From 02004adb0cb42180a0c53e92db1c599739b641c6 Mon Sep 17 00:00:00 2001
From: mamo <mamo>
Date: Thu, 28 Nov 2024 10:49:27 +0000
Subject: [PATCH] new configuration version

---
 .../k8s-nai-6ec6739e824c8e56d9633622.yaml     |   2 +-
 .../var/opt/keys/trust/tls-swissid/keypass    |   2 +
 .../opt/keys/trust/tls-swissid/truststore.jks | Bin 0 -> 1777 bytes
 .../opt/keys/trust/tls-swissid/truststore.p12 | Bin 0 -> 2118 bytes
 .../opt/keys/trust/tls-swissid/truststore.pem |  38 ++++++++++++++++++
 .../var/opt/nevisauth/default/conf/env.conf   |   1 +
 .../opt/nevisauth/default/conf/esauth4.xml    |   5 +++
 .../k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml     |   2 +-
 ...e-proxy-auth-92e282d1dc2b69d9e4f91fc0.yaml |   2 +
 9 files changed, 50 insertions(+), 2 deletions(-)
 create mode 100755 DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/keypass
 create mode 100644 DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.jks
 create mode 100644 DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.p12
 create mode 100644 DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.pem

diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml
index 3369b50..3a632d8 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml
@@ -45,7 +45,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-0ed7648478777611c87757c96c86e18f536f08d5"
+    tag: "r-63426895c230eb727d92d924ec195c6c869834ec"
     dir: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai"
     credentials: "git-credentials"
   keystores:
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/keypass b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/keypass
new file mode 100755
index 0000000..5b0d317
--- /dev/null
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/keypass
@@ -0,0 +1,2 @@
+#!/bin/bash
+echo 'password'
\ No newline at end of file
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.jks b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.jks
new file mode 100644
index 0000000000000000000000000000000000000000..d0ebc272c18f3841fd88c0cc8dac83ae2f1c46a8
GIT binary patch
literal 1777
zcma)6YgAKL7QQ#Ri3o&@CPtBJE+|5P3nw9jgqD{u5=Ibt3KqdUh=4qk7=%&4lweg}
z!lI0l@+`Imb*L0!ETo{k91x12ODTe}7F*;Yh#<x4gm%?BYyQlSv-a8h?0vp(ul4Qy
zdiwP=1VK36fq%26vXmH^Ocrw}0hP)Gs60-FMk&x3kpN`@77N8trY^HcDo7PWgiu=t
zz=I%S2~ZM?fD-w81s(_Ea8&Fvxys3q8@cklxa~e(j8QlF+5!@BtyMNZdx-?Y1_TKB
zGY!C6B0d-)Qg9x8<_17nb@VBQfvfm|tN89-Ol!bc4dW?he})4B-O(VQKr|pRQI2}J
zzvTtCZX~f-fWzVeo;_eY?%znV=e*;Bz5f@a6|npr()52J{~CgNzl*5EnZ4T=On~r8
z92o*ioIXy8gCR|0c2MM$I{NnEZLz;NT!1Ru4|)h~QllQ=$~Kw>t8hif^{XqAsq1l-
z*2Z@UU9~}rx5;h73kF?})bb%Wi}`N9FFAd!!z!!fW$h2C%z_yUMGof0pdIfcZ#r-<
zUX-@BDxrOxfuy`#V1%9Q{oZewWZjfH9alJRlXdN1v1qrjoHk&1eFPFWXKTuw`Ki*$
zGTz{lea*#u)5DGTmhS9iJ)Hj5_w;>_;uExwQG@9%KcJ(Wp1$|wCX*wEny6AUp=asc
z#7c;g-MObwZ>)YQdR^GzG4Cq(*3H`k<}J%#*@!P6$?x#dzHjMuiI!$ZZ$x*`7Vtm1
zV>5Rj4(GIJYVjc@&i(yg#-{Icynf{$!^<Ns=(_2&I}?<~<{XOhQ}4sU^+sct?yvbu
zddhb_vvVZqEMYFIv7;ItOL-Q2;(%1;nEP|4Dze_JvdwIwVfey6CoJNao;i)$@yTD*
zdjtgQcEN5(wxQZDZP9pEVUjmjQhQZRXwT@kZTX~%k)9K4vMccg4{7~na&(`i^{sM`
z-eFg6<WF@&5wVuDcB1e+{&Gg$seZ!a(uQYw$xrPBAw+&m#lY-M=U^Nmw`zA&PEMI(
z^weT7Vu0_tW$@_{qLE#DlB!ao8GORMChR?gCF<2>7Hb&2q{6cgzZ;ADx`f=f^5d18
zxrpKx4i7_cwGtKrB^&|5iF(#Vm_S$q!^mE+2l)Kq16;OSv|OI#WM?Oc5!k++KwD9?
zE+EAOQ4)#0BU_9CiK75xiyRy<0kCIdOg0<n)Gm?;>{(#FPPJPoF#HD514NzC$?rEM
zZ$S}LKnH7xghM9`VHoHUi3pUR1|vY9sCQ5$hr@6%9{8_T(~-XcKG;>^S+VmiA(1rh
zzX^%NNf?jAVTxEh3C3fxm>65a=3oMmn2SXT#B2eJC2?eO0NAqnr8z<a)Ia*f!*6dm
zV6^&7UgeAEwg&O{bR&d@P`v}jL3UwSBwKCH-(J`DbdWfI7tmMJw;`JVEt8s<Cp=T+
zQLlAd{QSnRbL3|725!x}bEw-dx;ccQ1ZBq22NCqRU0pAmO0}w?&@1B~WNOYgh12U^
zyv(s#PHL#A6GZdavUI0&J4(a@@zrV%UNn7uQfPeW7xreZkKNz|BWM?&p>UB?ms(l3
zZ#?oiM|<<iHp^@IklS&BO(*8RlQ9~gpy7?rvbDVm#r!FQl&>;>oV+XZr{<_Tx6007
zo%2K5AY|Cb$z}7xPgb@EpQLifFYI?0cup<lZ}sy{LG-T`m^y#cR<@(B!s)}2v=;@P
zXWpo!MaNq#pBMIgeWT~vy$`UsS#rL@ll!gx(<dNu`%2{1_@%m;bl1{`b<xAB?|$xD
zJab^Oh8ysnhJ+6k_}6EgE;8x(-reHlv&QxoKEWn;!$XsW&`a{@i-~fE--G0-N1b^r
zt5m+i+q5P^JI~=P%fB&h9$`Fb`D`h3!%-W$qwpm^tVLFw-m~AbRSE5UD$Jnt=bmdC
zol3BHWp{PJoKiTxxuINJs`p{q?3+!w++$kK`G+pf^qTa~efPTT?wXlc@iJ1RC#2oV
zort-rP3Z9Cbzi*RJyTB2{dHT`XIF|@rxQZt;q3vm^T)aujNP+xdcSzwT(ARryodi!
zQsa#4O`oWcbwi}V+J(jB%1}~PUDrp@y*Ag7k?PkLr6z>HxPQm9j}CHHUP(_(a6WE4
tDITbeDW~Ewhq7rGjargaE5YK8#^xHNoRR0oua8{LySe{;>$Bz={{d$_vUdOg

literal 0
HcmV?d00001

diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.p12 b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.p12
new file mode 100644
index 0000000000000000000000000000000000000000..47fcca3a6f632c0db24885880d403a16c6e49910
GIT binary patch
literal 2118
zcmV-M2)Xw#f(Swa0Ru3C2kZt3Duzgg_YDCD0ic2h-2{RM*)W0!)i8nw(FO@BhDe6@
z4FLxRpn?a&FoFlZ0s#Opf(N$-2`Yw2hW8Bt2LUi<1_>&LNQU<f0R;^(Sui*T2`Yw2
zhW8Bt1q?7N1Qce19yR=+dMRdZ^r?PFUT8k^LYo2tClCSwATSID2r7n1hW8Bu2?YQ!
z9R>+thDZTr0|Wso1Q6x#Gbd&*b}IC?6xX{C%6ou<2SBO9?ehkx9(i!9Z|h%O&Q!6i
z+#r;Y7>P8{In{m@?06XzHkyz%t6@^&DH@<!;XV_mn;#k=q@K$Uud6{;Ngoi>(J}U^
zSg@XGlu3XGmAP=lWqN*iwXYt>p+V)eq{e{&`?DBF#frxbkfL3oUo+e*S@|MF`iBv-
zT^qA#0Jc;Au-7{t4llj$srKcDJ_PpUVc?vEel%s4l~UfO2qW>aB5Iex?t@y+U|^x)
zw}g6Z9Zz3R{6zKu?gc@5cr>>TKR&-Bpj78O6zd_knYYs$F~AK)E`wE)%33<^QoX78
zm{rdjQF>(}K!fAC&|Pk~efRzrmgU*Y9MFZ6d*|cFH=;=ASD!H~J$H%JZP>o&jeDS+
zSj10XLM%HSC}l`tmg0#R*ft==DjvVnD}Pp$bO_90|C|?}>*1qMI6zJK=YoJQPFPe*
zK){26@ZU&3i+?$2$JS>)=`Y-l$Bhgd8cho4$KS0oY67W7PGI4t*i<Wv9DMlmznK#;
zO_BKEv~U@wgZ$f9>(hLI=>=7u^_VV|(^-5$Ri}D3cacMW!Jm{)^0}i)dCfqN-VsC=
z5MPPHu=M^lXLs4AzCBwb6VYEfv12587veUgr)js=;CzOP--9akZs$NIUDO!uuK7>#
zk2$95dxfIpqpJmT&uauIbdNNI-ZK5L>GfNM4atq<rG%~vGhT<%E)!C_H*#VO5Z}Pu
z4!Aspo+bGa3)+c&06nHjd#umNf1N*t=*aR5WZ|D9<v5{^)Kw%J4GAwrAk(Hz$mJ<U
z<&hM|ov)5iyJ&fJZl+KWhQAfAamIMNzWk9N`bog8F8&ug#K;VR|1JqMOM|v*byQ{|
zO`xLn;C#P2(JCf`+|$>jC=Hnd7_a|tzAQP5H+l|=$m;^s(a;#{MrL5XC3pcP2K|RF
zVt?LofbC-Q)P{VYiXiehawqG-Xn&<ANzodiOYz!bWHF8GLEwYq%>!-xfx^`-j9>sN
zu!<KZ;F!1N8ZLdhh)g%s$dBGqV6KfA!rLT*(QnTiMsV3Of;@R1<p<#zOlX(9n<q?*
zwtu=GE*3W-xG(<h%nsvbB2Ll1#mUz7deQAQC<6UkF2rJNc6>fta>{G;(uhN0Y9v4y
z=ZV-~Wd0EaH8tU!o&!18n7bm2rSu8T(cz?y4-+w`T=ih9RrTgS(EB5D5SA^%)*D9K
zii4~X2oR`hoXW#Rse1F|a2G4;NYcB^-*Nwh6;^w9su3g<(8;+I%<Bs$S&$9s{s?GA
z!FOD0fGz)QW1o_-B-kNMkZAdn!M>H7G!zp}$-%%6$;|WPPIC5ZMz0$-M3`-v7-9ym
zP<fs#%hS7Kg;p9M)1VzjlvD_M|LJb*XsRld6-@Rizm+L<r_UUI?;_*n*ecXlK1v}-
z>R>MdP0FCizdU-hE2fy`$B5gv3#quVF>;KT3=K~$l=abC8@Pw+$(6AAB3Dg1q9?j0
zeJt?3tNc<KVNEI#1~%ilU<+fL*zm3bCJLs(odtjtAOwKD#M?l631oeJIt6oY<HtW3
z2PX2S?cb<8g;S_FmkB0>IZX**7A3yl*es4mvWH$LLcae3;EM5`A@8NAEF7ubKHWlT
z!Awixtws0CXt27a%<Y`y^0bj_wr?>YZz9iq`XUz1(-;IqNWHgcgT)07qJg(yHT1?C
zM89)T&S24Lf4d5h-b0qSj@F;W2}0&X(|~z@C)6hkIP1`@Zvd`O(|vG=tInXKl!m#M
zkVd=Dk2BX(r{Srn_s}TI0YchLI5o<Jw$Zl8<R%FqJEN4ap0zn~S*|!SPM_1&sDDf1
zv1u-7{`rFo@N-3r<|31T2$RD!C>9F4*QCIRjlsE{Q5aJqDEiG=olZ^@AE7}>_`@I(
z-Gua^P{=a<$}BF2Z1WM;-^pAS{eNf1JyS)rjoU~GOM`W1Hbe8Wtd8RGwHd>)NWlu{
zZE@h%3bnAl_G<A@N|E=|_V_h&1uN(9qQzduET;8udF8P7v2V?n;5Yb!DwK~)r+iY#
zA(OGrE%gY(LCm9woh>pJ2+4x!DXeEStg`>t+6cm%5;O8MvU)N*NQp&+Rig-#my`-A
zL&%E>9wT8zmZ3A^vITJ8Ja^d(-qXBcL$(s*aRUt|hkoi2kYheAJjKl}W2Kh$j_aPL
z+R_Mgfwm=j9de@*?ZVz}oS)T&4gAi*5vw_Z?KvruY)8DD7IFByx%_K$v(6Gyu_Ysz
z@Gd0h2dPL-#|mcddj`af+j~r^<kUy6n12owsOlNOt)1a2QQxNCB}%armJm!|OC8_r
zUYKMH(5K4rlLE~6xz2bGmjN&PNo)=~fI-WNZ#_YA9*ceo*j>4l4%1LtFi(3FVI-wo
zXhMc-P=57~S-bSK#8O)LZDY+XPcVW_OzKPlO@DGezdmDfQV1O1#@5;%*xx3P)z~@A
zBEK4x2}`<C)E3bn?iG;AV&X7OFflL<1_@w>NC9O71OfpC00bZix+s$mcToH#=0?Y0
w%G}%G$^K@9+xOPfE+Y4?qlZKU6j9&np=F{}*CVv1R;f>6PY0<t-vR<B5MrA22><{9

literal 0
HcmV?d00001

diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.pem b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.pem
new file mode 100644
index 0000000..28d21f4
--- /dev/null
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/trust/tls-swissid/truststore.pem
@@ -0,0 +1,38 @@
+-----BEGIN CERTIFICATE-----
+MIIGkzCCBHugAwIBAgIULa4PojoMOF/785XA2QNkLRQYTS4wDQYJKoZIhvcNAQEL
+BQAwUTELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzErMCkGA1UE
+AxMiU3dpc3NTaWduIFJTQSBUTFMgUm9vdCBDQSAyMDIyIC0gMTAeFw0yMjA2Mjkw
+OTMwNDdaFw0zNjA2MjkwOTMwNDdaMFAxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxT
+d2lzc1NpZ24gQUcxKjAoBgNVBAMTIVN3aXNzU2lnbiBSU0EgVExTIEVWIElDQSAy
+MDIyIC0gMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL61hlRf7Jxo
+0msjavo1pgChwWBDYix5Zd0CnhciVYUCk30Ko6BxFBICoSsZ1gXGqlT20g/AYqYL
+xuKcdNNAJ/LHT6k2zL3UhSpx+eHjeTGQ7id2jC1HKRZ9zA8YXdhtY3oJom7B3ykE
+d/j0KVmHy9tP1A0rt3ntbJLfLIS6uWogx2KfFs8MwtoAZLiGvp49SHly6p450fcz
+payPIWu12PfVQjLg7b9NitlDlYEWiCAL7R3jINw2yMwcdBvq2gy+ZZsiYkSb1m+h
+ABOGxU6SCN6w7GgRWWveSaJBvRokUvIon/wsZK51j8RM4TsoR60Wei8ftSBL75BI
+g9Us8dkBXDa8vqoDVpc9zs6pan5XN8KymNT52j4gEe161eYTtbiME4KdSWtVsA7e
+rdkHsXKJTRIxxdpUkQXxhLXEoyDed/BVgV1yhTeN6YCFX7AiocAi5rPUplc6LV58
+CCUWFMSWEJxOYQUrwWFLNzQMnE969hnvdhuO8ZeqtpwFwX/OLryWoil+jGobRm/1
+OQS9+urcVygrzZ9Dy9Q/OF/oq9NeaijvL2Ncjkj5f6uJzgXkm7PwjnHrL2FWBkhp
+oM/vyT1VAgWNoku3jIyedtyJ9lUECwPIzQuddQYOL8FwhaFmvtHnOLpiy2ctbwir
+gJW+KcsNkpHg0N5stJcPzPvlssmNBHbNAgMBAAGjggFiMIIBXjBcBggrBgEFBQcB
+AQRQME4wTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNoL2Fpci1h
+ZWZmMzc0ZC0wZjdhLTRjNTUtYTAzNC0xNDQwMjkwY2ZhMzIwEgYDVR0TAQH/BAgw
+BgEB/wIBADAoBgNVHSAEITAfMAcGBWeBDAEBMAgGBgQAj3oBBDAKBghghXQBWQIB
+AzBRBgNVHR8ESjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAt
+OTY2MWMyOWYtOTEyMS00ZjQ2LWFjZDgtZWFkNGEyMmY3MTYwMB0GA1UdJQQWMBQG
+CCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFElS
+3zCGkllfNJwlSCSrwOvRBvLWMB8GA1UdIwQYMBaAFG+OYouTQ7DhQPanw/3xD7gP
+FTilMA0GCSqGSIb3DQEBCwUAA4ICAQBugn943V4fbEbG+Leb4YXTWLLfPIC+mrdc
+H6v1+Iws+XCzoKthaDk0c346mSaXZM9to5xDOWgfEnBYbVioMyI/5EABbg4ARkgp
+dj50FPe9MtLD4kOZFv/8LoRH+WdAfQUsxS1RQincUnYWAxmRNOHLdnbyiQt3sYDl
+6tZzURSMnMUec4stxfLT4VQE1Ew6Phr06CouYOd5ON+mWkFhROz3jx5PTXcECrqQ
+IT27wJ4mzKA6W9p69ZDFi/+FcpN9vCjzksi0w8i62DwtbO8Pj3ZEOL8z6+cwXyT7
+X7Zt96vufj+bsxFo1IXQ6cb2i13qpThSHL4NA1NhUbB/ipMbxNtBJ4fwtcG8SAUs
+jRXgG/RYrXRorG90KU/dcezixY4yKnlIdkkhpV7h8jY2+XS7GbjaKee8pPeAFXgs
+Hzdi+EhZvHOVfshaKL2CAELrYn8Tzo2Zt9zsbif8L7bPJROS3xqzn+GbCFt67/8Y
+jTh84Taa4D49H6V+p01QPkvG7ub7Rw52fm56zY3mabbhbsREOceswsfunxSN/SOE
+pLKVMopuVnRcwVIWmnzH9BlBhIzLqOS4kCYA5E5Irw217j/JTGVWEdMN0ar09nGh
+WA2Eq8aDANjAP1bao/4nmxsFU2zKbTR40Tb7/HKB5jaItYdkz6ppnxQDLTWe7T6+
+nGZwqmYtbQ==
+-----END CERTIFICATE-----
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/env.conf b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/env.conf
index 60c4b7b..712b3e6 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/env.conf
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/env.conf
@@ -13,6 +13,7 @@ JAVA_OPTS=(
     "-Dotel.javaagent.logging=application"
     "-Dotel.javaagent.configuration-file=/var/opt/nevisauth/default/conf/otel.properties"
     "-Dotel.resource.attributes=service.version=8.2405.2,service.instance.id=$HOSTNAME"
+    "-ch.nevis.auth.httpclient.tls.trustStoreRef=/var/opt/keys/trust/tls-swissid/truststore.pem"
     "-Djavax.net.ssl.trustStore=/var/opt/keys/trust/nai-default-tls-trust/truststore.p12"
     "-Djavax.net.ssl.trustStorePassword=\${exec:/var/opt/keys/trust/nai-default-tls-trust/keypass}"
 )
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml
index b0044cb..a0eee13 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml
@@ -42,6 +42,11 @@
             <!-- source: pattern://d9ea344685ab4a9bb0e1e3e7 -->
             <KeyObject name="tokensigner" certificate="/var/opt/keys/own/tokensigner/cert.pem" privateKey="/var/opt/keys/own/tokensigner/keystore.jks" passPhrase="pipe:///var/opt/keys/own/tokensigner/keypass"/>
         </KeyStore>
+        <!-- source: pattern://a37cd4e5f5c48f7d7db35f3f -->
+        <KeyStore name="IdTokenVerification">
+            <!-- source: pattern://a37cd4e5f5c48f7d7db35f3f -->
+            <KeyObject name="tls_swissid" certificate="/var/opt/keys/trust/tls-swissid/truststore.jks"/>
+        </KeyStore>
     </SessionCoordinator>
     <!-- source: pattern://6ec6739e824c8e56d9633622 -->
     <LocalOutOfContextDataStore reaperPeriod="60"/>
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml
index e6859d1..c2c5183 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml
@@ -46,7 +46,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-0c9179a435ec78318502e5387c9d26f800b2859b"
+    tag: "r-63426895c230eb727d92d924ec195c6c869834ec"
     dir: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi"
     credentials: "git-credentials"
   keystores:
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-trsutstore-proxy-auth-92e282d1dc2b69d9e4f91fc0.yaml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-trsutstore-proxy-auth-92e282d1dc2b69d9e4f91fc0.yaml
index 1482d94..422d6ef 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-trsutstore-proxy-auth-92e282d1dc2b69d9e4f91fc0.yaml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-trsutstore-proxy-auth-92e282d1dc2b69d9e4f91fc0.yaml
@@ -10,3 +10,5 @@ metadata:
     patternId: "92e282d1dc2b69d9e4f91fc0"
 spec:
   keystores: []
+  extraCerts:
+  - "-----BEGIN CERTIFICATE-----\nMIIGkzCCBHugAwIBAgIULa4PojoMOF/785XA2QNkLRQYTS4wDQYJKoZIhvcNAQEL\nBQAwUTELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzErMCkGA1UE\nAxMiU3dpc3NTaWduIFJTQSBUTFMgUm9vdCBDQSAyMDIyIC0gMTAeFw0yMjA2Mjkw\nOTMwNDdaFw0zNjA2MjkwOTMwNDdaMFAxCzAJBgNVBAYTAkNIMRUwEwYDVQQKEwxT\nd2lzc1NpZ24gQUcxKjAoBgNVBAMTIVN3aXNzU2lnbiBSU0EgVExTIEVWIElDQSAy\nMDIyIC0gMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL61hlRf7Jxo\n0msjavo1pgChwWBDYix5Zd0CnhciVYUCk30Ko6BxFBICoSsZ1gXGqlT20g/AYqYL\nxuKcdNNAJ/LHT6k2zL3UhSpx+eHjeTGQ7id2jC1HKRZ9zA8YXdhtY3oJom7B3ykE\nd/j0KVmHy9tP1A0rt3ntbJLfLIS6uWogx2KfFs8MwtoAZLiGvp49SHly6p450fcz\npayPIWu12PfVQjLg7b9NitlDlYEWiCAL7R3jINw2yMwcdBvq2gy+ZZsiYkSb1m+h\nABOGxU6SCN6w7GgRWWveSaJBvRokUvIon/wsZK51j8RM4TsoR60Wei8ftSBL75BI\ng9Us8dkBXDa8vqoDVpc9zs6pan5XN8KymNT52j4gEe161eYTtbiME4KdSWtVsA7e\nrdkHsXKJTRIxxdpUkQXxhLXEoyDed/BVgV1yhTeN6YCFX7AiocAi5rPUplc6LV58\nCCUWFMSWEJxOYQUrwWFLNzQMnE969hnvdhuO8ZeqtpwFwX/OLryWoil+jGobRm/1\nOQS9+urcVygrzZ9Dy9Q/OF/oq9NeaijvL2Ncjkj5f6uJzgXkm7PwjnHrL2FWBkhp\noM/vyT1VAgWNoku3jIyedtyJ9lUECwPIzQuddQYOL8FwhaFmvtHnOLpiy2ctbwir\ngJW+KcsNkpHg0N5stJcPzPvlssmNBHbNAgMBAAGjggFiMIIBXjBcBggrBgEFBQcB\nAQRQME4wTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNoL2Fpci1h\nZWZmMzc0ZC0wZjdhLTRjNTUtYTAzNC0xNDQwMjkwY2ZhMzIwEgYDVR0TAQH/BAgw\nBgEB/wIBADAoBgNVHSAEITAfMAcGBWeBDAEBMAgGBgQAj3oBBDAKBghghXQBWQIB\nAzBRBgNVHR8ESjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAt\nOTY2MWMyOWYtOTEyMS00ZjQ2LWFjZDgtZWFkNGEyMmY3MTYwMB0GA1UdJQQWMBQG\nCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFElS\n3zCGkllfNJwlSCSrwOvRBvLWMB8GA1UdIwQYMBaAFG+OYouTQ7DhQPanw/3xD7gP\nFTilMA0GCSqGSIb3DQEBCwUAA4ICAQBugn943V4fbEbG+Leb4YXTWLLfPIC+mrdc\nH6v1+Iws+XCzoKthaDk0c346mSaXZM9to5xDOWgfEnBYbVioMyI/5EABbg4ARkgp\ndj50FPe9MtLD4kOZFv/8LoRH+WdAfQUsxS1RQincUnYWAxmRNOHLdnbyiQt3sYDl\n6tZzURSMnMUec4stxfLT4VQE1Ew6Phr06CouYOd5ON+mWkFhROz3jx5PTXcECrqQ\nIT27wJ4mzKA6W9p69ZDFi/+FcpN9vCjzksi0w8i62DwtbO8Pj3ZEOL8z6+cwXyT7\nX7Zt96vufj+bsxFo1IXQ6cb2i13qpThSHL4NA1NhUbB/ipMbxNtBJ4fwtcG8SAUs\njRXgG/RYrXRorG90KU/dcezixY4yKnlIdkkhpV7h8jY2+XS7GbjaKee8pPeAFXgs\nHzdi+EhZvHOVfshaKL2CAELrYn8Tzo2Zt9zsbif8L7bPJROS3xqzn+GbCFt67/8Y\njTh84Taa4D49H6V+p01QPkvG7ub7Rw52fm56zY3mabbhbsREOceswsfunxSN/SOE\npLKVMopuVnRcwVIWmnzH9BlBhIzLqOS4kCYA5E5Irw217j/JTGVWEdMN0ar09nGh\nWA2Eq8aDANjAP1bao/4nmxsFU2zKbTR40Tb7/HKB5jaItYdkz6ppnxQDLTWe7T6+\nnGZwqmYtbQ==\n-----END CERTIFICATE-----\n"