Compare commits

..

2 Commits

Author SHA1 Message Date
aca 673f6f012f new configuration version 2025-10-21 10:04:49 +00:00
aca 7c5d0e27df new configuration version 2025-10-21 09:59:13 +00:00
12 changed files with 19 additions and 47 deletions

View File

@ -11,7 +11,7 @@ metadata:
spec:
type: "NevisAuth"
replicas: 1
version: "8.2411.1"
version: "8.2411.3"
gitInitVersion: "1.3.0"
runAsNonRoot: true
ports:
@ -45,7 +45,7 @@ spec:
podDisruptionBudget:
maxUnavailable: "50%"
git:
tag: "r-bf1e1a83227b7bc159e972c2afd30c158021bcea"
tag: "r-ffccb0ac6d5831789f198ab73f0ecfff9ea38df7"
dir: "DEFAULT-ADN-AGOV-ADMIN-PROJECT/DEFAULT-ADN-AGOV-ADMIN-INV/auth"
credentials: "git-credentials"
keystores:

View File

@ -13,7 +13,7 @@ JAVA_OPTS=(
"-javaagent:/opt/agent/opentelemetry-javaagent.jar"
"-Dotel.javaagent.logging=application"
"-Dotel.javaagent.configuration-file=/var/opt/nevisauth/default/conf/otel.properties"
"-Dotel.resource.attributes=service.version=8.2411.1,service.instance.id=$HOSTNAME"
"-Dotel.resource.attributes=service.version=8.2411.3,service.instance.id=$HOSTNAME"
"-Djavax.net.ssl.trustStore=/var/opt/keys/trust/auth-default-tls-trust/truststore.p12"
"-Djavax.net.ssl.trustStorePassword=\${exec:/var/opt/keys/trust/auth-default-tls-trust/keypass}"
)

View File

@ -11,7 +11,7 @@ metadata:
spec:
type: "NevisIDM"
replicas: 1
version: "8.2505.5"
version: "8.2411.3"
gitInitVersion: "1.3.0"
runAsNonRoot: true
ports:
@ -46,7 +46,7 @@ spec:
podDisruptionBudget:
maxUnavailable: "50%"
git:
tag: "r-bf1e1a83227b7bc159e972c2afd30c158021bcea"
tag: "r-ffccb0ac6d5831789f198ab73f0ecfff9ea38df7"
dir: "DEFAULT-ADN-AGOV-ADMIN-PROJECT/DEFAULT-ADN-AGOV-ADMIN-INV/idm-job"
credentials: "git-credentials"
keystores:

View File

@ -4,5 +4,5 @@ JAVA_OPTS=(
"-javaagent:/opt/agent/opentelemetry-javaagent.jar"
"-Dotel.javaagent.logging=application"
"-Dotel.javaagent.configuration-file=/var/opt/nevisidm/default/conf/otel.properties"
"-Dotel.resource.attributes=service.version=8.2505.5,service.instance.id=$HOSTNAME"
"-Dotel.resource.attributes=service.version=8.2411.3,service.instance.id=$HOSTNAME"
)

View File

@ -1,26 +0,0 @@
apiVersion: "operator.nevis-security.ch/v1"
kind: "NevisDatabase"
metadata:
name: "idm"
namespace: "adn-agov-nevisidm-admin-01-uat"
labels:
deploymentTarget: "idm"
annotations:
projectKey: "DEFAULT-ADN-AGOV-ADMIN-PROJECT"
patternId: "ca0629d86201d4c4ac857d60"
spec:
type: "NevisIDM"
databaseType: "MariaDB"
version: "8.2505.5"
url: "session-db-primary-service.adn-agov-database-01-uat"
port: 3306
database: "nevisidm_uat"
bootstrap: true
migrate: true
rootCredentials:
name: "root-adn-agov-nevisidm-admin-01-uat-idm"
namespace: "adn-agov-nevisidm-admin-01-uat"
podSecurity:
policy: "baseline"
automountServiceAccountToken: false
timeZone: "Europe/Zurich"

View File

@ -11,7 +11,7 @@ metadata:
spec:
type: "NevisIDM"
replicas: 1
version: "8.2505.5"
version: "8.2411.3"
gitInitVersion: "1.3.0"
runAsNonRoot: true
ports:
@ -46,12 +46,9 @@ spec:
podDisruptionBudget:
maxUnavailable: "50%"
git:
tag: "r-bf1e1a83227b7bc159e972c2afd30c158021bcea"
tag: "r-ffccb0ac6d5831789f198ab73f0ecfff9ea38df7"
dir: "DEFAULT-ADN-AGOV-ADMIN-PROJECT/DEFAULT-ADN-AGOV-ADMIN-INV/idm"
credentials: "git-credentials"
database:
name: "idm"
requiredVersion: "8.2505.5"
keystores:
- "idm-default-identity"
truststores:
@ -63,4 +60,5 @@ spec:
timeZone: "Europe/Zurich"
secrets:
secret:
- "a2068eb83a60702322c13949-27ed70d3"
- "c418560f50e0332d087e85bf-89ec31e5"

View File

@ -4,5 +4,5 @@ JAVA_OPTS=(
"-javaagent:/opt/agent/opentelemetry-javaagent.jar"
"-Dotel.javaagent.logging=application"
"-Dotel.javaagent.configuration-file=/var/opt/nevisidm/default/conf/otel.properties"
"-Dotel.resource.attributes=service.version=8.2505.5,service.instance.id=$HOSTNAME"
"-Dotel.resource.attributes=service.version=8.2411.3,service.instance.id=$HOSTNAME"
)

View File

@ -3,9 +3,9 @@ web.gui.languages.default=de
# source: pattern://ca0629d86201d4c4ac857d60
database.connection.url=jdbc:mariadb://session-db-primary-service.adn-agov-database-01-uat:3306/nevisidm_uat?pinGlobalTxToPhysicalConnection=1&useMysqlMetadata=true&cachePrepStmts=true&prepStmtCacheSize=1000&sslMode=disable
# source: pattern://ca0629d86201d4c4ac857d60
database.connection.username=${exec:/var/opt/nevisidm/default/conf/credentials/dbUser}
database.connection.username=adndbadmin
# source: pattern://ca0629d86201d4c4ac857d60
database.connection.password=${exec:/var/opt/nevisidm/default/conf/credentials/dbPassword}
database.connection.password=secret://a2068eb83a60702322c13949-27ed70d3
# source: pattern://ba7c7a3b091df0c4b8ba0bb2
application.mail.smtp.host=greenmail.adn-agov-mail-01-uat.svc
# source: pattern://ba7c7a3b091df0c4b8ba0bb2

View File

@ -11,7 +11,7 @@ metadata:
spec:
type: "NevisLogrend"
replicas: 1
version: "8.2505.5"
version: "8.2411.2"
gitInitVersion: "1.3.0"
runAsNonRoot: true
ports:
@ -44,7 +44,7 @@ spec:
podDisruptionBudget:
maxUnavailable: "50%"
git:
tag: "r-bf1e1a83227b7bc159e972c2afd30c158021bcea"
tag: "r-ffccb0ac6d5831789f198ab73f0ecfff9ea38df7"
dir: "DEFAULT-ADN-AGOV-ADMIN-PROJECT/DEFAULT-ADN-AGOV-ADMIN-INV/logrend"
credentials: "git-credentials"
podSecurity:

View File

@ -10,5 +10,5 @@ JAVA_OPTS=(
"-javaagent:/opt/agent/opentelemetry-javaagent.jar"
"-Dotel.javaagent.logging=application"
"-Dotel.javaagent.configuration-file=/var/opt/nevislogrend/default/conf/otel.properties"
"-Dotel.resource.attributes=service.version=8.2505.5,service.instance.id=$HOSTNAME"
"-Dotel.resource.attributes=service.version=8.2411.2,service.instance.id=$HOSTNAME"
)

View File

@ -11,7 +11,7 @@ metadata:
spec:
type: "NevisProxy"
replicas: 1
version: "8.2505.5"
version: "8.2411.2"
gitInitVersion: "1.3.0"
runAsNonRoot: true
ports:
@ -46,7 +46,7 @@ spec:
podDisruptionBudget:
maxUnavailable: "50%"
git:
tag: "r-bf1e1a83227b7bc159e972c2afd30c158021bcea"
tag: "r-ffccb0ac6d5831789f198ab73f0ecfff9ea38df7"
dir: "DEFAULT-ADN-AGOV-ADMIN-PROJECT/DEFAULT-ADN-AGOV-ADMIN-INV/proxy-idm"
credentials: "git-credentials"
keystores:

View File

@ -11,7 +11,7 @@ metadata:
spec:
type: "NevisProxy"
replicas: 1
version: "8.2505.5"
version: "8.2411.2"
gitInitVersion: "1.3.0"
runAsNonRoot: true
ports:
@ -46,7 +46,7 @@ spec:
podDisruptionBudget:
maxUnavailable: "50%"
git:
tag: "r-bf1e1a83227b7bc159e972c2afd30c158021bcea"
tag: "r-ffccb0ac6d5831789f198ab73f0ecfff9ea38df7"
dir: "DEFAULT-ADN-AGOV-ADMIN-PROJECT/DEFAULT-ADN-AGOV-ADMIN-INV/proxy-sp"
credentials: "git-credentials"
keystores: