acme: remove o Postgres e o Keycloak antigos (etapas 4-5; decisao do dono 13/10). Os PVCs ficam ate a conferencia da chave.

tenants/acme/05-sealed-db-credentials.yaml

@@ -1,15 +0,0 @@
----
-apiVersion: bitnami.com/v1alpha1
-kind: SealedSecret
-metadata:
-  creationTimestamp: null
-  name: db-credentials
-  namespace: acme-prod
-spec:
-  encryptedData:
-    password: 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
-  template:
-    metadata:
-      creationTimestamp: null
-      name: db-credentials
-      namespace: acme-prod

tenants/acme/10-postgres.yaml

@@ -1,84 +0,0 @@
-# PostgreSQL dedicado do tenant demo (banco da aplicação + banco do Keycloak)
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: pg-initdb
-  namespace: acme-prod
-data:
-  01-keycloak.sql: |
-    CREATE DATABASE keycloak;
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: postgres-data
-  namespace: acme-prod
-spec:
-  accessModes: [ReadWriteOnce]
-  storageClassName: local-path
-  resources:
-    requests:
-      storage: 5Gi
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: postgres
-  namespace: acme-prod
-spec:
-  replicas: 0   # etapa 3 (06/10/2026): banco antigo fora do ar por 7 dias; voltar = 1
-  selector:
-    matchLabels:
-      app: postgres
-  template:
-    metadata:
-      labels:
-        app: postgres
-    spec:
-      containers:
-        - name: postgres
-          image: postgres:16
-          args: ["-c", "max_connections=300"]
-          ports:
-            - containerPort: 5432
-          env:
-            - name: POSTGRES_DB
-              value: athleticmap
-            - name: POSTGRES_USER
-              value: atm
-            - name: POSTGRES_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: db-credentials
-                  key: password
-            - name: PGDATA
-              value: /var/lib/postgresql/data/pgdata
-          volumeMounts:
-            - name: data
-              mountPath: /var/lib/postgresql/data
-            - name: initdb
-              mountPath: /docker-entrypoint-initdb.d
-          readinessProbe:
-            exec:
-              command: ["pg_isready", "-U", "atm", "-d", "athleticmap"]
-            initialDelaySeconds: 10
-            periodSeconds: 5
-      volumes:
-        - name: data
-          persistentVolumeClaim:
-            claimName: postgres-data
-        - name: initdb
-          configMap:
-            name: pg-initdb
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: postgres
-  namespace: acme-prod
-spec:
-  selector:
-    app: postgres
-  ports:
-    - port: 5432
-      targetPort: 5432

tenants/acme/20-keycloak.yaml

@@ -1,86 +0,0 @@
-# Keycloak dedicado do tenant demo (IdP do silo) — modo dev, persistindo no Postgres
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: keycloak
-  namespace: acme-prod
-spec:
-  replicas: 0
-  selector:
-    matchLabels:
-      app: keycloak
-  template:
-    metadata:
-      labels:
-        app: keycloak
-    spec:
-      containers:
-        - name: keycloak
-          image: quay.io/keycloak/keycloak:26.0
-          args: ["start-dev", "--import-realm"]
-          env:
-            - name: KC_DB
-              value: postgres
-            - name: KC_DB_URL
-              value: "jdbc:postgresql://postgres:5432/keycloak"
-            - name: KC_DB_USERNAME
-              value: atm
-            - name: KC_DB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: db-credentials
-                  key: password
-            - name: KC_BOOTSTRAP_ADMIN_USERNAME
-              value: admin
-            - name: KC_BOOTSTRAP_ADMIN_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: keycloak-admin
-                  key: password
-            - name: KC_HEALTH_ENABLED
-              value: "true"
-            - name: KC_HTTP_ENABLED
-              value: "true"
-            - name: KC_PROXY_HEADERS
-              value: xforwarded
-            - name: KC_HOSTNAME
-              value: "auth-acme.athleticmap.com"
-            - name: KC_HOSTNAME_STRICT
-              value: "true"
-          ports:
-            - containerPort: 8080
-            - containerPort: 9000
-          resources:
-            requests:
-              cpu: 150m
-              memory: 512Mi
-            limits:
-              cpu: "1"
-              memory: 1Gi
-          readinessProbe:
-            httpGet:
-              path: /health/ready
-              port: 9000
-            initialDelaySeconds: 30
-            periodSeconds: 10
-            failureThreshold: 40
-          volumeMounts:
-            - name: realm-import
-              mountPath: /opt/keycloak/data/import
-              readOnly: true
-      volumes:
-        - name: realm-import
-          configMap:
-            name: kc-realm-import
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: keycloak
-  namespace: acme-prod
-spec:
-  selector:
-    app: keycloak
-  ports:
-    - port: 8080
-      targetPort: 8080