From c1f2fe808dc42d9677f65b45524817bd212892ec Mon Sep 17 00:00:00 2001 From: ATM Platform Date: Tue, 6 Oct 2026 14:32:49 +0000 Subject: [PATCH] acesso por e-mail: cifra da licenca selada (captacao) e envio de acesso no runtime-core dos 4 tenants --- tenants/acme/65-runtime-core.yaml | 9 +++++++++ tenants/demo/65-runtime-core.yaml | 9 +++++++++ tenants/escolinha/65-runtime-core.yaml | 9 +++++++++ tenants/piloto/65-runtime-core.yaml | 9 +++++++++ tenants/plataforma/09-sealed-licenca-cifra.yaml | 15 +++++++++++++++ tenants/plataforma/82-servico-captacao.yaml | 5 +++++ 6 files changed, 56 insertions(+) create mode 100644 tenants/plataforma/09-sealed-licenca-cifra.yaml diff --git a/tenants/acme/65-runtime-core.yaml b/tenants/acme/65-runtime-core.yaml index acf9d40..4870e53 100644 --- a/tenants/acme/65-runtime-core.yaml +++ b/tenants/acme/65-runtime-core.yaml @@ -49,6 +49,15 @@ spec: value: http://keycloak.plataforma-prod.svc:8080 - name: ATM_KC_REALM value: athleticmap-3 + # Acesso ao app por e-mail (06/10/2026): o cadastro pede ao captacao o envio (usuario, senha temporaria, chave). + - name: ATM_PLATAFORMA_ACESSOS_URL + value: http://servico-captacao.plataforma-prod.svc/api/public/acessos + - name: ATM_PLATAFORMA_TOKEN + valueFrom: + secretKeyRef: + name: resumo-credentials + key: token + optional: true - name: ATM_KC_CLIENT_SECRET valueFrom: secretKeyRef: diff --git a/tenants/demo/65-runtime-core.yaml b/tenants/demo/65-runtime-core.yaml index 6470d0b..e596a1a 100644 --- a/tenants/demo/65-runtime-core.yaml +++ b/tenants/demo/65-runtime-core.yaml @@ -49,6 +49,15 @@ spec: value: http://keycloak.plataforma-prod.svc:8080 - name: ATM_KC_REALM value: athleticmap-2 + # Acesso ao app por e-mail (06/10/2026): o cadastro pede ao captacao o envio (usuario, senha temporaria, chave). + - name: ATM_PLATAFORMA_ACESSOS_URL + value: http://servico-captacao.plataforma-prod.svc/api/public/acessos + - name: ATM_PLATAFORMA_TOKEN + valueFrom: + secretKeyRef: + name: resumo-credentials + key: token + optional: true - name: ATM_KC_CLIENT_SECRET valueFrom: secretKeyRef: diff --git a/tenants/escolinha/65-runtime-core.yaml b/tenants/escolinha/65-runtime-core.yaml index f7dbf92..b93e759 100644 --- a/tenants/escolinha/65-runtime-core.yaml +++ b/tenants/escolinha/65-runtime-core.yaml @@ -47,6 +47,15 @@ spec: value: http://keycloak.plataforma-prod.svc:8080 - name: ATM_KC_REALM value: athleticmap-4 + # Acesso ao app por e-mail (06/10/2026): o cadastro pede ao captacao o envio (usuario, senha temporaria, chave). + - name: ATM_PLATAFORMA_ACESSOS_URL + value: http://servico-captacao.plataforma-prod.svc/api/public/acessos + - name: ATM_PLATAFORMA_TOKEN + valueFrom: + secretKeyRef: + name: resumo-credentials + key: token + optional: true - name: ATM_KC_CLIENT_SECRET valueFrom: secretKeyRef: diff --git a/tenants/piloto/65-runtime-core.yaml b/tenants/piloto/65-runtime-core.yaml index f52f424..edebbbc 100644 --- a/tenants/piloto/65-runtime-core.yaml +++ b/tenants/piloto/65-runtime-core.yaml @@ -49,6 +49,15 @@ spec: value: http://keycloak.plataforma-prod.svc:8080 - name: ATM_KC_REALM value: athleticmap-1 + # Acesso ao app por e-mail (06/10/2026): o cadastro pede ao captacao o envio (usuario, senha temporaria, chave). + - name: ATM_PLATAFORMA_ACESSOS_URL + value: http://servico-captacao.plataforma-prod.svc/api/public/acessos + - name: ATM_PLATAFORMA_TOKEN + valueFrom: + secretKeyRef: + name: resumo-credentials + key: token + optional: true - name: ATM_KC_CLIENT_SECRET valueFrom: secretKeyRef: diff --git a/tenants/plataforma/09-sealed-licenca-cifra.yaml b/tenants/plataforma/09-sealed-licenca-cifra.yaml new file mode 100644 index 0000000..585722c --- /dev/null +++ b/tenants/plataforma/09-sealed-licenca-cifra.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: bitnami.com/v1alpha1 +kind: SealedSecret +metadata: + creationTimestamp: null + name: licenca-cifra + namespace: plataforma-prod +spec: + encryptedData: + chave: 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 + template: + metadata: + creationTimestamp: null + name: licenca-cifra + namespace: plataforma-prod diff --git a/tenants/plataforma/82-servico-captacao.yaml b/tenants/plataforma/82-servico-captacao.yaml index 21c0918..63e17c3 100644 --- a/tenants/plataforma/82-servico-captacao.yaml +++ b/tenants/plataforma/82-servico-captacao.yaml @@ -104,6 +104,11 @@ spec: # E-mail dos LOGINS dos realms que o provisionamento cria (EtapaCriarRealm). # Caixa propria, fora da cota da nao-responda@. Senha no SealedSecret smtp-logins. - { name: SMTP_LOGINS_USUARIO, value: "acesso@athleticmap.com" } + # Cifra da chave de licenca (06/10/2026): o reenvio manda a MESMA chave. Sem ela, reenvio e envio de + # acesso respondem 503. NUNCA trocar sem antes "trocar chave" em todos os tenants. + - name: ATM_LICENCA_CIFRA + valueFrom: + secretKeyRef: { name: licenca-cifra, key: chave } - name: SMTP_LOGINS_SENHA valueFrom: secretKeyRef: { name: smtp-logins, key: senha }