apiVersion: "operator.nevis-security.ch/v1"
kind: "NevisComponent"
metadata:
  name: "fido-uaf"
  namespace: "adn-agov-nevisidm-01-uat"
  labels:
    deploymentTarget: "fido-uaf"
  annotations:
    projectKey: "DEFAULT-ADN-AGOV-PROJECT"
    patternId: "ca92034f995b39fde562293c"
spec:
  type: "NevisFIDO"
  replicas: 1
  version: "8.2411.2"
  gitInitVersion: "1.3.0"
  runAsNonRoot: true
  ports:
    rest: 9443
    management: 9089
  resources:
    limits:
      cpu: "1000m"
      memory: "1000Mi"
    requests:
      cpu: "100m"
      memory: "700Mi"
  livenessProbe:
    management:
      httpGet:
        path: "/nevisfido/liveness"
      periodSeconds: 5
      timeoutSeconds: 6
  readinessProbe:
    management:
      httpGet:
        path: "/nevisfido/health"
      periodSeconds: 5
      timeoutSeconds: 6
  startupProbe:
    management:
      httpGet:
        path: "/nevisfido/health"
      periodSeconds: 5
      timeoutSeconds: 6
      failureThreshold: 50
  podDisruptionBudget:
    maxUnavailable: "50%"
  git:
    tag: "r-03ba964be38de059bd62eac8e8eeb6f39135ef6e"
    dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/fido-uaf"
    credentials: "git-credentials"
  database:
    name: "fido-uaf"
    requiredVersion: "8.2411.1"
  keystores:
  - "fido-uaf-default-server-identity"
  - "fido-uaf-default-client-identity"
  truststores:
  - "fido-uaf-fido-uaf-extended-frontent-truststore"
  - "fido-uaf-internal-idp-auth-signer-trust"
  - "fido-uaf-idp-extended-truststore"
  podSecurity:
    policy: "baseline"
    automountServiceAccountToken: false
  timeZone: "Europe/Zurich"
  secrets:
    inv-res-secret:
    - "a78926e06a159811ee15c224-bdd107d2"
