-0
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: queryit
+    app.kubernetes.io/part-of: AbInitio
+    app.kubernetes.io/version: 4.4.1
+    helm.sh/chart: queryit-2.4.3-a
+  name: queryit-0
+  namespace: abinitio
+spec:
+  ports:
+  - name: bridge
+    port: 7070
+    protocol: TCP
+    targetPort: 7070
+  - name: odbc
+    port: 11065
+    protocol: TCP
+    targetPort: 11065
+  - name: db
+    port: 11105
+    protocol: TCP
+    targetPort: 11105
+  publishNotReadyAddresses: true
+  selector:
+    app.kubernetes.io/instance: queryit-0
+    app.kubernetes.io/name: queryit
+  type: ClusterIP
--- a/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_service_queryit-admin-jgroup.yaml
+++ b/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_service_queryit-admin-jgroup.yaml
@@ -0,0 +1,25 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    abinitio/deployment: qiadmin
+    app.kubernetes.io/instance: queryit-admin
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: queryit-admin
+    app.kubernetes.io/part-of: AbInitio
+    app.kubernetes.io/version: 4.4.1
+    helm.sh/chart: queryit-admin-2.4.3-a
+  name: queryit-admin-jgroup
+  namespace: abinitio
+spec:
+  clusterIP: None
+  ports:
+  - name: jgroup-channel
+    port: 7800
+    protocol: TCP
+    targetPort: 7800
+  publishNotReadyAddresses: true
+  selector:
+    app.kubernetes.io/instance: queryit-admin
+    app.kubernetes.io/name: queryit-admin
+  type: ClusterIP
--- a/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_service_queryit-admin.yaml
+++ b/rendered/manifests/k3s-dev/abinitio-platform/queryit/v1_service_queryit-admin.yaml
@@ -0,0 +1,27 @@
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    abinitio/deployment: qiadmin
+    app.kubernetes.io/instance: queryit-admin
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: queryit-admin
+    app.kubernetes.io/part-of: AbInitio
+    app.kubernetes.io/version: 4.4.1
+    helm.sh/chart: queryit-admin-2.4.3-a
+  name: queryit-admin
+  namespace: abinitio
+spec:
+  ports:
+  - name: http
+    port: 8080
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    app.kubernetes.io/instance: queryit-admin
+    app.kubernetes.io/name: queryit-admin
+  sessionAffinity: ClientIP
+  sessionAffinityConfig:
+    clientIP:
+      timeoutSeconds: 86400
+  type: ClusterIP