Shared container but different instances - sidecar for every k8s pod

[alvipeo]

Let's say I have a service which is going to be a sidecar for every service in k8s. So, I have a component in a separate file shared.dsl:

group "PDP" {
  pdp_container = container "PDP Sidecar"
}

and now I need to put this same container next to different services as a sidecar. How do I do that?

I've tried the following:

group "Service 1" {
  container_srv1 = container "Service 1"

  !include "shared.dsl"

  container_srv1 -> pdp_container "Authorize" "HTTPS"
}

group "Service 2" {
  container_srv1 = container "Service 1"

  !include "shared.dsl"

  // This MUST be a different instance of PDP
  container_srv2 -> pdp_container "Authorize" "HTTPS"
}

Is there any way I could do this?

[simonbrowndotje]

Yes, see https://docs.structurizr.com/dsl/cookbook/shared-components/ for details.

[alvipeo]

yes, I've seen that one. this way all of the services for which I need to "attach" a sidecar (the one that's shared) point to a single sidecar.
and that's the problem

[alvipeo]

let me prepare an example later today

[alvipeo]

Here's an example that throws workspace.dsl: A container named 'PDP' already exists for this software system at line 1:

workspace "PDP on k8s" "System using PDP and Zero Trust principle" {

   !identifiers hierarchical

   model {
      usr = person "User"
      ss = softwareSystem "PDP on k8s + Zero Trust" {
         container_spa = container "Angular App"

         group "k8s pod" {
            container_gw = container "Gateway"

            !include shared-containers.dsl

            container_gw -> container_pdp "Asks for security decision" "JSON/HTTPS"
            container_pdp -> container_gw "Allow/Deny"
         }
         container_bff = container "BFF"


         group "Service 1 k8s pod" {
            container_usvc1 = container "Service 1"

            !include shared-containers.dsl

            container_usvc1 -> container_pdp  "Asks for security decision" "JSON/HTTPS"
            container_pdp -> container_usvc1 "Allow/Deny"
         }

         group "Service 2 k8s pod" {
            container_usvc2 = container "Service 2"

            !include shared-containers.dsl

            container_usvc2 -> container_pdp  "Asks for security decision" "JSON/HTTPS"
            container_pdp -> container_usvc2 "Allow/Deny"
         }

         container_gw -> container_bff "Redirects the request" "JSON/HTTPS"
         container_bff -> container_usvc1 "Requests some data" "JSON/HTTPS"
         container_bff -> container_usvc2 "Starts some processing" "JSON/HTTPS"
      }

      usr -> ss "Uses"

      ss.container_spa -> ss.container_gw "Requests data" "JSON/HTTPS"

   }

   views {
      systemContext ss "SystemContext" {
         include *
      }

      container ss "Containers" {
         include *
      }
   }
}

The shared-containers.dsl:

container_pdp = container "PDP" {
   tags "Open Policy Agent"
}

Basically, the system has a PDP service which is going to be deployed along with any service as a sidecar. The PDP container is equal for all of the services, but obviously it will be deployed as different instance for every service's k8s pod.