apiVersion: "operator.nevis-security.ch/v1"
kind: "NevisComponent"
metadata:
  name: "proxy-sp"
  namespace: "adn-agov-nevisidm-admin-01-uat"
  labels:
    deploymentTarget: "proxy-sp"
  annotations:
    projectKey: "DEFAULT-ADN-AGOV-ADMIN-PROJECT"
    patternId: "bd83dfbd467e8211ffe71d28"
spec:
  type: "NevisProxy"
  replicas: 1
  version: "8.2411.2"
  gitInitVersion: "1.3.0"
  runAsNonRoot: true
  ports:
    management: 11080
    https: 8443
  resources:
    limits:
      cpu: "2"
      memory: "2000Mi"
    requests:
      cpu: "20m"
      memory: "1000Mi"
  livenessProbe:
    management:
      httpGet:
        path: "/liveness"
      periodSeconds: 5
      timeoutSeconds: 6
  readinessProbe:
    management:
      httpGet:
        path: "/readiness"
      periodSeconds: 5
      timeoutSeconds: 6
  startupProbe:
    management:
      httpGet:
        path: "/readiness"
      periodSeconds: 5
      timeoutSeconds: 6
      failureThreshold: 50
  podDisruptionBudget:
    maxUnavailable: "50%"
  git:
    tag: "r-5e1807ca120976e947d4e5b6aa05c8d06296676d"
    dir: "DEFAULT-ADN-AGOV-ADMIN-PROJECT/DEFAULT-ADN-AGOV-ADMIN-INV/proxy-sp"
    credentials: "git-credentials"
  keystores:
  - "proxy-sp-816a1456192f974b57418ca9"
  - "proxy-sp-39ecde9a0d101628fed3e3be"
  - "proxy-sp-ident-authenticationrealm-identity"
  - "proxy-sp-op-onbrdng-authenticationrealm-identity"
  - "proxy-sp-saml-sp-nevisidm-operations-realm-identity"
  truststores:
  - "proxy-sp-ident-authenticationrealm-tls-trust"
  - "proxy-sp-ident-authenticationrealm-signer-trust"
  - "proxy-sp-nevisidm-sectoken-truststore"
  - "proxy-sp-op-onbrdng-authenticationrealm-tls-trust"
  - "proxy-sp-saml-sp-nevisidm-operations-realm-tls-trust"
  ingresses:
  - "proxy-sp"
  podSecurity:
    policy: "baseline"
    automountServiceAccountToken: false
  timeZone: "Europe/Zurich"