atmadmin/athletic-map-deploy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(P0.9): fase issuer - o issuer passa para athleticmap.com

Browse Source
This commit is contained in:
ATM Platform
2026-09-23 12:21:47 +00:00
parent 5e1bf3a00b
commit f4747712ad
92 changed files with 391 additions and 391 deletions
Download Patch File Download Diff File Expand all files Collapse all files
moldes/consolidado/70-runtime-core.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
# nome do tenant: uma instancia so nao comporta quatro realms
# chamados `athleticmap`.
- { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/{{REALM}}/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth.athleticmap.influxdigital.com.br/realms/{{REALM}}" }
- { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/{{REALM}}" }
- { name: ATM_TENANT, value: "{{TENANT}}" }
- { name: ATM_PLANO, value: "{{PLANO}}" }
resources:
moldes/consolidado/71-runtime-operacao.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
# nome do tenant: uma instancia so nao comporta quatro realms
# chamados `athleticmap`.
- { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/{{REALM}}/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth.athleticmap.influxdigital.com.br/realms/{{REALM}}" }
- { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/{{REALM}}" }
- { name: ATM_TENANT, value: "{{TENANT}}" }
- { name: ATM_PLANO, value: "{{PLANO}}" }
# O provedor de pagamento vive neste runtime.
moldes/consolidado/72-runtime-saude.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
# nome do tenant: uma instancia so nao comporta quatro realms
# chamados `athleticmap`.
- { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/{{REALM}}/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth.athleticmap.influxdigital.com.br/realms/{{REALM}}" }
- { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/{{REALM}}" }
- { name: ATM_TENANT, value: "{{TENANT}}" }
- { name: ATM_PLANO, value: "{{PLANO}}" }
# Retencao da trilha de auditoria. O expurgo roda agendado DENTRO
moldes/consolidado/95-frontend-spa.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
imagePullPolicy: Never
ports: [{ containerPort: 80 }]
env:
- { name: ATM_KC_URL, value: "https://auth.athleticmap.influxdigital.com.br" }
- { name: ATM_KC_URL, value: "https://auth.athleticmap.com" }
- { name: ATM_REALM, value: "{{REALM}}" }
- { name: ATM_CLIENT, value: "spa" }
- { name: ATM_TENANT, value: "{{TENANT}}" }
tenants/acme/20-keycloak.yaml
+1 -1
View File
@@ -44,7 +44,7 @@ spec:
- name: KC_PROXY_HEADERS
value: xforwarded
- name: KC_HOSTNAME
value: "auth-acme.athleticmap.influxdigital.com.br"
value: "auth-acme.athleticmap.com"
- name: KC_HOSTNAME_STRICT
value: "true"
ports:
tenants/acme/30-apps-stubs.yaml
+1 -1
View File
@@ -18,7 +18,7 @@ spec:
imagePullPolicy: Never
env:
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
ports: [{ containerPort: 8083 }]
readinessProbe:
tenants/acme/65-runtime-core.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-acme.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: acme
- name: ATM_PLANO
tenants/acme/66-runtime-operacao.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-acme.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: acme
- name: ATM_PLANO
tenants/acme/67-runtime-saude.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-acme.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: acme
- name: ATM_PLANO
tenants/acme/70-servico-configuracao.yaml
+1 -1
View File
@@ -32,7 +32,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/acme/72-servico-organizacao.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/acme/74-servico-planejamento.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/acme/76-servico-campeonato.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/acme/78-servico-saude.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
# Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4.
- { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" }
tenants/acme/79-servico-financeiro.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
- { name: ATM_PLANO, value: "institucional" }
resources:
tenants/acme/80-servico-cadastro.yaml
+1 -1
View File
@@ -32,7 +32,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
- { name: ATM_KC_ADMIN_ENABLED, value: "true" }
- name: ATM_KC_CLIENT_SECRET
tenants/acme/81-servico-documentos.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/acme/82-servico-administrativo.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/acme/83-servico-assistencia-social.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/acme/84-servico-pedagogico.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/acme/85-servico-nutricao.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/acme/86-servico-agenda.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "acme" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/acme/90-servico-bff.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" }
- { name: ATM_AGENDA_URL, value: "http://servico-agenda" }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" }
- name: ATM_CONSENTIMENTO_SEGREDO
valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } }
- { name: ATM_TENANT, value: "acme" }
tenants/acme/95-frontend-spa.yaml
+1 -1
View File
@@ -24,7 +24,7 @@ spec:
imagePullPolicy: Never
ports: [{ containerPort: 80 }]
env:
- { name: ATM_KC_URL, value: "https://auth-acme.athleticmap.influxdigital.com.br" }
- { name: ATM_KC_URL, value: "https://auth-acme.athleticmap.com" }
- { name: ATM_REALM, value: "athleticmap" }
- { name: ATM_CLIENT, value: "spa" }
- { name: ATM_TENANT, value: "acme" }
tenants/demo/20-keycloak.yaml
+1 -1
View File
@@ -45,7 +45,7 @@ spec:
- name: KC_PROXY_HEADERS
value: xforwarded
- name: KC_HOSTNAME
value: "auth-demo.athleticmap.influxdigital.com.br"
value: "auth-demo.athleticmap.com"
- name: KC_HOSTNAME_STRICT
value: "true"
ports:
tenants/demo/30-apps-stubs.yaml
+1 -1
View File
@@ -18,7 +18,7 @@ spec:
imagePullPolicy: Never
env:
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
ports: [{ containerPort: 8083 }]
readinessProbe:
tenants/demo/65-runtime-core.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-demo.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: demo
- name: ATM_PLANO
tenants/demo/66-runtime-operacao.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-demo.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: demo
- name: ATM_PLANO
tenants/demo/67-runtime-saude.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-demo.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: demo
- name: ATM_PLANO
tenants/demo/70-servico-configuracao.yaml
+1 -1
View File
@@ -32,7 +32,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/demo/72-servico-organizacao.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/demo/74-servico-planejamento.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/demo/76-servico-campeonato.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/demo/78-servico-saude.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
# Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4.
- { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" }
tenants/demo/79-servico-financeiro.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
- { name: ATM_PLANO, value: "institucional" }
resources:
tenants/demo/80-servico-cadastro.yaml
+1 -1
View File
@@ -32,7 +32,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
- { name: ATM_KC_ADMIN_ENABLED, value: "true" }
- name: ATM_KC_CLIENT_SECRET
tenants/demo/81-servico-documentos.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/demo/82-servico-administrativo.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/demo/83-servico-assistencia-social.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/demo/84-servico-pedagogico.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/demo/85-servico-nutricao.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/demo/86-servico-agenda.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "demo" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/demo/90-servico-bff.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" }
- { name: ATM_AGENDA_URL, value: "http://servico-agenda" }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" }
- name: ATM_CONSENTIMENTO_SEGREDO
valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } }
- { name: ATM_TENANT, value: "demo" }
tenants/demo/95-frontend-spa.yaml
+1 -1
View File
@@ -24,7 +24,7 @@ spec:
imagePullPolicy: Never
ports: [{ containerPort: 80 }]
env:
- { name: ATM_KC_URL, value: "https://auth-demo.athleticmap.influxdigital.com.br" }
- { name: ATM_KC_URL, value: "https://auth-demo.athleticmap.com" }
- { name: ATM_REALM, value: "athleticmap" }
- { name: ATM_CLIENT, value: "spa" }
- { name: ATM_TENANT, value: "demo" }
tenants/escolinha/20-keycloak.yaml
+1 -1
View File
@@ -45,7 +45,7 @@ spec:
- name: KC_PROXY_HEADERS
value: xforwarded
- name: KC_HOSTNAME
value: "auth-escolinha.athleticmap.influxdigital.com.br"
value: "auth-escolinha.athleticmap.com"
- name: KC_HOSTNAME_STRICT
value: "true"
ports:
tenants/escolinha/30-apps-stubs.yaml
+1 -1
View File
@@ -18,7 +18,7 @@ spec:
imagePullPolicy: Never
env:
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
ports: [{ containerPort: 8083 }]
readinessProbe:
tenants/escolinha/65-runtime-core.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-escolinha.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: escolinha
- name: ATM_KC_ADMIN_ENABLED
tenants/escolinha/66-runtime-operacao.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-escolinha.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: escolinha
- name: ATM_PLANO
tenants/escolinha/67-runtime-saude.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-escolinha.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: escolinha
- name: GARMIN_REDIRECT_URI
tenants/escolinha/70-servico-configuracao.yaml
+1 -1
View File
@@ -32,7 +32,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/escolinha/72-servico-organizacao.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/escolinha/74-servico-planejamento.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/escolinha/76-servico-campeonato.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/escolinha/78-servico-saude.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
# Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4.
- { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" }
tenants/escolinha/79-servico-financeiro.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
- { name: ATM_PLANO, value: "institucional" }
resources:
tenants/escolinha/80-servico-cadastro.yaml
+1 -1
View File
@@ -32,7 +32,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
- { name: ATM_KC_ADMIN_ENABLED, value: "true" }
- name: ATM_KC_CLIENT_SECRET
tenants/escolinha/81-servico-documentos.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/escolinha/82-servico-administrativo.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/escolinha/83-servico-assistencia-social.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/escolinha/84-servico-pedagogico.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/escolinha/85-servico-nutricao.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/escolinha/86-servico-agenda.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "escolinha" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/escolinha/90-servico-bff.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" }
- { name: ATM_AGENDA_URL, value: "http://servico-agenda" }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" }
- name: ATM_CONSENTIMENTO_SEGREDO
valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } }
- { name: ATM_TENANT, value: "escolinha" }
tenants/escolinha/95-frontend-spa.yaml
+1 -1
View File
@@ -24,7 +24,7 @@ spec:
imagePullPolicy: Never
ports: [{ containerPort: 80 }]
env:
- { name: ATM_KC_URL, value: "https://auth-escolinha.athleticmap.influxdigital.com.br" }
- { name: ATM_KC_URL, value: "https://auth-escolinha.athleticmap.com" }
- { name: ATM_REALM, value: "athleticmap" }
- { name: ATM_CLIENT, value: "spa" }
- { name: ATM_TENANT, value: "escolinha" }
tenants/piloto/20-keycloak.yaml
+1 -1
View File
@@ -44,7 +44,7 @@ spec:
- name: KC_PROXY_HEADERS
value: xforwarded
- name: KC_HOSTNAME
value: "auth-piloto.athleticmap.influxdigital.com.br"
value: "auth-piloto.athleticmap.com"
- name: KC_HOSTNAME_STRICT
value: "true"
ports:
tenants/piloto/30-apps-stubs.yaml
+1 -1
View File
@@ -18,7 +18,7 @@ spec:
imagePullPolicy: Never
env:
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
ports: [{ containerPort: 8083 }]
readinessProbe:
tenants/piloto/65-runtime-core.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-piloto.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: piloto
- name: ATM_PLANO
tenants/piloto/66-runtime-operacao.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-piloto.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: piloto
- name: ATM_PLANO
tenants/piloto/67-runtime-saude.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- name: ATM_JWK_SET_URI
value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs
- name: ATM_ISSUER
value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap
value: https://auth-piloto.athleticmap.com/realms/athleticmap
- name: ATM_TENANT
value: piloto
- name: ATM_PLANO
tenants/piloto/70-servico-configuracao.yaml
+1 -1
View File
@@ -32,7 +32,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/piloto/72-servico-organizacao.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/piloto/74-servico-planejamento.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/piloto/76-servico-campeonato.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 320Mi }
tenants/piloto/78-servico-saude.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
# Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4.
- { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" }
tenants/piloto/79-servico-financeiro.yaml
+1 -1
View File
@@ -31,7 +31,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
- { name: ATM_PLANO, value: "institucional" }
resources:
tenants/piloto/80-servico-cadastro.yaml
+1 -1
View File
@@ -32,7 +32,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
- { name: ATM_KC_ADMIN_ENABLED, value: "true" }
- name: ATM_KC_CLIENT_SECRET
tenants/piloto/81-servico-documentos.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/piloto/82-servico-administrativo.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/piloto/83-servico-assistencia-social.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/piloto/84-servico-pedagogico.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/piloto/85-servico-nutricao.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/piloto/86-servico-agenda.yaml
+1 -1
View File
@@ -27,7 +27,7 @@ spec:
valueFrom:
secretKeyRef: { name: db-compartilhado, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "piloto" }
resources:
requests: { cpu: 50m, memory: 300Mi }
tenants/piloto/90-servico-bff.yaml
+1 -1
View File
@@ -38,7 +38,7 @@ spec:
- { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" }
- { name: ATM_AGENDA_URL, value: "http://servico-agenda" }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" }
- name: ATM_CONSENTIMENTO_SEGREDO
valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } }
- { name: ATM_TENANT, value: "piloto" }
tenants/piloto/95-frontend-spa.yaml
+1 -1
View File
@@ -24,7 +24,7 @@ spec:
imagePullPolicy: Never
ports: [{ containerPort: 80 }]
env:
- { name: ATM_KC_URL, value: "https://auth-piloto.athleticmap.influxdigital.com.br" }
- { name: ATM_KC_URL, value: "https://auth-piloto.athleticmap.com" }
- { name: ATM_REALM, value: "athleticmap" }
- { name: ATM_CLIENT, value: "spa" }
- { name: ATM_TENANT, value: "piloto" }
tenants/plataforma/20-keycloak.yaml
+1 -1
View File
@@ -44,7 +44,7 @@ spec:
- name: KC_PROXY_HEADERS
value: xforwarded
- name: KC_HOSTNAME
value: "auth-plataforma.athleticmap.influxdigital.com.br"
value: "auth-plataforma.athleticmap.com"
- name: KC_HOSTNAME_STRICT
value: "true"
ports:
tenants/plataforma/55-cronjobs-financeiro.yaml
+3 -3
View File
@@ -166,7 +166,7 @@ spec:
env:
- { name: KEYCLOAK_URL, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token" }
# O host publico do realm: vira `iss` do token (ver disparar.sh).
- { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.influxdigital.com.br" }
- { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.com" }
- name: CLIENT_SECRET
valueFrom:
secretKeyRef: { name: operacao-credentials, key: client-secret }
@@ -205,7 +205,7 @@ spec:
env:
- { name: KEYCLOAK_URL, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token" }
# O host publico do realm: vira `iss` do token (ver disparar.sh).
- { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.influxdigital.com.br" }
- { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.com" }
- { name: ALVO, value: "http://servico-financeiro/api/financeiro/notas/processar?limite=50" }
- name: CLIENT_SECRET
valueFrom:
@@ -245,7 +245,7 @@ spec:
env:
- { name: KEYCLOAK_URL, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token" }
# O host publico do realm: vira `iss` do token (ver disparar.sh).
- { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.influxdigital.com.br" }
- { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.com" }
# limiteCobrancas=100: cada uma custa uma chamada ao provedor.
- { name: ALVO, value: "http://servico-financeiro/api/financeiro/conciliacao?limiteEventos=100&limiteCobrancas=100" }
- name: CLIENT_SECRET
tenants/plataforma/70-servico-configuracao.yaml
+68 -68
View File
@@ -1,68 +1,68 @@
# Bounded context "configuracao" como app proprio (ADR-0002): Deployment/pod
# medivel = centro de custo. Schema proprio "configuracao" no Postgres do silo
# (criado pelo Flyway). Roteado em /api/configuracao no ingress do tenant.
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: servico-configuracao
namespace: plataforma-prod
labels:
app: servico-configuracao
athleticmap.io/contexto: configuracao
spec:
replicas: 1
selector: { matchLabels: { app: servico-configuracao } }
template:
metadata:
labels:
app: servico-configuracao
athleticmap.io/contexto: configuracao
spec:
containers:
- name: servico-configuracao
# Tag alinhada com o tenant `escolinha`, que e o mais atual do
# cluster. A que estava aqui vinha do molde defasado deste
# repositorio, e nenhum tenant real a usava mais.
#
# O preco disso apareceu no primeiro deploy: com
# `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e
# parou — a imagem foi construida antes de V002..V007 existirem, e a
# tabela `plano_financeiro` nem chegou a ser criada. "Imagem
# presente no no" nao e o mesmo que "imagem atual".
image: docker.io/library/servico-configuracao:1.10-categoria-modalidade
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
- { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" }
- { name: SPRING_DATASOURCE_USERNAME, value: "atm" }
- name: SPRING_DATASOURCE_PASSWORD
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_TENANT, value: "plataforma" }
resources:
requests: { cpu: 150m, memory: 320Mi }
limits: { cpu: "1", memory: 768Mi }
readinessProbe:
httpGet: { path: /api/configuracao/health, port: 8083 }
initialDelaySeconds: 25
periodSeconds: 10
failureThreshold: 30
livenessProbe:
httpGet: { path: /actuator/health/liveness, port: 8083 }
initialDelaySeconds: 60
periodSeconds: 20
failureThreshold: 6
---
apiVersion: v1
kind: Service
metadata:
name: servico-configuracao
namespace: plataforma-prod
labels:
app: servico-configuracao
spec:
selector: { app: servico-configuracao }
ports: [{ name: http, port: 80, targetPort: 8083 }]
# Bounded context "configuracao" como app proprio (ADR-0002): Deployment/pod
# medivel = centro de custo. Schema proprio "configuracao" no Postgres do silo
# (criado pelo Flyway). Roteado em /api/configuracao no ingress do tenant.
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: servico-configuracao
namespace: plataforma-prod
labels:
app: servico-configuracao
athleticmap.io/contexto: configuracao
spec:
replicas: 1
selector: { matchLabels: { app: servico-configuracao } }
template:
metadata:
labels:
app: servico-configuracao
athleticmap.io/contexto: configuracao
spec:
containers:
- name: servico-configuracao
# Tag alinhada com o tenant `escolinha`, que e o mais atual do
# cluster. A que estava aqui vinha do molde defasado deste
# repositorio, e nenhum tenant real a usava mais.
#
# O preco disso apareceu no primeiro deploy: com
# `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e
# parou — a imagem foi construida antes de V002..V007 existirem, e a
# tabela `plano_financeiro` nem chegou a ser criada. "Imagem
# presente no no" nao e o mesmo que "imagem atual".
image: docker.io/library/servico-configuracao:1.10-categoria-modalidade
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
- { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" }
- { name: SPRING_DATASOURCE_USERNAME, value: "atm" }
- name: SPRING_DATASOURCE_PASSWORD
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "plataforma" }
resources:
requests: { cpu: 150m, memory: 320Mi }
limits: { cpu: "1", memory: 768Mi }
readinessProbe:
httpGet: { path: /api/configuracao/health, port: 8083 }
initialDelaySeconds: 25
periodSeconds: 10
failureThreshold: 30
livenessProbe:
httpGet: { path: /actuator/health/liveness, port: 8083 }
initialDelaySeconds: 60
periodSeconds: 20
failureThreshold: 6
---
apiVersion: v1
kind: Service
metadata:
name: servico-configuracao
namespace: plataforma-prod
labels:
app: servico-configuracao
spec:
selector: { app: servico-configuracao }
ports: [{ name: http, port: 80, targetPort: 8083 }]
tenants/plataforma/79-servico-financeiro.yaml
+93 -93
View File
@@ -1,93 +1,93 @@
# Bounded context "financeiro" (2a onda): Cobranca + ApuracaoRateio (centros de custo).
# Schema proprio "financeiro" (Flyway). Roteado em /api/financeiro no ingress.
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: servico-financeiro
namespace: plataforma-prod
labels:
app: servico-financeiro
athleticmap.io/contexto: financeiro
spec:
replicas: 1
selector: { matchLabels: { app: servico-financeiro } }
template:
metadata:
labels:
app: servico-financeiro
athleticmap.io/contexto: financeiro
spec:
containers:
- name: servico-financeiro
# Tag alinhada com o tenant `escolinha`, que e o mais atual do
# cluster. A que estava aqui vinha do molde defasado deste
# repositorio, e nenhum tenant real a usava mais.
#
# O preco disso apareceu no primeiro deploy: com
# `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e
# parou — a imagem foi construida antes de V002..V007 existirem, e a
# tabela `plano_financeiro` nem chegou a ser criada. "Imagem
# presente no no" nao e o mesmo que "imagem atual".
image: docker.io/library/servico-financeiro:1.6-assinatura
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
- { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" }
- { name: SPRING_DATASOURCE_USERNAME, value: "atm" }
- name: SPRING_DATASOURCE_PASSWORD
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_TENANT, value: "plataforma" }
# Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta
# variavel o servico nasce Bronze e responde 403 no que e pago.
- { name: ATM_PLANO, value: "institucional" }
# ── Asaas de PRODUCAO (P3.3) ──────────────────────────────────
# Aqui e o tenant da plataforma: a conta Asaas e a da propria
# Athletic Map, e nao a de um cliente.
#
# O rotulo `ASAAS_AMBIENTE` e a URL tem de concordar. Se nao
# concordarem, `AsaasClient` RECUSA a emissao — de proposito:
# producao apontando para sandbox faria a cobranca "funcionar" sem
# ninguem pagar de verdade, que e o erro caro e silencioso.
- { name: ASAAS_BASE_URL, value: "https://api.asaas.com/v3" }
- { name: ASAAS_AMBIENTE, value: "producao" }
- { name: ASAAS_USER_AGENT, value: "AthleticMap/plataforma" }
# Os DOIS segredos sao separados, e nao por preciosismo: a API Key
# autoriza movimentar dinheiro; o token do webhook so autoriza
# alguem a nos avisar que algo aconteceu. Se forem iguais,
# `AsaasConfig` RECUSA subir o pod.
- name: ASAAS_API_KEY
valueFrom:
secretKeyRef: { name: asaas-credentials, key: api-key }
- name: ASAAS_WEBHOOK_TOKEN
valueFrom:
secretKeyRef: { name: asaas-credentials, key: webhook-token }
resources:
requests: { cpu: 150m, memory: 320Mi }
limits: { cpu: "1", memory: 768Mi }
readinessProbe:
httpGet: { path: /api/financeiro/health, port: 8083 }
initialDelaySeconds: 25
periodSeconds: 10
failureThreshold: 30
livenessProbe:
httpGet: { path: /actuator/health/liveness, port: 8083 }
initialDelaySeconds: 60
periodSeconds: 20
failureThreshold: 6
---
apiVersion: v1
kind: Service
metadata:
name: servico-financeiro
namespace: plataforma-prod
labels:
app: servico-financeiro
spec:
selector: { app: servico-financeiro }
ports: [{ name: http, port: 80, targetPort: 8083 }]
# Bounded context "financeiro" (2a onda): Cobranca + ApuracaoRateio (centros de custo).
# Schema proprio "financeiro" (Flyway). Roteado em /api/financeiro no ingress.
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: servico-financeiro
namespace: plataforma-prod
labels:
app: servico-financeiro
athleticmap.io/contexto: financeiro
spec:
replicas: 1
selector: { matchLabels: { app: servico-financeiro } }
template:
metadata:
labels:
app: servico-financeiro
athleticmap.io/contexto: financeiro
spec:
containers:
- name: servico-financeiro
# Tag alinhada com o tenant `escolinha`, que e o mais atual do
# cluster. A que estava aqui vinha do molde defasado deste
# repositorio, e nenhum tenant real a usava mais.
#
# O preco disso apareceu no primeiro deploy: com
# `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e
# parou — a imagem foi construida antes de V002..V007 existirem, e a
# tabela `plano_financeiro` nem chegou a ser criada. "Imagem
# presente no no" nao e o mesmo que "imagem atual".
image: docker.io/library/servico-financeiro:1.6-assinatura
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
- { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" }
- { name: SPRING_DATASOURCE_USERNAME, value: "atm" }
- name: SPRING_DATASOURCE_PASSWORD
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "plataforma" }
# Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta
# variavel o servico nasce Bronze e responde 403 no que e pago.
- { name: ATM_PLANO, value: "institucional" }
# ── Asaas de PRODUCAO (P3.3) ──────────────────────────────────
# Aqui e o tenant da plataforma: a conta Asaas e a da propria
# Athletic Map, e nao a de um cliente.
#
# O rotulo `ASAAS_AMBIENTE` e a URL tem de concordar. Se nao
# concordarem, `AsaasClient` RECUSA a emissao — de proposito:
# producao apontando para sandbox faria a cobranca "funcionar" sem
# ninguem pagar de verdade, que e o erro caro e silencioso.
- { name: ASAAS_BASE_URL, value: "https://api.asaas.com/v3" }
- { name: ASAAS_AMBIENTE, value: "producao" }
- { name: ASAAS_USER_AGENT, value: "AthleticMap/plataforma" }
# Os DOIS segredos sao separados, e nao por preciosismo: a API Key
# autoriza movimentar dinheiro; o token do webhook so autoriza
# alguem a nos avisar que algo aconteceu. Se forem iguais,
# `AsaasConfig` RECUSA subir o pod.
- name: ASAAS_API_KEY
valueFrom:
secretKeyRef: { name: asaas-credentials, key: api-key }
- name: ASAAS_WEBHOOK_TOKEN
valueFrom:
secretKeyRef: { name: asaas-credentials, key: webhook-token }
resources:
requests: { cpu: 150m, memory: 320Mi }
limits: { cpu: "1", memory: 768Mi }
readinessProbe:
httpGet: { path: /api/financeiro/health, port: 8083 }
initialDelaySeconds: 25
periodSeconds: 10
failureThreshold: 30
livenessProbe:
httpGet: { path: /actuator/health/liveness, port: 8083 }
initialDelaySeconds: 60
periodSeconds: 20
failureThreshold: 6
---
apiVersion: v1
kind: Service
metadata:
name: servico-financeiro
namespace: plataforma-prod
labels:
app: servico-financeiro
spec:
selector: { app: servico-financeiro }
ports: [{ name: http, port: 80, targetPort: 8083 }]
tenants/plataforma/80-servico-cadastro.yaml
+68 -68
View File
@@ -1,68 +1,68 @@
# Bounded context "cadastro" como app proprio (ADR-0002/0003): Deployment/pod
# medivel = centro de custo. Schema proprio "cadastro" no Postgres do silo
# (criado pelo Flyway). Roteado em /api/cadastro no ingress do tenant.
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: servico-cadastro
namespace: plataforma-prod
labels:
app: servico-cadastro
athleticmap.io/contexto: cadastro
spec:
replicas: 1
selector: { matchLabels: { app: servico-cadastro } }
template:
metadata:
labels:
app: servico-cadastro
athleticmap.io/contexto: cadastro
spec:
containers:
- name: servico-cadastro
# Tag alinhada com o tenant `escolinha`, que e o mais atual do
# cluster. A que estava aqui vinha do molde defasado deste
# repositorio, e nenhum tenant real a usava mais.
#
# O preco disso apareceu no primeiro deploy: com
# `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e
# parou — a imagem foi construida antes de V002..V007 existirem, e a
# tabela `plano_financeiro` nem chegou a ser criada. "Imagem
# presente no no" nao e o mesmo que "imagem atual".
image: docker.io/library/servico-cadastro:1.20-posicao-e-listas
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
- { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" }
- { name: SPRING_DATASOURCE_USERNAME, value: "atm" }
- name: SPRING_DATASOURCE_PASSWORD
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_TENANT, value: "plataforma" }
resources:
requests: { cpu: 150m, memory: 320Mi }
limits: { cpu: "1", memory: 768Mi }
readinessProbe:
httpGet: { path: /api/cadastro/health, port: 8083 }
initialDelaySeconds: 25
periodSeconds: 10
failureThreshold: 30
livenessProbe:
httpGet: { path: /actuator/health/liveness, port: 8083 }
initialDelaySeconds: 60
periodSeconds: 20
failureThreshold: 6
---
apiVersion: v1
kind: Service
metadata:
name: servico-cadastro
namespace: plataforma-prod
labels:
app: servico-cadastro
spec:
selector: { app: servico-cadastro }
ports: [{ name: http, port: 80, targetPort: 8083 }]
# Bounded context "cadastro" como app proprio (ADR-0002/0003): Deployment/pod
# medivel = centro de custo. Schema proprio "cadastro" no Postgres do silo
# (criado pelo Flyway). Roteado em /api/cadastro no ingress do tenant.
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: servico-cadastro
namespace: plataforma-prod
labels:
app: servico-cadastro
athleticmap.io/contexto: cadastro
spec:
replicas: 1
selector: { matchLabels: { app: servico-cadastro } }
template:
metadata:
labels:
app: servico-cadastro
athleticmap.io/contexto: cadastro
spec:
containers:
- name: servico-cadastro
# Tag alinhada com o tenant `escolinha`, que e o mais atual do
# cluster. A que estava aqui vinha do molde defasado deste
# repositorio, e nenhum tenant real a usava mais.
#
# O preco disso apareceu no primeiro deploy: com
# `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e
# parou — a imagem foi construida antes de V002..V007 existirem, e a
# tabela `plano_financeiro` nem chegou a ser criada. "Imagem
# presente no no" nao e o mesmo que "imagem atual".
image: docker.io/library/servico-cadastro:1.20-posicao-e-listas
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
- { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" }
- { name: SPRING_DATASOURCE_USERNAME, value: "atm" }
- name: SPRING_DATASOURCE_PASSWORD
valueFrom:
secretKeyRef: { name: db-credentials, key: password }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "plataforma" }
resources:
requests: { cpu: 150m, memory: 320Mi }
limits: { cpu: "1", memory: 768Mi }
readinessProbe:
httpGet: { path: /api/cadastro/health, port: 8083 }
initialDelaySeconds: 25
periodSeconds: 10
failureThreshold: 30
livenessProbe:
httpGet: { path: /actuator/health/liveness, port: 8083 }
initialDelaySeconds: 60
periodSeconds: 20
failureThreshold: 6
---
apiVersion: v1
kind: Service
metadata:
name: servico-cadastro
namespace: plataforma-prod
labels:
app: servico-cadastro
spec:
selector: { app: servico-cadastro }
ports: [{ name: http, port: 80, targetPort: 8083 }]
tenants/plataforma/82-servico-captacao.yaml
+1 -1
View File
@@ -100,7 +100,7 @@ spec:
# `@CrossOrigin` aqui aceita UMA origem: o placeholder vira string
# literal, entao virgula nao separa em duas. Se a LP for publicada
# noutro host, este valor muda junto ou o formulario toma CORS.
- { name: CAPTACAO_ORIGEM, value: "https://plataforma.athleticmap.influxdigital.com.br" }
- { name: CAPTACAO_ORIGEM, value: "https://plataforma.athleticmap.com" }
- { name: CAPTACAO_RETENCAO_MESES, value: "24" }
# P5.1 — o token do webhook de ASSINATURA. Sem ele o endpoint
# RECUSA TUDO, de proposito, e o log diz exatamente isso. O mesmo
tenants/plataforma/90-servico-bff.yaml
+72 -72
View File
@@ -1,72 +1,72 @@
# BFF (Backend-for-Frontend) — ponto unico da SPA; agrega configuracao + cadastro
# com token relay. Stateless (sem banco). Roteado em /bff no ingress do tenant.
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: servico-bff
namespace: plataforma-prod
labels:
app: servico-bff
athleticmap.io/contexto: bff
spec:
replicas: 1
selector: { matchLabels: { app: servico-bff } }
template:
metadata:
labels:
app: servico-bff
athleticmap.io/contexto: bff
spec:
containers:
- name: servico-bff
# Tag alinhada com o tenant `escolinha`, que e o mais atual do
# cluster. A que estava aqui vinha do molde defasado deste
# repositorio, e nenhum tenant real a usava mais.
#
# O preco disso apareceu no primeiro deploy: com
# `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e
# parou — a imagem foi construida antes de V002..V007 existirem, e a
# tabela `plano_financeiro` nem chegou a ser criada. "Imagem
# presente no no" nao e o mesmo que "imagem atual".
image: docker.io/library/servico-bff:1.98-barreira-de-plano
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
- { name: ATM_CONFIG_URL, value: "http://servico-configuracao" }
- { name: ATM_CADASTRO_URL, value: "http://servico-cadastro" }
- { name: ATM_ORGANIZACAO_URL, value: "http://servico-organizacao" }
- { name: ATM_PLANEJAMENTO_URL, value: "http://servico-planejamento" }
- { name: ATM_CAMPEONATO_URL, value: "http://servico-campeonato" }
- { name: ATM_SAUDE_URL, value: "http://servico-saude" }
- { name: ATM_FINANCEIRO_URL, value: "http://servico-financeiro" }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" }
- { name: ATM_TENANT, value: "plataforma" }
# Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta
# variavel o servico nasce Bronze e responde 403 no que e pago.
- { name: ATM_PLANO, value: "institucional" }
resources:
requests: { cpu: 100m, memory: 256Mi }
limits: { cpu: 500m, memory: 512Mi }
readinessProbe:
httpGet: { path: /bff/health, port: 8083 }
initialDelaySeconds: 20
periodSeconds: 10
failureThreshold: 30
livenessProbe:
httpGet: { path: /actuator/health/liveness, port: 8083 }
initialDelaySeconds: 50
periodSeconds: 20
failureThreshold: 6
---
apiVersion: v1
kind: Service
metadata:
name: servico-bff
namespace: plataforma-prod
labels:
app: servico-bff
spec:
selector: { app: servico-bff }
ports: [{ name: http, port: 80, targetPort: 8083 }]
# BFF (Backend-for-Frontend) — ponto unico da SPA; agrega configuracao + cadastro
# com token relay. Stateless (sem banco). Roteado em /bff no ingress do tenant.
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: servico-bff
namespace: plataforma-prod
labels:
app: servico-bff
athleticmap.io/contexto: bff
spec:
replicas: 1
selector: { matchLabels: { app: servico-bff } }
template:
metadata:
labels:
app: servico-bff
athleticmap.io/contexto: bff
spec:
containers:
- name: servico-bff
# Tag alinhada com o tenant `escolinha`, que e o mais atual do
# cluster. A que estava aqui vinha do molde defasado deste
# repositorio, e nenhum tenant real a usava mais.
#
# O preco disso apareceu no primeiro deploy: com
# `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e
# parou — a imagem foi construida antes de V002..V007 existirem, e a
# tabela `plano_financeiro` nem chegou a ser criada. "Imagem
# presente no no" nao e o mesmo que "imagem atual".
image: docker.io/library/servico-bff:1.98-barreira-de-plano
imagePullPolicy: Never
ports: [{ containerPort: 8083 }]
env:
- { name: ATM_CONFIG_URL, value: "http://servico-configuracao" }
- { name: ATM_CADASTRO_URL, value: "http://servico-cadastro" }
- { name: ATM_ORGANIZACAO_URL, value: "http://servico-organizacao" }
- { name: ATM_PLANEJAMENTO_URL, value: "http://servico-planejamento" }
- { name: ATM_CAMPEONATO_URL, value: "http://servico-campeonato" }
- { name: ATM_SAUDE_URL, value: "http://servico-saude" }
- { name: ATM_FINANCEIRO_URL, value: "http://servico-financeiro" }
- { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" }
- { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" }
- { name: ATM_TENANT, value: "plataforma" }
# Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta
# variavel o servico nasce Bronze e responde 403 no que e pago.
- { name: ATM_PLANO, value: "institucional" }
resources:
requests: { cpu: 100m, memory: 256Mi }
limits: { cpu: 500m, memory: 512Mi }
readinessProbe:
httpGet: { path: /bff/health, port: 8083 }
initialDelaySeconds: 20
periodSeconds: 10
failureThreshold: 30
livenessProbe:
httpGet: { path: /actuator/health/liveness, port: 8083 }
initialDelaySeconds: 50
periodSeconds: 20
failureThreshold: 6
---
apiVersion: v1
kind: Service
metadata:
name: servico-bff
namespace: plataforma-prod
labels:
app: servico-bff
spec:
selector: { app: servico-bff }
ports: [{ name: http, port: 80, targetPort: 8083 }]
tenants/plataforma/95-frontend-spa.yaml
+1 -1
View File
@@ -33,7 +33,7 @@ spec:
imagePullPolicy: Never
ports: [{ containerPort: 80 }]
env:
- { name: ATM_KC_URL, value: "https://auth-plataforma.athleticmap.influxdigital.com.br" }
- { name: ATM_KC_URL, value: "https://auth-plataforma.athleticmap.com" }
- { name: ATM_REALM, value: "athleticmap" }
- { name: ATM_CLIENT, value: "spa" }
- { name: ATM_TENANT, value: "plataforma" }