apiVersion: "operator.nevis-security.ch/v1"
kind: "NevisComponent"
metadata:
  name: "proxy-idp"
  namespace: "adn-agov-nevisidm-01-uat"
  labels:
    deploymentTarget: "proxy-idp"
  annotations:
    projectKey: "DEFAULT-ADN-AGOV-PROJECT"
    patternId: "0ceb05c56644a59d648c13b9"
spec:
  type: "NevisProxy"
  replicas: 1
  version: "8.2405.0"
  gitInitVersion: "1.3.0"
  runAsNonRoot: true
  ports:
    management: 11080
    https: 8443
  resources:
    limits:
      cpu: "2"
      memory: "2000Mi"
    requests:
      cpu: "20m"
      memory: "1000Mi"
  livenessProbe:
    management:
      httpGet:
        path: "/liveness"
      initialDelaySeconds: 40
      periodSeconds: 30
      timeoutSeconds: 6
  readinessProbe:
    management:
      httpGet:
        path: "/readiness"
      initialDelaySeconds: 40
      periodSeconds: 30
      timeoutSeconds: 6
  podDisruptionBudget:
    maxUnavailable: "50%"
  git:
    tag: "r-5560b9df58bc00fcf3fc92f29f5f7840af9dbf26"
    dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/proxy-idp"
    credentials: "git-credentials"
  keystores:
  - "proxy-idp-notused-auth-realm-identity"
  - "proxy-idp-1f0702aaabef60a615abf41f"
  - "proxy-idp-auth-realm-main-idp-identity"
  - "proxy-idp-auth-realm-mobile-fido-uaf-identity"
  - "proxy-idp-auth-realm-recovery-identity"
  truststores:
  - "proxy-idp-auth-realm-mobile-fido-uaf-tls-trust"
  - "proxy-idp-notused-auth-realm-signer-trust"
  - "proxy-idp-notused-auth-realm-tls-trust"
  - "proxy-idp-auth-realm-recovery-tls-trust"
  - "proxy-idp-auth-realm-main-idp-signer-trust"
  - "proxy-idp-auth-realm-main-idp-tls-trust"
  - "proxy-idp-auth-realm-mobile-fido-uaf-signer-trust"
  - "proxy-idp-auth-realm-recovery-signer-trust"
  ingresses:
  - "proxy-idp"
  podSecurity:
    policy: "baseline"
    automountServiceAccountToken: false
  timeZone: "Europe/Zurich"