atmadmin/athletic-map-deploy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(tenants): replica Garmin/Apple Watch e nivela financeiro 1.4 em piloto/acme/demo

Browse Source 
- piloto+acme: saude 1.88-garmin, bff 1.87-garmin, frontend 1.90-garmin + ingress publico Garmin + env GARMIN_* (redirect por tenant)
- garmin-oauth secret criado em piloto-prod/acme-prod (fora do GitOps, como no demo)
- financeiro nivelado para 1.4 em demo e acme (piloto ja estava)
This commit is contained in:
atmadmin
2026-07-28 15:17:49 +00:00
parent ecc8347ccc
commit 35339b9767
13 changed files with 83 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tenants/acme/78-servico-saude.yaml
+11 -1
View File
@@ -20,7 +20,7 @@ spec:
spec:
containers:
- name: servico-saude
image: docker.io/library/servico-saude:1.6
image: docker.io/library/servico-saude:1.88-garmin
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
@@ -33,6 +33,16 @@ spec:
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
# Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4.
- { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" }
- { name: GARMIN_REDIRECT_URI, value: "https://acme.athleticmap.influxdigital.com.br/api/public/integrations/garmin/callback" }
- { name: GARMIN_FRONTEND_REDIRECT, value: "https://acme.athleticmap.influxdigital.com.br/integracoes/garmin" }
- name: GARMIN_CLIENT_ID
valueFrom:
secretKeyRef: { name: garmin-oauth, key: GARMIN_CLIENT_ID }
- name: GARMIN_CLIENT_SECRET
valueFrom:
secretKeyRef: { name: garmin-oauth, key: GARMIN_CLIENT_SECRET }
resources:
requests: { cpu: 150m, memory: 320Mi }
limits: { cpu: "1", memory: 768Mi }
tenants/acme/79-servico-financeiro.yaml
+1 -1
View File
@@ -20,7 +20,7 @@ spec:
spec:
containers:
- name: servico-financeiro
image: docker.io/library/servico-financeiro:1.0
image: docker.io/library/servico-financeiro:1.4
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
tenants/acme/90-servico-bff.yaml
+2 -1
View File
@@ -20,7 +20,7 @@ spec:
spec:
containers:
- name: servico-bff
image: docker.io/library/servico-bff:1.33
image: docker.io/library/servico-bff:1.87-garmin
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
@@ -40,6 +40,7 @@ spec:
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
- { name: GARMIN_FRONTEND_REDIRECT, value: "https://acme.athleticmap.influxdigital.com.br/integracoes/garmin" }
resources:
requests: { cpu: 100m, memory: 256Mi }
limits: { cpu: 500m, memory: 512Mi }
tenants/acme/95-frontend-spa.yaml
+1 -1
View File
@@ -20,7 +20,7 @@ spec:
spec:
containers:
- name: frontend-spa
image: docker.io/library/frontend-spa:1.74
image: docker.io/library/frontend-spa:1.90-garmin
imagePullPolicy: Never
ports: [{ containerPort: 80 }]
env:
tenants/acme/96-ingress-garmin-patch.yaml
+1
View File
@@ -0,0 +1 @@
# Patch manual: /api/public roteado ao BFF (Garmin OAuth callback)
tenants/acme/96-ingress-garmin-public.yaml
+25
View File
@@ -0,0 +1,25 @@
# Rota publica Garmin OAuth callback (BFF)
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: acme-garmin-public
namespace: acme-prod
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: acme-prod-redirect-https@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts: [acme.athleticmap.influxdigital.com.br]
secretName: acme-tls
rules:
- host: acme.athleticmap.influxdigital.com.br
http:
paths:
- path: /api/public
pathType: Prefix
backend:
service:
name: servico-bff
port:
number: 80
tenants/demo/79-servico-financeiro.yaml
+1 -1
View File
@@ -20,7 +20,7 @@ spec:
spec:
containers:
- name: servico-financeiro
image: docker.io/library/servico-financeiro:1.0
image: docker.io/library/servico-financeiro:1.4
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
tenants/demo/96-ingress-garmin-patch.yaml
+1
View File
@@ -0,0 +1 @@
# Patch manual: /api/public roteado ao BFF (Garmin OAuth callback)
tenants/piloto/78-servico-saude.yaml
+11 -1
View File
@@ -20,7 +20,7 @@ spec:
spec:
containers:
- name: servico-saude
image: docker.io/library/servico-saude:1.6
image: docker.io/library/servico-saude:1.88-garmin
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
@@ -33,6 +33,16 @@ spec:
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
# Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4.
- { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" }
- { name: GARMIN_REDIRECT_URI, value: "https://piloto.athleticmap.influxdigital.com.br/api/public/integrations/garmin/callback" }
- { name: GARMIN_FRONTEND_REDIRECT, value: "https://piloto.athleticmap.influxdigital.com.br/integracoes/garmin" }
- name: GARMIN_CLIENT_ID
valueFrom:
secretKeyRef: { name: garmin-oauth, key: GARMIN_CLIENT_ID }
- name: GARMIN_CLIENT_SECRET
valueFrom:
secretKeyRef: { name: garmin-oauth, key: GARMIN_CLIENT_SECRET }
resources:
requests: { cpu: 150m, memory: 320Mi }
limits: { cpu: "1", memory: 768Mi }
tenants/piloto/90-servico-bff.yaml
+2 -1
View File
@@ -20,7 +20,7 @@ spec:
spec:
containers:
- name: servico-bff
image: docker.io/library/servico-bff:1.33
image: docker.io/library/servico-bff:1.87-garmin
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
@@ -40,6 +40,7 @@ spec:
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
- { name: GARMIN_FRONTEND_REDIRECT, value: "https://piloto.athleticmap.influxdigital.com.br/integracoes/garmin" }
resources:
requests: { cpu: 100m, memory: 256Mi }
limits: { cpu: 500m, memory: 512Mi }
tenants/piloto/95-frontend-spa.yaml
+1 -1
View File
@@ -20,7 +20,7 @@ spec:
spec:
containers:
- name: frontend-spa
image: docker.io/library/frontend-spa:1.74
image: docker.io/library/frontend-spa:1.90-garmin
imagePullPolicy: Never
ports: [{ containerPort: 80 }]
env:
tenants/piloto/96-ingress-garmin-patch.yaml
+1
View File
@@ -0,0 +1 @@
# Patch manual: /api/public roteado ao BFF (Garmin OAuth callback)
tenants/piloto/96-ingress-garmin-public.yaml
+25
View File
@@ -0,0 +1,25 @@
# Rota publica Garmin OAuth callback (BFF)
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: piloto-garmin-public
namespace: piloto-prod
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
traefik.ingress.kubernetes.io/router.middlewares: piloto-prod-redirect-https@kubernetescrd
spec:
ingressClassName: traefik
tls:
- hosts: [piloto.athleticmap.influxdigital.com.br]
secretName: piloto-tls
rules:
- host: piloto.athleticmap.influxdigital.com.br
http:
paths:
- path: /api/public
pathType: Prefix
backend:
service:
name: servico-bff
port:
number: 80