|
1 | 1 | apiVersion: nais.io/v1alpha1
|
2 | 2 | kind: Application
|
3 | 3 | metadata:
|
4 |
| - annotations: |
5 |
| - nginx.ingress.kubernetes.io/proxy-body-size: "20m" |
6 |
| - name: su-se-framover |
7 |
| - namespace: supstonad |
8 |
| - labels: |
9 |
| - team: supstonad |
| 4 | + annotations: |
| 5 | + nginx.ingress.kubernetes.io/proxy-body-size: '20m' |
| 6 | + name: su-se-framover |
| 7 | + namespace: supstonad |
| 8 | + labels: |
| 9 | + team: supstonad |
10 | 10 | spec:
|
11 |
| - port: 8080 |
12 |
| - image: {{ image }} |
13 |
| - azure: |
14 |
| - application: |
15 |
| - enabled: true |
16 |
| - tenant: trygdeetaten.no |
17 |
| - claims: |
18 |
| - extra: |
19 |
| - - "NAVident" |
20 |
| - groups: |
21 |
| - - id: "d75164fa-39e6-4149-956e-8404bc9080b6" # 0000-GA-SU-UFOR-ATTESTANT |
22 |
| - - id: "0ba009c4-d148-4a51-b501-4b1cf906889d" # 0000-GA-SU-UFOR-VEILEDER |
23 |
| - - id: "062d4814-8538-4f3a-bcb9-32821af7909a" # 0000-GA-SU-UFOR-SAKSBEHANDLER |
24 |
| - - id: "5ccd88bd-58d6-41a7-9652-5e0597b00f9b" # 0000-GA-SU-UFOR-DRIFT |
25 |
| - replyURLs: |
26 |
| - - "http://localhost/oauth2/callback" |
27 |
| - - "https://supplerendestonad.dev.adeo.no/oauth2/callback" |
28 |
| - - "https://supplerendestonad.intern.dev.nav.no/oauth2/callback" |
29 |
| - webproxy: true |
30 |
| - replicas: |
31 |
| - min: 2 |
32 |
| - liveness: |
33 |
| - path: isAlive |
34 | 11 | port: 8080
|
35 |
| - initialDelay: 5 |
36 |
| - readiness: |
37 |
| - path: isReady |
38 |
| - port: 8080 |
39 |
| - initialDelay: 5 |
40 |
| - ingresses: |
41 |
| - - https://supplerendestonad.dev.adeo.no |
42 |
| - - https://supplerendestonad.intern.dev.adeo.no |
43 |
| - vault: |
44 |
| - enabled: true |
45 |
| - env: |
46 |
| - - name: NODE_ENV |
47 |
| - value: production |
48 |
| - - name: REDIS_HOST |
49 |
| - value: su-se-framover-redis |
50 |
| - - name: SU_SE_BAKOVER_URL |
51 |
| - value: http://su-se-bakover |
52 |
| - - name: NPM_CONFIG_CACHE |
53 |
| - value: /tmp |
54 |
| - - name: AZURE_GROUP_ATTESTANT |
55 |
| - value: "d75164fa-39e6-4149-956e-8404bc9080b6" |
56 |
| - - name: AZURE_GROUP_VEILEDER |
57 |
| - value: "062d4814-8538-4f3a-bcb9-32821af7909a" |
58 |
| - - name: AZURE_GROUP_SAKSBEHANDLER |
59 |
| - value: "0ba009c4-d148-4a51-b501-4b1cf906889d" |
60 |
| - - name: AZURE_GROUP_DRIFT |
61 |
| - value: "5ccd88bd-58d6-41a7-9652-5e0597b00f9b" |
62 |
| - - name: SU_SE_BAKOVER_AAD_APP_NAME |
63 |
| - value: "dev-fss.supstonad.su-se-bakover" |
64 |
| - - name: AUTH_LOGIN_REDIRECT_URI |
65 |
| - value: "https://supplerendestonad.intern.dev.adeo.no/oauth2/callback" |
66 |
| - - name: AUTH_LOGOUT_REDIRECT_URI |
67 |
| - value: "https://supplerendestonad.intern.dev.adeo.no/" |
68 |
| - - name: LOG_LEVEL |
69 |
| - value: "debug" |
70 |
| - envFrom: |
71 |
| - - secret: redis-password |
72 |
| - - secret: su-se-framover-session-key |
| 12 | + image: { { image } } |
| 13 | + azure: |
| 14 | + application: |
| 15 | + enabled: true |
| 16 | + tenant: trygdeetaten.no |
| 17 | + claims: |
| 18 | + extra: |
| 19 | + - 'NAVident' |
| 20 | + groups: |
| 21 | + - id: 'd75164fa-39e6-4149-956e-8404bc9080b6' # 0000-GA-SU-UFOR-ATTESTANT |
| 22 | + - id: '0ba009c4-d148-4a51-b501-4b1cf906889d' # 0000-GA-SU-UFOR-VEILEDER |
| 23 | + - id: '062d4814-8538-4f3a-bcb9-32821af7909a' # 0000-GA-SU-UFOR-SAKSBEHANDLER |
| 24 | + - id: '5ccd88bd-58d6-41a7-9652-5e0597b00f9b' # 0000-GA-SU-UFOR-DRIFT |
| 25 | + replyURLs: |
| 26 | + - 'http://localhost/oauth2/callback' |
| 27 | + - 'https://supplerendestonad.dev.adeo.no/oauth2/callback' |
| 28 | + - 'https://supplerendestonad.intern.dev.nav.no/oauth2/callback' |
| 29 | + webproxy: true |
| 30 | + replicas: |
| 31 | + min: 2 |
| 32 | + liveness: |
| 33 | + path: isAlive |
| 34 | + port: 8080 |
| 35 | + initialDelay: 5 |
| 36 | + readiness: |
| 37 | + path: isReady |
| 38 | + port: 8080 |
| 39 | + initialDelay: 5 |
| 40 | + ingresses: |
| 41 | + - https://supplerendestonad.dev.adeo.no |
| 42 | + - https://supplerendestonad.intern.dev.nav.no |
| 43 | + vault: |
| 44 | + enabled: true |
| 45 | + env: |
| 46 | + - name: NODE_ENV |
| 47 | + value: production |
| 48 | + - name: REDIS_HOST |
| 49 | + value: su-se-framover-redis |
| 50 | + - name: SU_SE_BAKOVER_URL |
| 51 | + value: http://su-se-bakover |
| 52 | + - name: NPM_CONFIG_CACHE |
| 53 | + value: /tmp |
| 54 | + - name: AZURE_GROUP_ATTESTANT |
| 55 | + value: 'd75164fa-39e6-4149-956e-8404bc9080b6' |
| 56 | + - name: AZURE_GROUP_VEILEDER |
| 57 | + value: '062d4814-8538-4f3a-bcb9-32821af7909a' |
| 58 | + - name: AZURE_GROUP_SAKSBEHANDLER |
| 59 | + value: '0ba009c4-d148-4a51-b501-4b1cf906889d' |
| 60 | + - name: AZURE_GROUP_DRIFT |
| 61 | + value: '5ccd88bd-58d6-41a7-9652-5e0597b00f9b' |
| 62 | + - name: SU_SE_BAKOVER_AAD_APP_NAME |
| 63 | + value: 'dev-fss.supstonad.su-se-bakover' |
| 64 | + - name: AUTH_LOGIN_REDIRECT_URI |
| 65 | + value: 'https://supplerendestonad.intern.dev.nav.no/oauth2/callback' |
| 66 | + - name: AUTH_LOGOUT_REDIRECT_URI |
| 67 | + value: 'https://supplerendestonad.intern.dev.nav.no/' |
| 68 | + - name: LOG_LEVEL |
| 69 | + value: 'debug' |
| 70 | + envFrom: |
| 71 | + - secret: redis-password |
| 72 | + - secret: su-se-framover-session-key |
73 | 73 | ---
|
74 | 74 | apiVersion: nais.io/v1alpha1
|
75 | 75 | kind: Application
|
76 | 76 | metadata:
|
77 |
| - labels: |
78 |
| - team: supstonad |
79 |
| - name: su-se-framover-redis |
80 |
| - namespace: supstonad |
81 |
| - annotations: |
82 |
| - nais.io/run-as-group: "0" # Fix permissions for bitnami/redis |
83 |
| - nais.io/read-only-file-system: "false" # Fix permissions for bitnami/redis |
| 77 | + labels: |
| 78 | + team: supstonad |
| 79 | + name: su-se-framover-redis |
| 80 | + namespace: supstonad |
| 81 | + annotations: |
| 82 | + nais.io/run-as-group: '0' # Fix permissions for bitnami/redis |
| 83 | + nais.io/read-only-file-system: 'false' # Fix permissions for bitnami/redis |
84 | 84 | spec:
|
85 |
| - image: bitnami/redis:6.0 |
86 |
| - port: 6379 |
87 |
| - replicas: # A single Redis-app doesn't scale |
88 |
| - min: 1 |
89 |
| - max: 1 # More replicas doesn't sync |
90 |
| - resources: # you need to monitor the resource usage yourself |
91 |
| - limits: |
92 |
| - memory: 128Mi |
93 |
| - requests: |
94 |
| - cpu: 100m |
95 |
| - memory: 128Mi |
96 |
| - service: |
| 85 | + image: bitnami/redis:6.0 |
97 | 86 | port: 6379
|
98 |
| - protocol: redis |
99 |
| - envFrom: |
100 |
| - - secret: redis-password |
| 87 | + replicas: # A single Redis-app doesn't scale |
| 88 | + min: 1 |
| 89 | + max: 1 # More replicas doesn't sync |
| 90 | + resources: # you need to monitor the resource usage yourself |
| 91 | + limits: |
| 92 | + memory: 128Mi |
| 93 | + requests: |
| 94 | + cpu: 100m |
| 95 | + memory: 128Mi |
| 96 | + service: |
| 97 | + port: 6379 |
| 98 | + protocol: redis |
| 99 | + envFrom: |
| 100 | + - secret: redis-password |
0 commit comments