apiVersion: "operator.nevis-security.ch/v1"
kind: "NevisComponent"
metadata:
  name: "npi"
  namespace: "adn-postit-tknxchng-01-dev"
  labels:
    deploymentTarget: "npi"
  annotations:
    projectKey: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT"
    patternId: "92e282d1dc2b69d9e4f91fc0"
spec:
  type: "NevisProxy"
  replicas: 1
  version: "8.2405.1"
  gitInitVersion: "1.3.0"
  runAsNonRoot: true
  ports:
    management: 11080
    https: 8443
  resources:
    limits:
      cpu: "2"
      memory: "2000Mi"
    requests:
      cpu: "20m"
      memory: "1000Mi"
  livenessProbe:
    management:
      httpGet:
        path: "/liveness"
      periodSeconds: 5
      timeoutSeconds: 6
  readinessProbe:
    management:
      httpGet:
        path: "/readiness"
      periodSeconds: 5
      timeoutSeconds: 6
  startupProbe:
    management:
      httpGet:
        path: "/readiness"
      periodSeconds: 5
      timeoutSeconds: 6
      failureThreshold: 50
  podDisruptionBudget:
    maxUnavailable: "50%"
  git:
    tag: "r-0fabce7d87e000fbcca57ade16023311651e5dcc"
    dir: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi"
    credentials: "git-credentials"
  keystores:
  - "npi-3b41ca4ca1c4028117d16f5b"
  - "npi-23dc4a9fcc79a12d82662747"
  - "npi-keystore-proxy-auth"
  - "npi-mockrelam-identity"
  - "npi-cossa-realm-identity"
  truststores:
  - "npi-trsutstore-proxy-auth"
  - "npi-mockrelam-tls-trust"
  - "npi-mockrelam-signer-trust"
  - "npi-cossa-realm-signer-trust"
  - "npi-cossa-realm-tls-trust"
  ingresses:
  - "npi"
  podSecurity:
    policy: "baseline"
    automountServiceAccountToken: false
  timeZone: "Europe/Zurich"