adn-post-iam-tknxchng-inv/DEFAULT-ADN-POST-IAM-TKNXCH.../DEFAULT-ADN-POST-IAM-TKNXCH.../nai/etc/nevis/k8s-nai-6ec6739e824c8e56d96...

62 lines
1.4 KiB
YAML
Raw Normal View History

2024-11-04 14:28:53 +00:00
apiVersion: "operator.nevis-security.ch/v1"
kind: "NevisComponent"
metadata:
2024-11-04 15:46:00 +00:00
name: "nai"
2024-11-04 14:28:53 +00:00
namespace: "adn-postit-tknxchng-01-dev"
labels:
2024-11-04 15:46:00 +00:00
deploymentTarget: "nai"
2024-11-04 14:28:53 +00:00
annotations:
projectKey: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT"
2024-11-04 15:46:00 +00:00
patternId: "6ec6739e824c8e56d9633622"
2024-11-04 14:28:53 +00:00
spec:
2024-11-04 15:46:00 +00:00
type: "NevisAuth"
2024-11-04 14:28:53 +00:00
replicas: 1
2024-11-04 15:46:00 +00:00
version: "8.2405.2"
2024-11-04 14:28:53 +00:00
gitInitVersion: "1.3.0"
runAsNonRoot: true
ports:
2024-11-04 15:46:00 +00:00
management: 9000
soap: 8991
2024-11-04 14:28:53 +00:00
resources:
limits:
cpu: "2"
memory: "2000Mi"
requests:
cpu: "20m"
memory: "1000Mi"
livenessProbe:
2024-11-04 15:46:00 +00:00
soap:
tcpSocket: true
2024-11-04 14:28:53 +00:00
periodSeconds: 5
2024-11-04 15:46:00 +00:00
timeoutSeconds: 4
2024-11-04 14:28:53 +00:00
readinessProbe:
management:
httpGet:
2024-11-04 15:46:00 +00:00
path: "/nevisauth/liveness"
2024-11-04 14:28:53 +00:00
periodSeconds: 5
timeoutSeconds: 6
startupProbe:
management:
httpGet:
2024-11-04 15:46:00 +00:00
path: "/nevisauth/liveness"
2024-11-04 14:28:53 +00:00
periodSeconds: 5
timeoutSeconds: 6
failureThreshold: 50
podDisruptionBudget:
maxUnavailable: "50%"
git:
2024-11-21 14:44:10 +00:00
tag: "r-1a91d0960e68e6d6c6c8fbefa2f7f4344bf66587"
2024-11-04 15:46:00 +00:00
dir: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai"
2024-11-04 14:28:53 +00:00
credentials: "git-credentials"
keystores:
2024-11-04 15:46:00 +00:00
- "nai-default-identity"
- "nai-sh4r3d-default-default-signer"
truststores:
- "nai-default-tls-client-trust"
- "nai-default-default-signer-trust"
- "nai-default-tls-trust"
2024-11-04 14:28:53 +00:00
podSecurity:
policy: "baseline"
automountServiceAccountToken: false
timeZone: "Europe/Zurich"