Oppdater topics og unleash config for nytt namespace

Author: sillerud

.deploy/nais/kafka/prod/hentfagsystemsbehandling_request_topic_prod.yaml

@@ -1,10 +1,10 @@
 apiVersion: kafka.nais.io/v1
 kind: Topic
 metadata:
-  name: privat-tbk-hentfagsystemsbehandling-request-topic
-  namespace: teamfamilie
+  name: privat-tbk-hentfagsystemsbehandling
+  namespace: tilbake
   labels:
-    team: teamfamilie
+    team: tilbake
 spec:
   pool: nav-prod
   config: # optional; all fields are optional too; defaults shown
@@ -15,19 +15,18 @@ spec:
     retentionBytes: -1  # -1 means unlimited
     retentionHours: 72  # -1 means unlimited
   acl:
-    - team: teamfamilie
-      application: familie-tilbake #owner
+    - team: tilbake
+      application: tilbakekreving-backend #owner
       access: readwrite   # readwrite
     - team: teamfamilie
       application: familie-ba-sak #owner
       access: read   # readwrite
     - team: teamfamilie
       application: familie-ks-sak
-      access: read   # read
+      access: read # read
     - team: teamfamilie
       application: familie-ef-iverksett #owner
       access: read   # readwrite
     - team: teamfamilie
       application: familie-tilbake-kafka-manager #forvalter
       access: read   # read
-

.deploy/nais/kafka/prod/hentfagsystemsbehandling_respons_topic_prod.yaml

@@ -1,10 +1,10 @@
 apiVersion: kafka.nais.io/v1
 kind: Topic
 metadata:
-  name: privat-tbk-hentfagsystemsbehandling-respons-topic
-  namespace: teamfamilie
+  name: privat-tbk-hentfagsystemsbehandling-svar
+  namespace: tilbake
   labels:
-    team: teamfamilie
+    team: tilbake
 spec:
   pool: nav-prod
   config: # optional; all fields are optional too; defaults shown
@@ -15,19 +15,18 @@ spec:
     retentionBytes: -1  # -1 means unlimited
     retentionHours: 72  # -1 means unlimited
   acl:
-    - team: teamfamilie
-      application: familie-tilbake #owner
+    - team: tilbake
+      application: tilbakekreving-backend #owner
       access: readwrite   # readwrite
     - team: teamfamilie
       application: familie-ba-sak #owner
       access: write   # readwrite
     - team: teamfamilie
       application: familie-ks-sak
-      access: write   # readwrite
+      access: write # readwrite
     - team: teamfamilie
       application: familie-ef-iverksett #owner
       access: write   # readwrite
     - team: teamfamilie
       application: familie-tilbake-kafka-manager #forvalter
       access: read   # read
-

.deploy/nais/unleash/unleash-apitoken-prod.yaml

@@ -1,17 +1,17 @@
 apiVersion: unleash.nais.io/v1
 kind: ApiToken
 metadata:
-  name: familie-klage
-  namespace: teamfamilie
+  name: tilbakekreving-backend
+  namespace: tilbake
   labels:
-    team: teamfamilie
+    team: tilbake
 spec:
   unleashInstance:
     apiVersion: unleash.nais.io/v1
     kind: RemoteUnleash
-    name: teamfamilie
-  secretName: familie-tilbake-unleash-api-token
+    name: tilbake
+  secretName: tilbakekreving-backend-unleash-api-token
 
   # Specify which environment the API token should be created for.
   # Can be one of: development, or production.
-  environment: production
+  environment: production

.github/workflows/deploy-unleash-api-token.yaml

@@ -20,12 +20,15 @@ jobs:
           ENVIRONMENT: dev-gcp:tilbake
   deploy-prod:
     runs-on: ubuntu-latest
+    permissions:
+      contents: "read"
+      id-token: "write"
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
       - name: deploy unleash api-token to prod
         uses: nais/deploy/actions/deploy@v2
         env:
-          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
           CLUSTER: prod-gcp
           RESOURCE: .deploy/nais/unleash/unleash-apitoken-prod.yaml
+          ENVIRONMENT: prod-gcp:tilbake