From 00f628ab89bbc7baa76f3629aaf329aa84ae8e48 Mon Sep 17 00:00:00 2001 From: deploy Date: Sat, 26 Sep 2026 17:43:47 +0000 Subject: [PATCH] =?UTF-8?q?feat(acme):=20realm=20vai=20para=20o=20Keycloak?= =?UTF-8?q?=20compartilhado=20como=20athleticmap-3=20(card=20156)=20?= =?UTF-8?q?=E2=80=94=20issuer/JWKS/KC=5FURL=20trocados,=20saida=20de=20red?= =?UTF-8?q?e=20aberta,=20Keycloak=20proprio=20em=20replicas=200?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../17-netpol-keycloak-compartilhado.yaml | 26 +++++++++++++++++++ tenants/acme/20-keycloak.yaml | 2 +- tenants/acme/30-apps-stubs.yaml | 4 +-- tenants/acme/55-cronjobs-financeiro.yaml | 12 ++++----- tenants/acme/65-runtime-core.yaml | 4 +-- tenants/acme/66-runtime-operacao.yaml | 4 +-- tenants/acme/67-runtime-saude.yaml | 4 +-- tenants/acme/70-servico-configuracao.yaml | 4 +-- tenants/acme/72-servico-organizacao.yaml | 4 +-- tenants/acme/74-servico-planejamento.yaml | 4 +-- tenants/acme/76-servico-campeonato.yaml | 4 +-- tenants/acme/78-servico-saude.yaml | 4 +-- tenants/acme/79-servico-financeiro.yaml | 4 +-- tenants/acme/80-servico-cadastro.yaml | 4 +-- tenants/acme/81-servico-documentos.yaml | 4 +-- tenants/acme/82-servico-administrativo.yaml | 4 +-- .../acme/83-servico-assistencia-social.yaml | 4 +-- tenants/acme/84-servico-pedagogico.yaml | 4 +-- tenants/acme/85-servico-nutricao.yaml | 4 +-- tenants/acme/86-servico-agenda.yaml | 4 +-- tenants/acme/95-frontend-spa.yaml | 8 +++--- 21 files changed, 71 insertions(+), 45 deletions(-) create mode 100644 tenants/acme/17-netpol-keycloak-compartilhado.yaml diff --git a/tenants/acme/17-netpol-keycloak-compartilhado.yaml b/tenants/acme/17-netpol-keycloak-compartilhado.yaml new file mode 100644 index 0000000..cb56bee --- /dev/null +++ b/tenants/acme/17-netpol-keycloak-compartilhado.yaml @@ -0,0 +1,26 @@ +# ============================================================================= +# Card 156 (2026-09-26): o realm deste tenant mora no Keycloak COMPARTILHADO +# (`plataforma-prod`), e os runtimes/BFF/CronJobs precisam alcanca-lo para +# baixar o JWKS e pedir token. A `deny-cross-tenant` deste namespace nao +# abria essa saida (os tenants provisionados ja nascem com ela). O outro lado +# e o `16-netpol-tenants-no-keycloak.yaml` do plataforma. +# +# namespaceSelector + podSelector, e nao ipBlock: o controlador de rede do k3s +# avalia a politica DEPOIS do DNAT, com o IP do POD — ClusterIP nao serve. +# ============================================================================= +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: egress-keycloak-compartilhado + namespace: acme-prod +spec: + podSelector: {} + policyTypes: [Egress] + egress: + - to: + - namespaceSelector: + matchLabels: { kubernetes.io/metadata.name: plataforma-prod } + podSelector: + matchLabels: { app: keycloak } + ports: + - { protocol: TCP, port: 8080 } diff --git a/tenants/acme/20-keycloak.yaml b/tenants/acme/20-keycloak.yaml index b87552e..5fc10b7 100644 --- a/tenants/acme/20-keycloak.yaml +++ b/tenants/acme/20-keycloak.yaml @@ -5,7 +5,7 @@ metadata: name: keycloak namespace: acme-prod spec: - replicas: 1 + replicas: 0 selector: matchLabels: app: keycloak diff --git a/tenants/acme/30-apps-stubs.yaml b/tenants/acme/30-apps-stubs.yaml index 69f8146..78a154c 100644 --- a/tenants/acme/30-apps-stubs.yaml +++ b/tenants/acme/30-apps-stubs.yaml @@ -17,8 +17,8 @@ spec: image: docker.io/library/athletic-map-backend:1.3 imagePullPolicy: Never env: - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/acme/55-cronjobs-financeiro.yaml b/tenants/acme/55-cronjobs-financeiro.yaml index 2d2a421..a51fb40 100644 --- a/tenants/acme/55-cronjobs-financeiro.yaml +++ b/tenants/acme/55-cronjobs-financeiro.yaml @@ -88,9 +88,9 @@ spec: exec /bin/sh /script/disparar.sh env: - name: KEYCLOAK_URL - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/token - name: ISSUER_HOST - value: auth-acme.athleticmap.com + value: auth.athleticmap.com - name: CLIENT_SECRET valueFrom: secretKeyRef: @@ -133,9 +133,9 @@ spec: command: ["/bin/sh", "/script/disparar.sh"] env: - name: KEYCLOAK_URL - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/token - name: ISSUER_HOST - value: auth-acme.athleticmap.com + value: auth.athleticmap.com - name: ALVO value: http://servico-financeiro/api/financeiro/notas/processar?limite=50 - name: CLIENT_SECRET @@ -180,9 +180,9 @@ spec: command: ["/bin/sh", "/script/disparar.sh"] env: - name: KEYCLOAK_URL - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/token - name: ISSUER_HOST - value: auth-acme.athleticmap.com + value: auth.athleticmap.com - name: ALVO value: http://servico-financeiro/api/financeiro/conciliacao?limiteEventos=100&limiteCobrancas=100 - name: CLIENT_SECRET diff --git a/tenants/acme/65-runtime-core.yaml b/tenants/acme/65-runtime-core.yaml index deba8b5..2063a51 100644 --- a/tenants/acme/65-runtime-core.yaml +++ b/tenants/acme/65-runtime-core.yaml @@ -36,9 +36,9 @@ spec: name: db-compartilhado key: password - name: ATM_JWK_SET_URI - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-acme.athleticmap.com/realms/athleticmap + value: https://auth.athleticmap.com/realms/athleticmap-3 - name: ATM_TENANT value: acme - name: ATM_PLANO diff --git a/tenants/acme/66-runtime-operacao.yaml b/tenants/acme/66-runtime-operacao.yaml index cfcc774..4ea8732 100644 --- a/tenants/acme/66-runtime-operacao.yaml +++ b/tenants/acme/66-runtime-operacao.yaml @@ -36,9 +36,9 @@ spec: name: db-compartilhado key: password - name: ATM_JWK_SET_URI - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-acme.athleticmap.com/realms/athleticmap + value: https://auth.athleticmap.com/realms/athleticmap-3 - name: ATM_TENANT value: acme - name: ATM_PLANO diff --git a/tenants/acme/67-runtime-saude.yaml b/tenants/acme/67-runtime-saude.yaml index 13ab1e6..73ee158 100644 --- a/tenants/acme/67-runtime-saude.yaml +++ b/tenants/acme/67-runtime-saude.yaml @@ -36,9 +36,9 @@ spec: name: db-compartilhado key: password - name: ATM_JWK_SET_URI - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-acme.athleticmap.com/realms/athleticmap + value: https://auth.athleticmap.com/realms/athleticmap-3 - name: ATM_TENANT value: acme - name: ATM_PLANO diff --git a/tenants/acme/70-servico-configuracao.yaml b/tenants/acme/70-servico-configuracao.yaml index 1657ee5..1599635 100644 --- a/tenants/acme/70-servico-configuracao.yaml +++ b/tenants/acme/70-servico-configuracao.yaml @@ -31,8 +31,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/72-servico-organizacao.yaml b/tenants/acme/72-servico-organizacao.yaml index d51eccc..3faf1b6 100644 --- a/tenants/acme/72-servico-organizacao.yaml +++ b/tenants/acme/72-servico-organizacao.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/74-servico-planejamento.yaml b/tenants/acme/74-servico-planejamento.yaml index 58a66fc..1304a79 100644 --- a/tenants/acme/74-servico-planejamento.yaml +++ b/tenants/acme/74-servico-planejamento.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/76-servico-campeonato.yaml b/tenants/acme/76-servico-campeonato.yaml index ab2948c..2c9960c 100644 --- a/tenants/acme/76-servico-campeonato.yaml +++ b/tenants/acme/76-servico-campeonato.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/78-servico-saude.yaml b/tenants/acme/78-servico-saude.yaml index 0df7dba..826d541 100644 --- a/tenants/acme/78-servico-saude.yaml +++ b/tenants/acme/78-servico-saude.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/acme/79-servico-financeiro.yaml b/tenants/acme/79-servico-financeiro.yaml index d2e0496..ba74c93 100644 --- a/tenants/acme/79-servico-financeiro.yaml +++ b/tenants/acme/79-servico-financeiro.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/acme/80-servico-cadastro.yaml b/tenants/acme/80-servico-cadastro.yaml index c56917e..374158c 100644 --- a/tenants/acme/80-servico-cadastro.yaml +++ b/tenants/acme/80-servico-cadastro.yaml @@ -31,8 +31,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/acme/81-servico-documentos.yaml b/tenants/acme/81-servico-documentos.yaml index 516fcde..8dc2197 100644 --- a/tenants/acme/81-servico-documentos.yaml +++ b/tenants/acme/81-servico-documentos.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/82-servico-administrativo.yaml b/tenants/acme/82-servico-administrativo.yaml index 8e6e035..bc90022 100644 --- a/tenants/acme/82-servico-administrativo.yaml +++ b/tenants/acme/82-servico-administrativo.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/83-servico-assistencia-social.yaml b/tenants/acme/83-servico-assistencia-social.yaml index 23723e2..55b5e48 100644 --- a/tenants/acme/83-servico-assistencia-social.yaml +++ b/tenants/acme/83-servico-assistencia-social.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/84-servico-pedagogico.yaml b/tenants/acme/84-servico-pedagogico.yaml index dba8397..32ca394 100644 --- a/tenants/acme/84-servico-pedagogico.yaml +++ b/tenants/acme/84-servico-pedagogico.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/85-servico-nutricao.yaml b/tenants/acme/85-servico-nutricao.yaml index b563980..88c7759 100644 --- a/tenants/acme/85-servico-nutricao.yaml +++ b/tenants/acme/85-servico-nutricao.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/86-servico-agenda.yaml b/tenants/acme/86-servico-agenda.yaml index 8cdba00..1eb4479 100644 --- a/tenants/acme/86-servico-agenda.yaml +++ b/tenants/acme/86-servico-agenda.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/95-frontend-spa.yaml b/tenants/acme/95-frontend-spa.yaml index 0f00e1c..58c3569 100644 --- a/tenants/acme/95-frontend-spa.yaml +++ b/tenants/acme/95-frontend-spa.yaml @@ -25,8 +25,8 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-acme.athleticmap.com" } - - { name: ATM_REALM, value: "athleticmap" } + - { name: ATM_KC_URL, value: "https://auth.athleticmap.com" } + - { name: ATM_REALM, value: "athleticmap-3" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "acme" } - { name: ATM_PLANO, value: "institucional" } @@ -84,8 +84,8 @@ spec: - { name: ATM_PEDAGOGICO_URL, value: "http://servico-pedagogico" } - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-3/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-3" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "acme" }