From 035e74681c8b7010b08c48c43faef5a648f6eca6 Mon Sep 17 00:00:00 2001 From: deploy Date: Sat, 26 Sep 2026 17:38:51 +0000 Subject: [PATCH] =?UTF-8?q?feat(piloto):=20realm=20vai=20para=20o=20Keyclo?= =?UTF-8?q?ak=20compartilhado=20como=20athleticmap-1=20(card=20156)=20?= =?UTF-8?q?=E2=80=94=20issuer/JWKS/KC=5FURL=20trocados,=20saida=20de=20red?= =?UTF-8?q?e=20aberta,=20Keycloak=20proprio=20em=20replicas=200?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../17-netpol-keycloak-compartilhado.yaml | 26 +++++++++++++++++++ tenants/piloto/20-keycloak.yaml | 2 +- tenants/piloto/30-apps-stubs.yaml | 4 +-- tenants/piloto/55-cronjobs-financeiro.yaml | 12 ++++----- tenants/piloto/65-runtime-core.yaml | 4 +-- tenants/piloto/66-runtime-operacao.yaml | 4 +-- tenants/piloto/67-runtime-saude.yaml | 4 +-- tenants/piloto/70-servico-configuracao.yaml | 4 +-- tenants/piloto/72-servico-organizacao.yaml | 4 +-- tenants/piloto/74-servico-planejamento.yaml | 4 +-- tenants/piloto/76-servico-campeonato.yaml | 4 +-- tenants/piloto/78-servico-saude.yaml | 4 +-- tenants/piloto/79-servico-financeiro.yaml | 4 +-- tenants/piloto/80-servico-cadastro.yaml | 4 +-- tenants/piloto/81-servico-documentos.yaml | 4 +-- tenants/piloto/82-servico-administrativo.yaml | 4 +-- .../piloto/83-servico-assistencia-social.yaml | 4 +-- tenants/piloto/84-servico-pedagogico.yaml | 4 +-- tenants/piloto/85-servico-nutricao.yaml | 4 +-- tenants/piloto/86-servico-agenda.yaml | 4 +-- tenants/piloto/95-frontend-spa.yaml | 8 +++--- 21 files changed, 71 insertions(+), 45 deletions(-) create mode 100644 tenants/piloto/17-netpol-keycloak-compartilhado.yaml diff --git a/tenants/piloto/17-netpol-keycloak-compartilhado.yaml b/tenants/piloto/17-netpol-keycloak-compartilhado.yaml new file mode 100644 index 0000000..8a2a873 --- /dev/null +++ b/tenants/piloto/17-netpol-keycloak-compartilhado.yaml @@ -0,0 +1,26 @@ +# ============================================================================= +# Card 156 (2026-09-26): o realm deste tenant mora no Keycloak COMPARTILHADO +# (`plataforma-prod`), e os runtimes/BFF/CronJobs precisam alcanca-lo para +# baixar o JWKS e pedir token. A `deny-cross-tenant` deste namespace nao +# abria essa saida (os tenants provisionados ja nascem com ela). O outro lado +# e o `16-netpol-tenants-no-keycloak.yaml` do plataforma. +# +# namespaceSelector + podSelector, e nao ipBlock: o controlador de rede do k3s +# avalia a politica DEPOIS do DNAT, com o IP do POD — ClusterIP nao serve. +# ============================================================================= +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: egress-keycloak-compartilhado + namespace: piloto-prod +spec: + podSelector: {} + policyTypes: [Egress] + egress: + - to: + - namespaceSelector: + matchLabels: { kubernetes.io/metadata.name: plataforma-prod } + podSelector: + matchLabels: { app: keycloak } + ports: + - { protocol: TCP, port: 8080 } diff --git a/tenants/piloto/20-keycloak.yaml b/tenants/piloto/20-keycloak.yaml index 71cfd83..9b8db21 100644 --- a/tenants/piloto/20-keycloak.yaml +++ b/tenants/piloto/20-keycloak.yaml @@ -5,7 +5,7 @@ metadata: name: keycloak namespace: piloto-prod spec: - replicas: 1 + replicas: 0 selector: matchLabels: app: keycloak diff --git a/tenants/piloto/30-apps-stubs.yaml b/tenants/piloto/30-apps-stubs.yaml index 67befa8..07e2721 100644 --- a/tenants/piloto/30-apps-stubs.yaml +++ b/tenants/piloto/30-apps-stubs.yaml @@ -17,8 +17,8 @@ spec: image: docker.io/library/athletic-map-backend:1.3 imagePullPolicy: Never env: - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/piloto/55-cronjobs-financeiro.yaml b/tenants/piloto/55-cronjobs-financeiro.yaml index 3eff301..7c0bf69 100644 --- a/tenants/piloto/55-cronjobs-financeiro.yaml +++ b/tenants/piloto/55-cronjobs-financeiro.yaml @@ -88,9 +88,9 @@ spec: exec /bin/sh /script/disparar.sh env: - name: KEYCLOAK_URL - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/token - name: ISSUER_HOST - value: auth-piloto.athleticmap.com + value: auth.athleticmap.com - name: CLIENT_SECRET valueFrom: secretKeyRef: @@ -133,9 +133,9 @@ spec: command: ["/bin/sh", "/script/disparar.sh"] env: - name: KEYCLOAK_URL - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/token - name: ISSUER_HOST - value: auth-piloto.athleticmap.com + value: auth.athleticmap.com - name: ALVO value: http://servico-financeiro/api/financeiro/notas/processar?limite=50 - name: CLIENT_SECRET @@ -180,9 +180,9 @@ spec: command: ["/bin/sh", "/script/disparar.sh"] env: - name: KEYCLOAK_URL - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/token - name: ISSUER_HOST - value: auth-piloto.athleticmap.com + value: auth.athleticmap.com - name: ALVO value: http://servico-financeiro/api/financeiro/conciliacao?limiteEventos=100&limiteCobrancas=100 - name: CLIENT_SECRET diff --git a/tenants/piloto/65-runtime-core.yaml b/tenants/piloto/65-runtime-core.yaml index bf43a4f..0ce0e1f 100644 --- a/tenants/piloto/65-runtime-core.yaml +++ b/tenants/piloto/65-runtime-core.yaml @@ -36,9 +36,9 @@ spec: name: db-compartilhado key: password - name: ATM_JWK_SET_URI - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-piloto.athleticmap.com/realms/athleticmap + value: https://auth.athleticmap.com/realms/athleticmap-1 - name: ATM_TENANT value: piloto - name: ATM_PLANO diff --git a/tenants/piloto/66-runtime-operacao.yaml b/tenants/piloto/66-runtime-operacao.yaml index 04ca267..26c3537 100644 --- a/tenants/piloto/66-runtime-operacao.yaml +++ b/tenants/piloto/66-runtime-operacao.yaml @@ -36,9 +36,9 @@ spec: name: db-compartilhado key: password - name: ATM_JWK_SET_URI - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-piloto.athleticmap.com/realms/athleticmap + value: https://auth.athleticmap.com/realms/athleticmap-1 - name: ATM_TENANT value: piloto - name: ATM_PLANO diff --git a/tenants/piloto/67-runtime-saude.yaml b/tenants/piloto/67-runtime-saude.yaml index 14ae79a..803e110 100644 --- a/tenants/piloto/67-runtime-saude.yaml +++ b/tenants/piloto/67-runtime-saude.yaml @@ -36,9 +36,9 @@ spec: name: db-compartilhado key: password - name: ATM_JWK_SET_URI - value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs + value: http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-piloto.athleticmap.com/realms/athleticmap + value: https://auth.athleticmap.com/realms/athleticmap-1 - name: ATM_TENANT value: piloto - name: ATM_PLANO diff --git a/tenants/piloto/70-servico-configuracao.yaml b/tenants/piloto/70-servico-configuracao.yaml index 0ff1e95..8dba3df 100644 --- a/tenants/piloto/70-servico-configuracao.yaml +++ b/tenants/piloto/70-servico-configuracao.yaml @@ -31,8 +31,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/72-servico-organizacao.yaml b/tenants/piloto/72-servico-organizacao.yaml index 894a233..b97d0e0 100644 --- a/tenants/piloto/72-servico-organizacao.yaml +++ b/tenants/piloto/72-servico-organizacao.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/74-servico-planejamento.yaml b/tenants/piloto/74-servico-planejamento.yaml index eb8b509..de9d268 100644 --- a/tenants/piloto/74-servico-planejamento.yaml +++ b/tenants/piloto/74-servico-planejamento.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/76-servico-campeonato.yaml b/tenants/piloto/76-servico-campeonato.yaml index b6879d0..2448825 100644 --- a/tenants/piloto/76-servico-campeonato.yaml +++ b/tenants/piloto/76-servico-campeonato.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/78-servico-saude.yaml b/tenants/piloto/78-servico-saude.yaml index 037abb7..73897ca 100644 --- a/tenants/piloto/78-servico-saude.yaml +++ b/tenants/piloto/78-servico-saude.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/piloto/79-servico-financeiro.yaml b/tenants/piloto/79-servico-financeiro.yaml index 09b251e..abc8513 100644 --- a/tenants/piloto/79-servico-financeiro.yaml +++ b/tenants/piloto/79-servico-financeiro.yaml @@ -30,8 +30,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/piloto/80-servico-cadastro.yaml b/tenants/piloto/80-servico-cadastro.yaml index 6864021..c45c11c 100644 --- a/tenants/piloto/80-servico-cadastro.yaml +++ b/tenants/piloto/80-servico-cadastro.yaml @@ -31,8 +31,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/piloto/81-servico-documentos.yaml b/tenants/piloto/81-servico-documentos.yaml index 993d4f2..1e449b8 100644 --- a/tenants/piloto/81-servico-documentos.yaml +++ b/tenants/piloto/81-servico-documentos.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/82-servico-administrativo.yaml b/tenants/piloto/82-servico-administrativo.yaml index ecccdcb..9610a41 100644 --- a/tenants/piloto/82-servico-administrativo.yaml +++ b/tenants/piloto/82-servico-administrativo.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/83-servico-assistencia-social.yaml b/tenants/piloto/83-servico-assistencia-social.yaml index fee704a..690d018 100644 --- a/tenants/piloto/83-servico-assistencia-social.yaml +++ b/tenants/piloto/83-servico-assistencia-social.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/84-servico-pedagogico.yaml b/tenants/piloto/84-servico-pedagogico.yaml index 1c1976b..0132612 100644 --- a/tenants/piloto/84-servico-pedagogico.yaml +++ b/tenants/piloto/84-servico-pedagogico.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/85-servico-nutricao.yaml b/tenants/piloto/85-servico-nutricao.yaml index 6073b3a..e817229 100644 --- a/tenants/piloto/85-servico-nutricao.yaml +++ b/tenants/piloto/85-servico-nutricao.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/86-servico-agenda.yaml b/tenants/piloto/86-servico-agenda.yaml index e7239ee..fa084c1 100644 --- a/tenants/piloto/86-servico-agenda.yaml +++ b/tenants/piloto/86-servico-agenda.yaml @@ -26,8 +26,8 @@ spec: - name: SPRING_DATASOURCE_PASSWORD valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/95-frontend-spa.yaml b/tenants/piloto/95-frontend-spa.yaml index 158b1e1..9c48298 100644 --- a/tenants/piloto/95-frontend-spa.yaml +++ b/tenants/piloto/95-frontend-spa.yaml @@ -25,8 +25,8 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-piloto.athleticmap.com" } - - { name: ATM_REALM, value: "athleticmap" } + - { name: ATM_KC_URL, value: "https://auth.athleticmap.com" } + - { name: ATM_REALM, value: "athleticmap-1" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "piloto" } - { name: ATM_PLANO, value: "institucional" } @@ -84,8 +84,8 @@ spec: - { name: ATM_PEDAGOGICO_URL, value: "http://servico-pedagogico" } - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/athleticmap-1/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/athleticmap-1" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "piloto" }