La til prod deploy for sync job

Author: nilsmsa

.github/workflows/arbeidssoekere-synk-jobb.yaml

@@ -73,3 +73,22 @@ jobs:
           CLUSTER: dev-gcp
           RESOURCE: ./jobs/${{ env.MODULE }}/nais/nais-dev.yaml
           VAR: image=${{ needs.build.outputs.image }}
+
+  deploy-prod:
+    if: github.ref == 'refs/heads/main'
+    name: Deploy to prod-gcp
+    needs:
+      - build
+    permissions:
+      contents: read
+      id-token: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Deploy to GCP
+        uses: nais/deploy/actions/deploy@v2
+        env:
+          CLUSTER: prod-gcp
+          RESOURCE: ./jobs/${{ env.MODULE }}/nais/nais-prod.yaml
+          VAR: image=${{ needs.build.outputs.image }}

apps/api-start-stopp-perioder/nais/nais-prod.yaml

@@ -65,6 +65,7 @@ spec:
         - application: aia-backend
         - application: arbeidssokerregistrering
         - application: arbeidssokerregistrering-for-veileder
+        - application: paw-arbeidssoekere-synk-jobb
     outbound:
       rules:
         - application: paw-kafka-key-generator

jobs/arbeidssoekere-synk-jobb/nais/nais-prod.yaml

@@ -0,0 +1,36 @@
+apiVersion: nais.io/v1
+kind: Naisjob
+metadata:
+  name: paw-arbeidssoekere-synk-jobb
+  namespace: paw
+  labels:
+    team: paw
+spec:
+  image: {{ image }}
+  restartPolicy: Never
+  resources:
+    requests:
+      cpu: 200m
+      memory: 256Mi
+  secureLogs:
+    enabled: true
+  observability:
+    autoInstrumentation:
+      enabled: true
+      runtime: java
+  azure:
+    application:
+      enabled: true
+  filesFrom:
+    - secret: paw-arbeidssoekere-synk-jobb-csv
+      mountPath: /var/run/secrets/paw-arbeidssoekere-synk-jobb-csv
+  gcp:
+    sqlInstances:
+      - type: POSTGRES_17
+        tier: db-custom-1-6144
+        databases:
+          - name: pawarbeidssoekeresynk
+  accessPolicy:
+    outbound:
+      rules:
+        - application: paw-arbeidssokerregisteret-api-inngang