adn-agov-iam-inventory/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/auth-sts/etc/nevis/k8s-nevisauth-sts-4bad2fe3c...

62 lines
1.4 KiB
YAML

apiVersion: "operator.nevis-security.ch/v1"
kind: "NevisComponent"
metadata:
name: "auth-sts"
namespace: "adn-agov-nevisidm-01-uat"
labels:
deploymentTarget: "auth-sts"
annotations:
projectKey: "DEFAULT-ADN-AGOV-PROJECT"
patternId: "4bad2fe3ccc54716cc87138f"
spec:
type: "NevisAuth"
replicas: 1
version: "8.2405.1"
gitInitVersion: "1.3.0"
runAsNonRoot: true
ports:
management: 9000
soap: 8991
resources:
limits:
cpu: "2"
memory: "2000Mi"
requests:
cpu: "20m"
memory: "1000Mi"
livenessProbe:
soap:
tcpSocket: true
periodSeconds: 5
timeoutSeconds: 4
readinessProbe:
management:
httpGet:
path: "/nevisauth/liveness"
periodSeconds: 5
timeoutSeconds: 6
startupProbe:
management:
httpGet:
path: "/nevisauth/liveness"
periodSeconds: 5
timeoutSeconds: 6
failureThreshold: 50
podDisruptionBudget:
maxUnavailable: "50%"
git:
tag: "r-9af6a792e2720efb1d09318c1e3f4a2ab355af31"
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/auth-sts"
credentials: "git-credentials"
keystores:
- "auth-sts-default-identity"
- "auth-sts-sh4r3d-internal-idp-auth-signer"
truststores:
- "auth-sts-technical-trust-store"
- "auth-sts-default-default-signer-trust"
- "auth-sts-default-tls-trust"
podSecurity:
policy: "baseline"
automountServiceAccountToken: false
timeZone: "Europe/Zurich"