acesso por e-mail: cifra da licenca selada (captacao) e envio de acesso no runtime-core dos 4 tenants

tenants/acme/65-runtime-core.yaml

@@ -49,6 +49,15 @@ spec:
           value: http://keycloak.plataforma-prod.svc:8080
         - name: ATM_KC_REALM
           value: athleticmap-3
+        # Acesso ao app por e-mail (06/10/2026): o cadastro pede ao captacao o envio (usuario, senha temporaria, chave).
+        - name: ATM_PLATAFORMA_ACESSOS_URL
+          value: http://servico-captacao.plataforma-prod.svc/api/public/acessos
+        - name: ATM_PLATAFORMA_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: resumo-credentials
+              key: token
+              optional: true
         - name: ATM_KC_CLIENT_SECRET
           valueFrom:
             secretKeyRef:

tenants/demo/65-runtime-core.yaml

@@ -49,6 +49,15 @@ spec:
           value: http://keycloak.plataforma-prod.svc:8080
         - name: ATM_KC_REALM
           value: athleticmap-2
+        # Acesso ao app por e-mail (06/10/2026): o cadastro pede ao captacao o envio (usuario, senha temporaria, chave).
+        - name: ATM_PLATAFORMA_ACESSOS_URL
+          value: http://servico-captacao.plataforma-prod.svc/api/public/acessos
+        - name: ATM_PLATAFORMA_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: resumo-credentials
+              key: token
+              optional: true
         - name: ATM_KC_CLIENT_SECRET
           valueFrom:
             secretKeyRef:

tenants/escolinha/65-runtime-core.yaml

@@ -47,6 +47,15 @@ spec:
           value: http://keycloak.plataforma-prod.svc:8080
         - name: ATM_KC_REALM
           value: athleticmap-4
+        # Acesso ao app por e-mail (06/10/2026): o cadastro pede ao captacao o envio (usuario, senha temporaria, chave).
+        - name: ATM_PLATAFORMA_ACESSOS_URL
+          value: http://servico-captacao.plataforma-prod.svc/api/public/acessos
+        - name: ATM_PLATAFORMA_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: resumo-credentials
+              key: token
+              optional: true
         - name: ATM_KC_CLIENT_SECRET
           valueFrom:
             secretKeyRef:

tenants/piloto/65-runtime-core.yaml

@@ -49,6 +49,15 @@ spec:
           value: http://keycloak.plataforma-prod.svc:8080
         - name: ATM_KC_REALM
           value: athleticmap-1
+        # Acesso ao app por e-mail (06/10/2026): o cadastro pede ao captacao o envio (usuario, senha temporaria, chave).
+        - name: ATM_PLATAFORMA_ACESSOS_URL
+          value: http://servico-captacao.plataforma-prod.svc/api/public/acessos
+        - name: ATM_PLATAFORMA_TOKEN
+          valueFrom:
+            secretKeyRef:
+              name: resumo-credentials
+              key: token
+              optional: true
         - name: ATM_KC_CLIENT_SECRET
           valueFrom:
             secretKeyRef:

tenants/plataforma/09-sealed-licenca-cifra.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  creationTimestamp: null
+  name: licenca-cifra
+  namespace: plataforma-prod
+spec:
+  encryptedData:
+    chave: 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
+  template:
+    metadata:
+      creationTimestamp: null
+      name: licenca-cifra
+      namespace: plataforma-prod

tenants/plataforma/82-servico-captacao.yaml

@@ -104,6 +104,11 @@ spec:
             # E-mail dos LOGINS dos realms que o provisionamento cria (EtapaCriarRealm).
             # Caixa propria, fora da cota da nao-responda@. Senha no SealedSecret smtp-logins.
             - { name: SMTP_LOGINS_USUARIO, value: "acesso@athleticmap.com" }
+            # Cifra da chave de licenca (06/10/2026): o reenvio manda a MESMA chave. Sem ela, reenvio e envio de
+            # acesso respondem 503. NUNCA trocar sem antes "trocar chave" em todos os tenants.
+            - name: ATM_LICENCA_CIFRA
+              valueFrom:
+                secretKeyRef: { name: licenca-cifra, key: chave }
             - name: SMTP_LOGINS_SENHA
               valueFrom:
                 secretKeyRef: { name: smtp-logins, key: senha }