adn-agov-iam-inventory/DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/fido-uaf/etc/nevis/k8s-fido-uaf-instance-ca920...

61 lines
1.5 KiB
YAML

apiVersion: "operator.nevis-security.ch/v1"
kind: "NevisComponent"
metadata:
name: "fido-uaf"
namespace: "adn-agov-nevisidm-01-uat"
labels:
deploymentTarget: "fido-uaf"
annotations:
projectKey: "DEFAULT-ADN-AGOV-PROJECT"
patternId: "ca92034f995b39fde562293c"
spec:
type: "NevisFIDO"
replicas: 1
version: "7.2402.1"
gitInitVersion: "1.3.0"
runAsNonRoot: true
ports:
rest: 9443
management: 9089
resources:
limits:
cpu: "1000m"
memory: "1000Mi"
requests:
cpu: "100m"
memory: "700Mi"
livenessProbe:
management:
httpGet:
path: "/nevisfido/liveness"
initialDelaySeconds: 40
periodSeconds: 30
timeoutSeconds: 6
readinessProbe:
management:
httpGet:
path: "/nevisfido/health"
initialDelaySeconds: 40
periodSeconds: 30
timeoutSeconds: 6
podDisruptionBudget:
maxUnavailable: "50%"
git:
tag: "r-17392f4fc2f29ede0c371af50d06749396d69a29"
dir: "DEFAULT-ADN-AGOV-PROJECT/DEFAULT-ADN-AGOV-INV/fido-uaf"
credentials: "git-credentials"
keystores:
- "fido-uaf-default-server-identity"
- "fido-uaf-default-client-identity"
truststores:
- "fido-uaf-default-server-trust"
- "fido-uaf-fido-uaf-extended-frontent-truststore"
- "fido-uaf-internal-idp-auth-signer-trust"
podSecurity:
policy: "baseline"
automountServiceAccountToken: false
timeZone: "Europe/Zurich"
secrets:
inv-res-secret:
- "a78926e06a159811ee15c224-bdd107d2"