new configuration version

DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/fido-uaf/etc/nevis/k8s-fido-uaf-instance-ca92034f995b39fde562293c.yaml

@@ -46,9 +46,12 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-f0c2fc352ad8e75f5eae1bab7fc80e6315293282"
+    tag: "r-ad8a6961a238d3829894bdb6f156305aae37be74"
     dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/fido-uaf"
     credentials: "git-credentials"
+  database:
+    name: "fido-uaf"
+    requiredVersion: "8.2405.0"
   keystores:
   - "fido-uaf-default-server-identity"
   - "fido-uaf-default-client-identity"

DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/fido-uaf/etc/nevis/k8s-nevisfido-uaf-database-9385d1b33aefe975fb1c5914.yaml

@@ -0,0 +1,26 @@
+apiVersion: "operator.nevis-security.ch/v1"
+kind: "NevisDatabase"
+metadata:
+  name: "fido-uaf"
+  namespace: "adn-agov-nevisidm-01-uat"
+  labels:
+    deploymentTarget: "fido-uaf"
+  annotations:
+    projectKey: "DEFAULT-ADN-AGOV-PROJECT"
+    patternId: "9385d1b33aefe975fb1c5914"
+spec:
+  type: "NevisFIDO"
+  databaseType: "MariaDB"
+  version: "8.2405.1"
+  url: "mariadb-session-store-service"
+  port: 3306
+  database: "nevisfido_uaf"
+  bootstrap: true
+  migrate: true
+  rootCredentials:
+    name: "root-mariadb-session-store"
+    namespace: "adn-agov-nevisidm-ob-01-uat"
+  podSecurity:
+    policy: "baseline"
+    automountServiceAccountToken: false
+  timeZone: "Europe/Zurich"

DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/fido-uaf/var/opt/nevisfido/default/conf/nevisfido.yml

@@ -31,11 +31,11 @@ credential-repository:
   user-attribute: extId
 
 session-repository:
-  type: in-memory
+  type: sql
-  jdbc-url: 
+  jdbc-url: jdbc:mariadb://mariadb-session-store-service:3306/nevisfido_uaf?sslMode=disable&autocommit=true
-  max-connection-lifetime: 
+  max-connection-lifetime: 10m
-  user: 
+  user: ${exec:/var/opt/nevisfido/default/conf/credentials/dbUser}
-  password: 
+  password: ${exec:/var/opt/nevisfido/default/conf/credentials/dbPassword}
   schema-user: 
   schema-user-password: 
   automatic-db-schema-setup: false