diff --git a/moldes/consolidado/70-runtime-core.yaml b/moldes/consolidado/70-runtime-core.yaml index b21a614..c72b3cd 100644 --- a/moldes/consolidado/70-runtime-core.yaml +++ b/moldes/consolidado/70-runtime-core.yaml @@ -38,7 +38,7 @@ spec: # nome do tenant: uma instancia so nao comporta quatro realms # chamados `athleticmap`. - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/{{REALM}}/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/{{REALM}}" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.influxdigital.com.br/realms/{{REALM}}" } - { name: ATM_TENANT, value: "{{TENANT}}" } - { name: ATM_PLANO, value: "{{PLANO}}" } resources: diff --git a/moldes/consolidado/71-runtime-operacao.yaml b/moldes/consolidado/71-runtime-operacao.yaml index d4810d5..cba5d9c 100644 --- a/moldes/consolidado/71-runtime-operacao.yaml +++ b/moldes/consolidado/71-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: # nome do tenant: uma instancia so nao comporta quatro realms # chamados `athleticmap`. - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/{{REALM}}/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/{{REALM}}" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.influxdigital.com.br/realms/{{REALM}}" } - { name: ATM_TENANT, value: "{{TENANT}}" } - { name: ATM_PLANO, value: "{{PLANO}}" } # O provedor de pagamento vive neste runtime. diff --git a/moldes/consolidado/72-runtime-saude.yaml b/moldes/consolidado/72-runtime-saude.yaml index 4bbd88e..798f3a6 100644 --- a/moldes/consolidado/72-runtime-saude.yaml +++ b/moldes/consolidado/72-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: # nome do tenant: uma instancia so nao comporta quatro realms # chamados `athleticmap`. - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/{{REALM}}/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/{{REALM}}" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.influxdigital.com.br/realms/{{REALM}}" } - { name: ATM_TENANT, value: "{{TENANT}}" } - { name: ATM_PLANO, value: "{{PLANO}}" } # Retencao da trilha de auditoria. O expurgo roda agendado DENTRO diff --git a/moldes/consolidado/95-frontend-spa.yaml b/moldes/consolidado/95-frontend-spa.yaml index e7079fb..bf694b5 100644 --- a/moldes/consolidado/95-frontend-spa.yaml +++ b/moldes/consolidado/95-frontend-spa.yaml @@ -38,7 +38,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth.athleticmap.com" } + - { name: ATM_KC_URL, value: "https://auth.athleticmap.influxdigital.com.br" } - { name: ATM_REALM, value: "{{REALM}}" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "{{TENANT}}" } diff --git a/tenants/acme/20-keycloak.yaml b/tenants/acme/20-keycloak.yaml index b87552e..075798b 100644 --- a/tenants/acme/20-keycloak.yaml +++ b/tenants/acme/20-keycloak.yaml @@ -44,7 +44,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-acme.athleticmap.com" + value: "auth-acme.athleticmap.influxdigital.com.br" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/acme/30-apps-stubs.yaml b/tenants/acme/30-apps-stubs.yaml index 0bda606..303f6a9 100644 --- a/tenants/acme/30-apps-stubs.yaml +++ b/tenants/acme/30-apps-stubs.yaml @@ -18,7 +18,7 @@ spec: imagePullPolicy: Never env: - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/acme/65-runtime-core.yaml b/tenants/acme/65-runtime-core.yaml index deba8b5..de6f424 100644 --- a/tenants/acme/65-runtime-core.yaml +++ b/tenants/acme/65-runtime-core.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-acme.athleticmap.com/realms/athleticmap + value: https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: acme - name: ATM_PLANO diff --git a/tenants/acme/66-runtime-operacao.yaml b/tenants/acme/66-runtime-operacao.yaml index 8824b3a..a3c3399 100644 --- a/tenants/acme/66-runtime-operacao.yaml +++ b/tenants/acme/66-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-acme.athleticmap.com/realms/athleticmap + value: https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: acme - name: ATM_PLANO diff --git a/tenants/acme/67-runtime-saude.yaml b/tenants/acme/67-runtime-saude.yaml index 2196b26..a59fb8f 100644 --- a/tenants/acme/67-runtime-saude.yaml +++ b/tenants/acme/67-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-acme.athleticmap.com/realms/athleticmap + value: https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: acme - name: ATM_PLANO diff --git a/tenants/acme/70-servico-configuracao.yaml b/tenants/acme/70-servico-configuracao.yaml index 1657ee5..f924cf1 100644 --- a/tenants/acme/70-servico-configuracao.yaml +++ b/tenants/acme/70-servico-configuracao.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/72-servico-organizacao.yaml b/tenants/acme/72-servico-organizacao.yaml index d51eccc..26f08b5 100644 --- a/tenants/acme/72-servico-organizacao.yaml +++ b/tenants/acme/72-servico-organizacao.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/74-servico-planejamento.yaml b/tenants/acme/74-servico-planejamento.yaml index 58a66fc..1340a01 100644 --- a/tenants/acme/74-servico-planejamento.yaml +++ b/tenants/acme/74-servico-planejamento.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/76-servico-campeonato.yaml b/tenants/acme/76-servico-campeonato.yaml index ab2948c..f524fe9 100644 --- a/tenants/acme/76-servico-campeonato.yaml +++ b/tenants/acme/76-servico-campeonato.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/78-servico-saude.yaml b/tenants/acme/78-servico-saude.yaml index aded21f..a959aa0 100644 --- a/tenants/acme/78-servico-saude.yaml +++ b/tenants/acme/78-servico-saude.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/acme/79-servico-financeiro.yaml b/tenants/acme/79-servico-financeiro.yaml index d2e0496..8cd95fb 100644 --- a/tenants/acme/79-servico-financeiro.yaml +++ b/tenants/acme/79-servico-financeiro.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/acme/80-servico-cadastro.yaml b/tenants/acme/80-servico-cadastro.yaml index c56917e..3762e2d 100644 --- a/tenants/acme/80-servico-cadastro.yaml +++ b/tenants/acme/80-servico-cadastro.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/acme/81-servico-documentos.yaml b/tenants/acme/81-servico-documentos.yaml index 516fcde..d06cd0f 100644 --- a/tenants/acme/81-servico-documentos.yaml +++ b/tenants/acme/81-servico-documentos.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/82-servico-administrativo.yaml b/tenants/acme/82-servico-administrativo.yaml index 8e6e035..2031122 100644 --- a/tenants/acme/82-servico-administrativo.yaml +++ b/tenants/acme/82-servico-administrativo.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/83-servico-assistencia-social.yaml b/tenants/acme/83-servico-assistencia-social.yaml index 23723e2..7bcd322 100644 --- a/tenants/acme/83-servico-assistencia-social.yaml +++ b/tenants/acme/83-servico-assistencia-social.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/84-servico-pedagogico.yaml b/tenants/acme/84-servico-pedagogico.yaml index dba8397..4934ae5 100644 --- a/tenants/acme/84-servico-pedagogico.yaml +++ b/tenants/acme/84-servico-pedagogico.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/85-servico-nutricao.yaml b/tenants/acme/85-servico-nutricao.yaml index b563980..d332c3e 100644 --- a/tenants/acme/85-servico-nutricao.yaml +++ b/tenants/acme/85-servico-nutricao.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/86-servico-agenda.yaml b/tenants/acme/86-servico-agenda.yaml index 8cdba00..22b9986 100644 --- a/tenants/acme/86-servico-agenda.yaml +++ b/tenants/acme/86-servico-agenda.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/90-servico-bff.yaml b/tenants/acme/90-servico-bff.yaml index 6da01fc..463433a 100644 --- a/tenants/acme/90-servico-bff.yaml +++ b/tenants/acme/90-servico-bff.yaml @@ -38,7 +38,7 @@ spec: - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "acme" } diff --git a/tenants/acme/95-frontend-spa.yaml b/tenants/acme/95-frontend-spa.yaml index d779bf7..aa95a46 100644 --- a/tenants/acme/95-frontend-spa.yaml +++ b/tenants/acme/95-frontend-spa.yaml @@ -24,7 +24,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-acme.athleticmap.com" } + - { name: ATM_KC_URL, value: "https://auth-acme.athleticmap.influxdigital.com.br" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "acme" } diff --git a/tenants/demo/20-keycloak.yaml b/tenants/demo/20-keycloak.yaml index a94a26c..974671c 100644 --- a/tenants/demo/20-keycloak.yaml +++ b/tenants/demo/20-keycloak.yaml @@ -45,7 +45,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-demo.athleticmap.com" + value: "auth-demo.athleticmap.influxdigital.com.br" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/demo/30-apps-stubs.yaml b/tenants/demo/30-apps-stubs.yaml index 7f6de79..f73e700 100644 --- a/tenants/demo/30-apps-stubs.yaml +++ b/tenants/demo/30-apps-stubs.yaml @@ -18,7 +18,7 @@ spec: imagePullPolicy: Never env: - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/demo/65-runtime-core.yaml b/tenants/demo/65-runtime-core.yaml index 30e4c3e..52c80c2 100644 --- a/tenants/demo/65-runtime-core.yaml +++ b/tenants/demo/65-runtime-core.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-demo.athleticmap.com/realms/athleticmap + value: https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: demo - name: ATM_PLANO diff --git a/tenants/demo/66-runtime-operacao.yaml b/tenants/demo/66-runtime-operacao.yaml index 5882c48..3251ae1 100644 --- a/tenants/demo/66-runtime-operacao.yaml +++ b/tenants/demo/66-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-demo.athleticmap.com/realms/athleticmap + value: https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: demo - name: ATM_PLANO diff --git a/tenants/demo/67-runtime-saude.yaml b/tenants/demo/67-runtime-saude.yaml index 62e4bdd..6d92ea3 100644 --- a/tenants/demo/67-runtime-saude.yaml +++ b/tenants/demo/67-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-demo.athleticmap.com/realms/athleticmap + value: https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: demo - name: ATM_PLANO diff --git a/tenants/demo/70-servico-configuracao.yaml b/tenants/demo/70-servico-configuracao.yaml index 263ec9a..2d06bfa 100644 --- a/tenants/demo/70-servico-configuracao.yaml +++ b/tenants/demo/70-servico-configuracao.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/demo/72-servico-organizacao.yaml b/tenants/demo/72-servico-organizacao.yaml index fd9695d..1cc2ce4 100644 --- a/tenants/demo/72-servico-organizacao.yaml +++ b/tenants/demo/72-servico-organizacao.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/demo/74-servico-planejamento.yaml b/tenants/demo/74-servico-planejamento.yaml index 717f383..f31cafd 100644 --- a/tenants/demo/74-servico-planejamento.yaml +++ b/tenants/demo/74-servico-planejamento.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/demo/76-servico-campeonato.yaml b/tenants/demo/76-servico-campeonato.yaml index 673e155..6b88888 100644 --- a/tenants/demo/76-servico-campeonato.yaml +++ b/tenants/demo/76-servico-campeonato.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/demo/78-servico-saude.yaml b/tenants/demo/78-servico-saude.yaml index 17ba336..754b04a 100644 --- a/tenants/demo/78-servico-saude.yaml +++ b/tenants/demo/78-servico-saude.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/demo/79-servico-financeiro.yaml b/tenants/demo/79-servico-financeiro.yaml index 5255189..15662a1 100644 --- a/tenants/demo/79-servico-financeiro.yaml +++ b/tenants/demo/79-servico-financeiro.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/demo/80-servico-cadastro.yaml b/tenants/demo/80-servico-cadastro.yaml index f2812a2..af6b5f5 100644 --- a/tenants/demo/80-servico-cadastro.yaml +++ b/tenants/demo/80-servico-cadastro.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/demo/81-servico-documentos.yaml b/tenants/demo/81-servico-documentos.yaml index b8e1b7f..799cb4b 100644 --- a/tenants/demo/81-servico-documentos.yaml +++ b/tenants/demo/81-servico-documentos.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/82-servico-administrativo.yaml b/tenants/demo/82-servico-administrativo.yaml index 6bcfd17..e66f684 100644 --- a/tenants/demo/82-servico-administrativo.yaml +++ b/tenants/demo/82-servico-administrativo.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/83-servico-assistencia-social.yaml b/tenants/demo/83-servico-assistencia-social.yaml index 0fb6433..b349010 100644 --- a/tenants/demo/83-servico-assistencia-social.yaml +++ b/tenants/demo/83-servico-assistencia-social.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/84-servico-pedagogico.yaml b/tenants/demo/84-servico-pedagogico.yaml index 0b6973b..d3cccec 100644 --- a/tenants/demo/84-servico-pedagogico.yaml +++ b/tenants/demo/84-servico-pedagogico.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/85-servico-nutricao.yaml b/tenants/demo/85-servico-nutricao.yaml index 7edfd88..ce94e7c 100644 --- a/tenants/demo/85-servico-nutricao.yaml +++ b/tenants/demo/85-servico-nutricao.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/86-servico-agenda.yaml b/tenants/demo/86-servico-agenda.yaml index 6d8f57e..f4407ae 100644 --- a/tenants/demo/86-servico-agenda.yaml +++ b/tenants/demo/86-servico-agenda.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/90-servico-bff.yaml b/tenants/demo/90-servico-bff.yaml index cceea93..654c069 100644 --- a/tenants/demo/90-servico-bff.yaml +++ b/tenants/demo/90-servico-bff.yaml @@ -38,7 +38,7 @@ spec: - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "demo" } diff --git a/tenants/demo/95-frontend-spa.yaml b/tenants/demo/95-frontend-spa.yaml index 098ea15..15861ac 100644 --- a/tenants/demo/95-frontend-spa.yaml +++ b/tenants/demo/95-frontend-spa.yaml @@ -24,7 +24,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-demo.athleticmap.com" } + - { name: ATM_KC_URL, value: "https://auth-demo.athleticmap.influxdigital.com.br" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "demo" } diff --git a/tenants/escolinha/20-keycloak.yaml b/tenants/escolinha/20-keycloak.yaml index 4699502..f202f89 100644 --- a/tenants/escolinha/20-keycloak.yaml +++ b/tenants/escolinha/20-keycloak.yaml @@ -45,7 +45,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-escolinha.athleticmap.com" + value: "auth-escolinha.athleticmap.influxdigital.com.br" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/escolinha/30-apps-stubs.yaml b/tenants/escolinha/30-apps-stubs.yaml index 4cf5a56..96e6bc6 100644 --- a/tenants/escolinha/30-apps-stubs.yaml +++ b/tenants/escolinha/30-apps-stubs.yaml @@ -18,7 +18,7 @@ spec: imagePullPolicy: Never env: - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/escolinha/65-runtime-core.yaml b/tenants/escolinha/65-runtime-core.yaml index b45f9dc..562a58a 100644 --- a/tenants/escolinha/65-runtime-core.yaml +++ b/tenants/escolinha/65-runtime-core.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-escolinha.athleticmap.com/realms/athleticmap + value: https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: escolinha - name: ATM_KC_ADMIN_ENABLED diff --git a/tenants/escolinha/66-runtime-operacao.yaml b/tenants/escolinha/66-runtime-operacao.yaml index 92f2059..77ef793 100644 --- a/tenants/escolinha/66-runtime-operacao.yaml +++ b/tenants/escolinha/66-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-escolinha.athleticmap.com/realms/athleticmap + value: https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: escolinha - name: ATM_PLANO diff --git a/tenants/escolinha/67-runtime-saude.yaml b/tenants/escolinha/67-runtime-saude.yaml index acfc348..1ddbdc4 100644 --- a/tenants/escolinha/67-runtime-saude.yaml +++ b/tenants/escolinha/67-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-escolinha.athleticmap.com/realms/athleticmap + value: https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: escolinha - name: GARMIN_REDIRECT_URI diff --git a/tenants/escolinha/70-servico-configuracao.yaml b/tenants/escolinha/70-servico-configuracao.yaml index 95dbb85..4280892 100644 --- a/tenants/escolinha/70-servico-configuracao.yaml +++ b/tenants/escolinha/70-servico-configuracao.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/escolinha/72-servico-organizacao.yaml b/tenants/escolinha/72-servico-organizacao.yaml index f014841..40723d0 100644 --- a/tenants/escolinha/72-servico-organizacao.yaml +++ b/tenants/escolinha/72-servico-organizacao.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/escolinha/74-servico-planejamento.yaml b/tenants/escolinha/74-servico-planejamento.yaml index 96c2297..6022e51 100644 --- a/tenants/escolinha/74-servico-planejamento.yaml +++ b/tenants/escolinha/74-servico-planejamento.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/escolinha/76-servico-campeonato.yaml b/tenants/escolinha/76-servico-campeonato.yaml index 56738e0..84a816d 100644 --- a/tenants/escolinha/76-servico-campeonato.yaml +++ b/tenants/escolinha/76-servico-campeonato.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/escolinha/78-servico-saude.yaml b/tenants/escolinha/78-servico-saude.yaml index c631219..fe97c96 100644 --- a/tenants/escolinha/78-servico-saude.yaml +++ b/tenants/escolinha/78-servico-saude.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/escolinha/79-servico-financeiro.yaml b/tenants/escolinha/79-servico-financeiro.yaml index f544b5d..b552cb7 100644 --- a/tenants/escolinha/79-servico-financeiro.yaml +++ b/tenants/escolinha/79-servico-financeiro.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/escolinha/80-servico-cadastro.yaml b/tenants/escolinha/80-servico-cadastro.yaml index f0b4adb..78cb14a 100644 --- a/tenants/escolinha/80-servico-cadastro.yaml +++ b/tenants/escolinha/80-servico-cadastro.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/escolinha/81-servico-documentos.yaml b/tenants/escolinha/81-servico-documentos.yaml index bd96967..83a1a18 100644 --- a/tenants/escolinha/81-servico-documentos.yaml +++ b/tenants/escolinha/81-servico-documentos.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/82-servico-administrativo.yaml b/tenants/escolinha/82-servico-administrativo.yaml index 178eb82..123f7cc 100644 --- a/tenants/escolinha/82-servico-administrativo.yaml +++ b/tenants/escolinha/82-servico-administrativo.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/83-servico-assistencia-social.yaml b/tenants/escolinha/83-servico-assistencia-social.yaml index cd7e0dc..9e5c277 100644 --- a/tenants/escolinha/83-servico-assistencia-social.yaml +++ b/tenants/escolinha/83-servico-assistencia-social.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/84-servico-pedagogico.yaml b/tenants/escolinha/84-servico-pedagogico.yaml index dfe68c3..b4d08e7 100644 --- a/tenants/escolinha/84-servico-pedagogico.yaml +++ b/tenants/escolinha/84-servico-pedagogico.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/85-servico-nutricao.yaml b/tenants/escolinha/85-servico-nutricao.yaml index 5e55967..958ce49 100644 --- a/tenants/escolinha/85-servico-nutricao.yaml +++ b/tenants/escolinha/85-servico-nutricao.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/86-servico-agenda.yaml b/tenants/escolinha/86-servico-agenda.yaml index 026b5b7..dab3b21 100644 --- a/tenants/escolinha/86-servico-agenda.yaml +++ b/tenants/escolinha/86-servico-agenda.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/90-servico-bff.yaml b/tenants/escolinha/90-servico-bff.yaml index a5a71e9..3bf23f6 100644 --- a/tenants/escolinha/90-servico-bff.yaml +++ b/tenants/escolinha/90-servico-bff.yaml @@ -38,7 +38,7 @@ spec: - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "escolinha" } diff --git a/tenants/escolinha/95-frontend-spa.yaml b/tenants/escolinha/95-frontend-spa.yaml index 5a92ab4..45f3e4a 100644 --- a/tenants/escolinha/95-frontend-spa.yaml +++ b/tenants/escolinha/95-frontend-spa.yaml @@ -24,7 +24,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-escolinha.athleticmap.com" } + - { name: ATM_KC_URL, value: "https://auth-escolinha.athleticmap.influxdigital.com.br" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "escolinha" } diff --git a/tenants/piloto/20-keycloak.yaml b/tenants/piloto/20-keycloak.yaml index 71cfd83..b79d341 100644 --- a/tenants/piloto/20-keycloak.yaml +++ b/tenants/piloto/20-keycloak.yaml @@ -44,7 +44,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-piloto.athleticmap.com" + value: "auth-piloto.athleticmap.influxdigital.com.br" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/piloto/30-apps-stubs.yaml b/tenants/piloto/30-apps-stubs.yaml index 83edaaf..2724996 100644 --- a/tenants/piloto/30-apps-stubs.yaml +++ b/tenants/piloto/30-apps-stubs.yaml @@ -18,7 +18,7 @@ spec: imagePullPolicy: Never env: - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/piloto/65-runtime-core.yaml b/tenants/piloto/65-runtime-core.yaml index bf43a4f..6f3c9b9 100644 --- a/tenants/piloto/65-runtime-core.yaml +++ b/tenants/piloto/65-runtime-core.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-piloto.athleticmap.com/realms/athleticmap + value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: piloto - name: ATM_PLANO diff --git a/tenants/piloto/66-runtime-operacao.yaml b/tenants/piloto/66-runtime-operacao.yaml index 159534e..e2e5048 100644 --- a/tenants/piloto/66-runtime-operacao.yaml +++ b/tenants/piloto/66-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-piloto.athleticmap.com/realms/athleticmap + value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: piloto - name: ATM_PLANO diff --git a/tenants/piloto/67-runtime-saude.yaml b/tenants/piloto/67-runtime-saude.yaml index 9f0b20e..2f04e73 100644 --- a/tenants/piloto/67-runtime-saude.yaml +++ b/tenants/piloto/67-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-piloto.athleticmap.com/realms/athleticmap + value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap - name: ATM_TENANT value: piloto - name: ATM_PLANO diff --git a/tenants/piloto/70-servico-configuracao.yaml b/tenants/piloto/70-servico-configuracao.yaml index 0ff1e95..37ce064 100644 --- a/tenants/piloto/70-servico-configuracao.yaml +++ b/tenants/piloto/70-servico-configuracao.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/72-servico-organizacao.yaml b/tenants/piloto/72-servico-organizacao.yaml index 894a233..856de8f 100644 --- a/tenants/piloto/72-servico-organizacao.yaml +++ b/tenants/piloto/72-servico-organizacao.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/74-servico-planejamento.yaml b/tenants/piloto/74-servico-planejamento.yaml index eb8b509..3ee1f21 100644 --- a/tenants/piloto/74-servico-planejamento.yaml +++ b/tenants/piloto/74-servico-planejamento.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/76-servico-campeonato.yaml b/tenants/piloto/76-servico-campeonato.yaml index b6879d0..5a522a5 100644 --- a/tenants/piloto/76-servico-campeonato.yaml +++ b/tenants/piloto/76-servico-campeonato.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/78-servico-saude.yaml b/tenants/piloto/78-servico-saude.yaml index c8c06cb..b21bf04 100644 --- a/tenants/piloto/78-servico-saude.yaml +++ b/tenants/piloto/78-servico-saude.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/piloto/79-servico-financeiro.yaml b/tenants/piloto/79-servico-financeiro.yaml index 09b251e..c198262 100644 --- a/tenants/piloto/79-servico-financeiro.yaml +++ b/tenants/piloto/79-servico-financeiro.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/piloto/80-servico-cadastro.yaml b/tenants/piloto/80-servico-cadastro.yaml index 6864021..49b25fc 100644 --- a/tenants/piloto/80-servico-cadastro.yaml +++ b/tenants/piloto/80-servico-cadastro.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/piloto/81-servico-documentos.yaml b/tenants/piloto/81-servico-documentos.yaml index 993d4f2..948e2c5 100644 --- a/tenants/piloto/81-servico-documentos.yaml +++ b/tenants/piloto/81-servico-documentos.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/82-servico-administrativo.yaml b/tenants/piloto/82-servico-administrativo.yaml index ecccdcb..4817ded 100644 --- a/tenants/piloto/82-servico-administrativo.yaml +++ b/tenants/piloto/82-servico-administrativo.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/83-servico-assistencia-social.yaml b/tenants/piloto/83-servico-assistencia-social.yaml index fee704a..b173793 100644 --- a/tenants/piloto/83-servico-assistencia-social.yaml +++ b/tenants/piloto/83-servico-assistencia-social.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/84-servico-pedagogico.yaml b/tenants/piloto/84-servico-pedagogico.yaml index 1c1976b..53fd012 100644 --- a/tenants/piloto/84-servico-pedagogico.yaml +++ b/tenants/piloto/84-servico-pedagogico.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/85-servico-nutricao.yaml b/tenants/piloto/85-servico-nutricao.yaml index 6073b3a..fc32fe0 100644 --- a/tenants/piloto/85-servico-nutricao.yaml +++ b/tenants/piloto/85-servico-nutricao.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/86-servico-agenda.yaml b/tenants/piloto/86-servico-agenda.yaml index e7239ee..cef7985 100644 --- a/tenants/piloto/86-servico-agenda.yaml +++ b/tenants/piloto/86-servico-agenda.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/90-servico-bff.yaml b/tenants/piloto/90-servico-bff.yaml index a07cca6..1fa1eb3 100644 --- a/tenants/piloto/90-servico-bff.yaml +++ b/tenants/piloto/90-servico-bff.yaml @@ -38,7 +38,7 @@ spec: - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "piloto" } diff --git a/tenants/piloto/95-frontend-spa.yaml b/tenants/piloto/95-frontend-spa.yaml index 238aca4..57213da 100644 --- a/tenants/piloto/95-frontend-spa.yaml +++ b/tenants/piloto/95-frontend-spa.yaml @@ -24,7 +24,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-piloto.athleticmap.com" } + - { name: ATM_KC_URL, value: "https://auth-piloto.athleticmap.influxdigital.com.br" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "piloto" } diff --git a/tenants/plataforma/20-keycloak.yaml b/tenants/plataforma/20-keycloak.yaml index da0944a..86bd603 100644 --- a/tenants/plataforma/20-keycloak.yaml +++ b/tenants/plataforma/20-keycloak.yaml @@ -44,7 +44,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-plataforma.athleticmap.com" + value: "auth-plataforma.athleticmap.influxdigital.com.br" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/plataforma/55-cronjobs-financeiro.yaml b/tenants/plataforma/55-cronjobs-financeiro.yaml index c0dca3d..b4b9bb0 100644 --- a/tenants/plataforma/55-cronjobs-financeiro.yaml +++ b/tenants/plataforma/55-cronjobs-financeiro.yaml @@ -166,7 +166,7 @@ spec: env: - { name: KEYCLOAK_URL, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token" } # O host publico do realm: vira `iss` do token (ver disparar.sh). - - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.com" } + - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.influxdigital.com.br" } - name: CLIENT_SECRET valueFrom: secretKeyRef: { name: operacao-credentials, key: client-secret } @@ -205,7 +205,7 @@ spec: env: - { name: KEYCLOAK_URL, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token" } # O host publico do realm: vira `iss` do token (ver disparar.sh). - - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.com" } + - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.influxdigital.com.br" } - { name: ALVO, value: "http://servico-financeiro/api/financeiro/notas/processar?limite=50" } - name: CLIENT_SECRET valueFrom: @@ -245,7 +245,7 @@ spec: env: - { name: KEYCLOAK_URL, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token" } # O host publico do realm: vira `iss` do token (ver disparar.sh). - - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.com" } + - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.influxdigital.com.br" } # limiteCobrancas=100: cada uma custa uma chamada ao provedor. - { name: ALVO, value: "http://servico-financeiro/api/financeiro/conciliacao?limiteEventos=100&limiteCobrancas=100" } - name: CLIENT_SECRET diff --git a/tenants/plataforma/70-servico-configuracao.yaml b/tenants/plataforma/70-servico-configuracao.yaml index 90f9862..7791910 100644 --- a/tenants/plataforma/70-servico-configuracao.yaml +++ b/tenants/plataforma/70-servico-configuracao.yaml @@ -1,68 +1,68 @@ -# Bounded context "configuracao" como app proprio (ADR-0002): Deployment/pod -# medivel = centro de custo. Schema proprio "configuracao" no Postgres do silo -# (criado pelo Flyway). Roteado em /api/configuracao no ingress do tenant. ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: servico-configuracao - namespace: plataforma-prod - labels: - app: servico-configuracao - athleticmap.io/contexto: configuracao -spec: - replicas: 1 - selector: { matchLabels: { app: servico-configuracao } } - template: - metadata: - labels: - app: servico-configuracao - athleticmap.io/contexto: configuracao - spec: - containers: - - name: servico-configuracao - # Tag alinhada com o tenant `escolinha`, que e o mais atual do - # cluster. A que estava aqui vinha do molde defasado deste - # repositorio, e nenhum tenant real a usava mais. - # - # O preco disso apareceu no primeiro deploy: com - # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e - # parou — a imagem foi construida antes de V002..V007 existirem, e a - # tabela `plano_financeiro` nem chegou a ser criada. "Imagem - # presente no no" nao e o mesmo que "imagem atual". - image: docker.io/library/servico-configuracao:1.10-categoria-modalidade - imagePullPolicy: Never - ports: [{ containerPort: 8083 }] - env: - - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } - - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } - - name: SPRING_DATASOURCE_PASSWORD - valueFrom: - secretKeyRef: { name: db-credentials, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" } - - { name: ATM_TENANT, value: "plataforma" } - resources: - requests: { cpu: 150m, memory: 320Mi } - limits: { cpu: "1", memory: 768Mi } - readinessProbe: - httpGet: { path: /api/configuracao/health, port: 8083 } - initialDelaySeconds: 25 - periodSeconds: 10 - failureThreshold: 30 - livenessProbe: - httpGet: { path: /actuator/health/liveness, port: 8083 } - initialDelaySeconds: 60 - periodSeconds: 20 - failureThreshold: 6 ---- -apiVersion: v1 -kind: Service -metadata: - name: servico-configuracao - namespace: plataforma-prod - labels: - app: servico-configuracao -spec: - selector: { app: servico-configuracao } - ports: [{ name: http, port: 80, targetPort: 8083 }] +# Bounded context "configuracao" como app proprio (ADR-0002): Deployment/pod +# medivel = centro de custo. Schema proprio "configuracao" no Postgres do silo +# (criado pelo Flyway). Roteado em /api/configuracao no ingress do tenant. +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: servico-configuracao + namespace: plataforma-prod + labels: + app: servico-configuracao + athleticmap.io/contexto: configuracao +spec: + replicas: 1 + selector: { matchLabels: { app: servico-configuracao } } + template: + metadata: + labels: + app: servico-configuracao + athleticmap.io/contexto: configuracao + spec: + containers: + - name: servico-configuracao + # Tag alinhada com o tenant `escolinha`, que e o mais atual do + # cluster. A que estava aqui vinha do molde defasado deste + # repositorio, e nenhum tenant real a usava mais. + # + # O preco disso apareceu no primeiro deploy: com + # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e + # parou — a imagem foi construida antes de V002..V007 existirem, e a + # tabela `plano_financeiro` nem chegou a ser criada. "Imagem + # presente no no" nao e o mesmo que "imagem atual". + image: docker.io/library/servico-configuracao:1.10-categoria-modalidade + imagePullPolicy: Never + ports: [{ containerPort: 8083 }] + env: + - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } + - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } + - name: SPRING_DATASOURCE_PASSWORD + valueFrom: + secretKeyRef: { name: db-credentials, key: password } + - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_TENANT, value: "plataforma" } + resources: + requests: { cpu: 150m, memory: 320Mi } + limits: { cpu: "1", memory: 768Mi } + readinessProbe: + httpGet: { path: /api/configuracao/health, port: 8083 } + initialDelaySeconds: 25 + periodSeconds: 10 + failureThreshold: 30 + livenessProbe: + httpGet: { path: /actuator/health/liveness, port: 8083 } + initialDelaySeconds: 60 + periodSeconds: 20 + failureThreshold: 6 +--- +apiVersion: v1 +kind: Service +metadata: + name: servico-configuracao + namespace: plataforma-prod + labels: + app: servico-configuracao +spec: + selector: { app: servico-configuracao } + ports: [{ name: http, port: 80, targetPort: 8083 }] diff --git a/tenants/plataforma/79-servico-financeiro.yaml b/tenants/plataforma/79-servico-financeiro.yaml index d75040f..38d6e69 100644 --- a/tenants/plataforma/79-servico-financeiro.yaml +++ b/tenants/plataforma/79-servico-financeiro.yaml @@ -1,93 +1,93 @@ -# Bounded context "financeiro" (2a onda): Cobranca + ApuracaoRateio (centros de custo). -# Schema proprio "financeiro" (Flyway). Roteado em /api/financeiro no ingress. ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: servico-financeiro - namespace: plataforma-prod - labels: - app: servico-financeiro - athleticmap.io/contexto: financeiro -spec: - replicas: 1 - selector: { matchLabels: { app: servico-financeiro } } - template: - metadata: - labels: - app: servico-financeiro - athleticmap.io/contexto: financeiro - spec: - containers: - - name: servico-financeiro - # Tag alinhada com o tenant `escolinha`, que e o mais atual do - # cluster. A que estava aqui vinha do molde defasado deste - # repositorio, e nenhum tenant real a usava mais. - # - # O preco disso apareceu no primeiro deploy: com - # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e - # parou — a imagem foi construida antes de V002..V007 existirem, e a - # tabela `plano_financeiro` nem chegou a ser criada. "Imagem - # presente no no" nao e o mesmo que "imagem atual". - image: docker.io/library/servico-financeiro:1.6-assinatura - imagePullPolicy: Never - ports: [{ containerPort: 8083 }] - env: - - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } - - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } - - name: SPRING_DATASOURCE_PASSWORD - valueFrom: - secretKeyRef: { name: db-credentials, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" } - - { name: ATM_TENANT, value: "plataforma" } - # Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta - # variavel o servico nasce Bronze e responde 403 no que e pago. - - { name: ATM_PLANO, value: "institucional" } - - # ── Asaas de PRODUCAO (P3.3) ────────────────────────────────── - # Aqui e o tenant da plataforma: a conta Asaas e a da propria - # Athletic Map, e nao a de um cliente. - # - # O rotulo `ASAAS_AMBIENTE` e a URL tem de concordar. Se nao - # concordarem, `AsaasClient` RECUSA a emissao — de proposito: - # producao apontando para sandbox faria a cobranca "funcionar" sem - # ninguem pagar de verdade, que e o erro caro e silencioso. - - { name: ASAAS_BASE_URL, value: "https://api.asaas.com/v3" } - - { name: ASAAS_AMBIENTE, value: "producao" } - - { name: ASAAS_USER_AGENT, value: "AthleticMap/plataforma" } - - # Os DOIS segredos sao separados, e nao por preciosismo: a API Key - # autoriza movimentar dinheiro; o token do webhook so autoriza - # alguem a nos avisar que algo aconteceu. Se forem iguais, - # `AsaasConfig` RECUSA subir o pod. - - name: ASAAS_API_KEY - valueFrom: - secretKeyRef: { name: asaas-credentials, key: api-key } - - name: ASAAS_WEBHOOK_TOKEN - valueFrom: - secretKeyRef: { name: asaas-credentials, key: webhook-token } - resources: - requests: { cpu: 150m, memory: 320Mi } - limits: { cpu: "1", memory: 768Mi } - readinessProbe: - httpGet: { path: /api/financeiro/health, port: 8083 } - initialDelaySeconds: 25 - periodSeconds: 10 - failureThreshold: 30 - livenessProbe: - httpGet: { path: /actuator/health/liveness, port: 8083 } - initialDelaySeconds: 60 - periodSeconds: 20 - failureThreshold: 6 ---- -apiVersion: v1 -kind: Service -metadata: - name: servico-financeiro - namespace: plataforma-prod - labels: - app: servico-financeiro -spec: - selector: { app: servico-financeiro } - ports: [{ name: http, port: 80, targetPort: 8083 }] +# Bounded context "financeiro" (2a onda): Cobranca + ApuracaoRateio (centros de custo). +# Schema proprio "financeiro" (Flyway). Roteado em /api/financeiro no ingress. +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: servico-financeiro + namespace: plataforma-prod + labels: + app: servico-financeiro + athleticmap.io/contexto: financeiro +spec: + replicas: 1 + selector: { matchLabels: { app: servico-financeiro } } + template: + metadata: + labels: + app: servico-financeiro + athleticmap.io/contexto: financeiro + spec: + containers: + - name: servico-financeiro + # Tag alinhada com o tenant `escolinha`, que e o mais atual do + # cluster. A que estava aqui vinha do molde defasado deste + # repositorio, e nenhum tenant real a usava mais. + # + # O preco disso apareceu no primeiro deploy: com + # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e + # parou — a imagem foi construida antes de V002..V007 existirem, e a + # tabela `plano_financeiro` nem chegou a ser criada. "Imagem + # presente no no" nao e o mesmo que "imagem atual". + image: docker.io/library/servico-financeiro:1.6-assinatura + imagePullPolicy: Never + ports: [{ containerPort: 8083 }] + env: + - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } + - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } + - name: SPRING_DATASOURCE_PASSWORD + valueFrom: + secretKeyRef: { name: db-credentials, key: password } + - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_TENANT, value: "plataforma" } + # Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta + # variavel o servico nasce Bronze e responde 403 no que e pago. + - { name: ATM_PLANO, value: "institucional" } + + # ── Asaas de PRODUCAO (P3.3) ────────────────────────────────── + # Aqui e o tenant da plataforma: a conta Asaas e a da propria + # Athletic Map, e nao a de um cliente. + # + # O rotulo `ASAAS_AMBIENTE` e a URL tem de concordar. Se nao + # concordarem, `AsaasClient` RECUSA a emissao — de proposito: + # producao apontando para sandbox faria a cobranca "funcionar" sem + # ninguem pagar de verdade, que e o erro caro e silencioso. + - { name: ASAAS_BASE_URL, value: "https://api.asaas.com/v3" } + - { name: ASAAS_AMBIENTE, value: "producao" } + - { name: ASAAS_USER_AGENT, value: "AthleticMap/plataforma" } + + # Os DOIS segredos sao separados, e nao por preciosismo: a API Key + # autoriza movimentar dinheiro; o token do webhook so autoriza + # alguem a nos avisar que algo aconteceu. Se forem iguais, + # `AsaasConfig` RECUSA subir o pod. + - name: ASAAS_API_KEY + valueFrom: + secretKeyRef: { name: asaas-credentials, key: api-key } + - name: ASAAS_WEBHOOK_TOKEN + valueFrom: + secretKeyRef: { name: asaas-credentials, key: webhook-token } + resources: + requests: { cpu: 150m, memory: 320Mi } + limits: { cpu: "1", memory: 768Mi } + readinessProbe: + httpGet: { path: /api/financeiro/health, port: 8083 } + initialDelaySeconds: 25 + periodSeconds: 10 + failureThreshold: 30 + livenessProbe: + httpGet: { path: /actuator/health/liveness, port: 8083 } + initialDelaySeconds: 60 + periodSeconds: 20 + failureThreshold: 6 +--- +apiVersion: v1 +kind: Service +metadata: + name: servico-financeiro + namespace: plataforma-prod + labels: + app: servico-financeiro +spec: + selector: { app: servico-financeiro } + ports: [{ name: http, port: 80, targetPort: 8083 }] diff --git a/tenants/plataforma/80-servico-cadastro.yaml b/tenants/plataforma/80-servico-cadastro.yaml index be84a32..e520e03 100644 --- a/tenants/plataforma/80-servico-cadastro.yaml +++ b/tenants/plataforma/80-servico-cadastro.yaml @@ -1,68 +1,68 @@ -# Bounded context "cadastro" como app proprio (ADR-0002/0003): Deployment/pod -# medivel = centro de custo. Schema proprio "cadastro" no Postgres do silo -# (criado pelo Flyway). Roteado em /api/cadastro no ingress do tenant. ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: servico-cadastro - namespace: plataforma-prod - labels: - app: servico-cadastro - athleticmap.io/contexto: cadastro -spec: - replicas: 1 - selector: { matchLabels: { app: servico-cadastro } } - template: - metadata: - labels: - app: servico-cadastro - athleticmap.io/contexto: cadastro - spec: - containers: - - name: servico-cadastro - # Tag alinhada com o tenant `escolinha`, que e o mais atual do - # cluster. A que estava aqui vinha do molde defasado deste - # repositorio, e nenhum tenant real a usava mais. - # - # O preco disso apareceu no primeiro deploy: com - # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e - # parou — a imagem foi construida antes de V002..V007 existirem, e a - # tabela `plano_financeiro` nem chegou a ser criada. "Imagem - # presente no no" nao e o mesmo que "imagem atual". - image: docker.io/library/servico-cadastro:1.20-posicao-e-listas - imagePullPolicy: Never - ports: [{ containerPort: 8083 }] - env: - - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } - - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } - - name: SPRING_DATASOURCE_PASSWORD - valueFrom: - secretKeyRef: { name: db-credentials, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" } - - { name: ATM_TENANT, value: "plataforma" } - resources: - requests: { cpu: 150m, memory: 320Mi } - limits: { cpu: "1", memory: 768Mi } - readinessProbe: - httpGet: { path: /api/cadastro/health, port: 8083 } - initialDelaySeconds: 25 - periodSeconds: 10 - failureThreshold: 30 - livenessProbe: - httpGet: { path: /actuator/health/liveness, port: 8083 } - initialDelaySeconds: 60 - periodSeconds: 20 - failureThreshold: 6 ---- -apiVersion: v1 -kind: Service -metadata: - name: servico-cadastro - namespace: plataforma-prod - labels: - app: servico-cadastro -spec: - selector: { app: servico-cadastro } - ports: [{ name: http, port: 80, targetPort: 8083 }] +# Bounded context "cadastro" como app proprio (ADR-0002/0003): Deployment/pod +# medivel = centro de custo. Schema proprio "cadastro" no Postgres do silo +# (criado pelo Flyway). Roteado em /api/cadastro no ingress do tenant. +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: servico-cadastro + namespace: plataforma-prod + labels: + app: servico-cadastro + athleticmap.io/contexto: cadastro +spec: + replicas: 1 + selector: { matchLabels: { app: servico-cadastro } } + template: + metadata: + labels: + app: servico-cadastro + athleticmap.io/contexto: cadastro + spec: + containers: + - name: servico-cadastro + # Tag alinhada com o tenant `escolinha`, que e o mais atual do + # cluster. A que estava aqui vinha do molde defasado deste + # repositorio, e nenhum tenant real a usava mais. + # + # O preco disso apareceu no primeiro deploy: com + # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e + # parou — a imagem foi construida antes de V002..V007 existirem, e a + # tabela `plano_financeiro` nem chegou a ser criada. "Imagem + # presente no no" nao e o mesmo que "imagem atual". + image: docker.io/library/servico-cadastro:1.20-posicao-e-listas + imagePullPolicy: Never + ports: [{ containerPort: 8083 }] + env: + - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } + - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } + - name: SPRING_DATASOURCE_PASSWORD + valueFrom: + secretKeyRef: { name: db-credentials, key: password } + - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_TENANT, value: "plataforma" } + resources: + requests: { cpu: 150m, memory: 320Mi } + limits: { cpu: "1", memory: 768Mi } + readinessProbe: + httpGet: { path: /api/cadastro/health, port: 8083 } + initialDelaySeconds: 25 + periodSeconds: 10 + failureThreshold: 30 + livenessProbe: + httpGet: { path: /actuator/health/liveness, port: 8083 } + initialDelaySeconds: 60 + periodSeconds: 20 + failureThreshold: 6 +--- +apiVersion: v1 +kind: Service +metadata: + name: servico-cadastro + namespace: plataforma-prod + labels: + app: servico-cadastro +spec: + selector: { app: servico-cadastro } + ports: [{ name: http, port: 80, targetPort: 8083 }] diff --git a/tenants/plataforma/82-servico-captacao.yaml b/tenants/plataforma/82-servico-captacao.yaml index 15be5c5..44dfae4 100644 --- a/tenants/plataforma/82-servico-captacao.yaml +++ b/tenants/plataforma/82-servico-captacao.yaml @@ -100,7 +100,7 @@ spec: # `@CrossOrigin` aqui aceita UMA origem: o placeholder vira string # literal, entao virgula nao separa em duas. Se a LP for publicada # noutro host, este valor muda junto ou o formulario toma CORS. - - { name: CAPTACAO_ORIGEM, value: "https://plataforma.athleticmap.com" } + - { name: CAPTACAO_ORIGEM, value: "https://plataforma.athleticmap.influxdigital.com.br" } - { name: CAPTACAO_RETENCAO_MESES, value: "24" } # P5.1 — o token do webhook de ASSINATURA. Sem ele o endpoint # RECUSA TUDO, de proposito, e o log diz exatamente isso. O mesmo diff --git a/tenants/plataforma/90-servico-bff.yaml b/tenants/plataforma/90-servico-bff.yaml index f037c93..a7b098b 100644 --- a/tenants/plataforma/90-servico-bff.yaml +++ b/tenants/plataforma/90-servico-bff.yaml @@ -1,72 +1,72 @@ -# BFF (Backend-for-Frontend) — ponto unico da SPA; agrega configuracao + cadastro -# com token relay. Stateless (sem banco). Roteado em /bff no ingress do tenant. ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: servico-bff - namespace: plataforma-prod - labels: - app: servico-bff - athleticmap.io/contexto: bff -spec: - replicas: 1 - selector: { matchLabels: { app: servico-bff } } - template: - metadata: - labels: - app: servico-bff - athleticmap.io/contexto: bff - spec: - containers: - - name: servico-bff - # Tag alinhada com o tenant `escolinha`, que e o mais atual do - # cluster. A que estava aqui vinha do molde defasado deste - # repositorio, e nenhum tenant real a usava mais. - # - # O preco disso apareceu no primeiro deploy: com - # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e - # parou — a imagem foi construida antes de V002..V007 existirem, e a - # tabela `plano_financeiro` nem chegou a ser criada. "Imagem - # presente no no" nao e o mesmo que "imagem atual". - image: docker.io/library/servico-bff:1.98-barreira-de-plano - imagePullPolicy: Never - ports: [{ containerPort: 8083 }] - env: - - { name: ATM_CONFIG_URL, value: "http://servico-configuracao" } - - { name: ATM_CADASTRO_URL, value: "http://servico-cadastro" } - - { name: ATM_ORGANIZACAO_URL, value: "http://servico-organizacao" } - - { name: ATM_PLANEJAMENTO_URL, value: "http://servico-planejamento" } - - { name: ATM_CAMPEONATO_URL, value: "http://servico-campeonato" } - - { name: ATM_SAUDE_URL, value: "http://servico-saude" } - - { name: ATM_FINANCEIRO_URL, value: "http://servico-financeiro" } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" } - - { name: ATM_TENANT, value: "plataforma" } - # Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta - # variavel o servico nasce Bronze e responde 403 no que e pago. - - { name: ATM_PLANO, value: "institucional" } - resources: - requests: { cpu: 100m, memory: 256Mi } - limits: { cpu: 500m, memory: 512Mi } - readinessProbe: - httpGet: { path: /bff/health, port: 8083 } - initialDelaySeconds: 20 - periodSeconds: 10 - failureThreshold: 30 - livenessProbe: - httpGet: { path: /actuator/health/liveness, port: 8083 } - initialDelaySeconds: 50 - periodSeconds: 20 - failureThreshold: 6 ---- -apiVersion: v1 -kind: Service -metadata: - name: servico-bff - namespace: plataforma-prod - labels: - app: servico-bff -spec: - selector: { app: servico-bff } - ports: [{ name: http, port: 80, targetPort: 8083 }] +# BFF (Backend-for-Frontend) — ponto unico da SPA; agrega configuracao + cadastro +# com token relay. Stateless (sem banco). Roteado em /bff no ingress do tenant. +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: servico-bff + namespace: plataforma-prod + labels: + app: servico-bff + athleticmap.io/contexto: bff +spec: + replicas: 1 + selector: { matchLabels: { app: servico-bff } } + template: + metadata: + labels: + app: servico-bff + athleticmap.io/contexto: bff + spec: + containers: + - name: servico-bff + # Tag alinhada com o tenant `escolinha`, que e o mais atual do + # cluster. A que estava aqui vinha do molde defasado deste + # repositorio, e nenhum tenant real a usava mais. + # + # O preco disso apareceu no primeiro deploy: com + # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e + # parou — a imagem foi construida antes de V002..V007 existirem, e a + # tabela `plano_financeiro` nem chegou a ser criada. "Imagem + # presente no no" nao e o mesmo que "imagem atual". + image: docker.io/library/servico-bff:1.98-barreira-de-plano + imagePullPolicy: Never + ports: [{ containerPort: 8083 }] + env: + - { name: ATM_CONFIG_URL, value: "http://servico-configuracao" } + - { name: ATM_CADASTRO_URL, value: "http://servico-cadastro" } + - { name: ATM_ORGANIZACAO_URL, value: "http://servico-organizacao" } + - { name: ATM_PLANEJAMENTO_URL, value: "http://servico-planejamento" } + - { name: ATM_CAMPEONATO_URL, value: "http://servico-campeonato" } + - { name: ATM_SAUDE_URL, value: "http://servico-saude" } + - { name: ATM_FINANCEIRO_URL, value: "http://servico-financeiro" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_TENANT, value: "plataforma" } + # Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta + # variavel o servico nasce Bronze e responde 403 no que e pago. + - { name: ATM_PLANO, value: "institucional" } + resources: + requests: { cpu: 100m, memory: 256Mi } + limits: { cpu: 500m, memory: 512Mi } + readinessProbe: + httpGet: { path: /bff/health, port: 8083 } + initialDelaySeconds: 20 + periodSeconds: 10 + failureThreshold: 30 + livenessProbe: + httpGet: { path: /actuator/health/liveness, port: 8083 } + initialDelaySeconds: 50 + periodSeconds: 20 + failureThreshold: 6 +--- +apiVersion: v1 +kind: Service +metadata: + name: servico-bff + namespace: plataforma-prod + labels: + app: servico-bff +spec: + selector: { app: servico-bff } + ports: [{ name: http, port: 80, targetPort: 8083 }] diff --git a/tenants/plataforma/95-frontend-spa.yaml b/tenants/plataforma/95-frontend-spa.yaml index ec19857..c290faf 100644 --- a/tenants/plataforma/95-frontend-spa.yaml +++ b/tenants/plataforma/95-frontend-spa.yaml @@ -33,7 +33,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-plataforma.athleticmap.com" } + - { name: ATM_KC_URL, value: "https://auth-plataforma.athleticmap.influxdigital.com.br" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "plataforma" }