diff --git a/moldes/consolidado/70-runtime-core.yaml b/moldes/consolidado/70-runtime-core.yaml index c72b3cd..b21a614 100644 --- a/moldes/consolidado/70-runtime-core.yaml +++ b/moldes/consolidado/70-runtime-core.yaml @@ -38,7 +38,7 @@ spec: # nome do tenant: uma instancia so nao comporta quatro realms # chamados `athleticmap`. - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/{{REALM}}/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth.athleticmap.influxdigital.com.br/realms/{{REALM}}" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/{{REALM}}" } - { name: ATM_TENANT, value: "{{TENANT}}" } - { name: ATM_PLANO, value: "{{PLANO}}" } resources: diff --git a/moldes/consolidado/71-runtime-operacao.yaml b/moldes/consolidado/71-runtime-operacao.yaml index cba5d9c..d4810d5 100644 --- a/moldes/consolidado/71-runtime-operacao.yaml +++ b/moldes/consolidado/71-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: # nome do tenant: uma instancia so nao comporta quatro realms # chamados `athleticmap`. - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/{{REALM}}/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth.athleticmap.influxdigital.com.br/realms/{{REALM}}" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/{{REALM}}" } - { name: ATM_TENANT, value: "{{TENANT}}" } - { name: ATM_PLANO, value: "{{PLANO}}" } # O provedor de pagamento vive neste runtime. diff --git a/moldes/consolidado/72-runtime-saude.yaml b/moldes/consolidado/72-runtime-saude.yaml index 798f3a6..4bbd88e 100644 --- a/moldes/consolidado/72-runtime-saude.yaml +++ b/moldes/consolidado/72-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: # nome do tenant: uma instancia so nao comporta quatro realms # chamados `athleticmap`. - { name: ATM_JWK_SET_URI, value: "http://keycloak.plataforma-prod.svc:8080/realms/{{REALM}}/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth.athleticmap.influxdigital.com.br/realms/{{REALM}}" } + - { name: ATM_ISSUER, value: "https://auth.athleticmap.com/realms/{{REALM}}" } - { name: ATM_TENANT, value: "{{TENANT}}" } - { name: ATM_PLANO, value: "{{PLANO}}" } # Retencao da trilha de auditoria. O expurgo roda agendado DENTRO diff --git a/moldes/consolidado/95-frontend-spa.yaml b/moldes/consolidado/95-frontend-spa.yaml index bf694b5..e7079fb 100644 --- a/moldes/consolidado/95-frontend-spa.yaml +++ b/moldes/consolidado/95-frontend-spa.yaml @@ -38,7 +38,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth.athleticmap.influxdigital.com.br" } + - { name: ATM_KC_URL, value: "https://auth.athleticmap.com" } - { name: ATM_REALM, value: "{{REALM}}" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "{{TENANT}}" } diff --git a/tenants/acme/20-keycloak.yaml b/tenants/acme/20-keycloak.yaml index 075798b..b87552e 100644 --- a/tenants/acme/20-keycloak.yaml +++ b/tenants/acme/20-keycloak.yaml @@ -44,7 +44,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-acme.athleticmap.influxdigital.com.br" + value: "auth-acme.athleticmap.com" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/acme/30-apps-stubs.yaml b/tenants/acme/30-apps-stubs.yaml index 303f6a9..0bda606 100644 --- a/tenants/acme/30-apps-stubs.yaml +++ b/tenants/acme/30-apps-stubs.yaml @@ -18,7 +18,7 @@ spec: imagePullPolicy: Never env: - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/acme/65-runtime-core.yaml b/tenants/acme/65-runtime-core.yaml index de6f424..deba8b5 100644 --- a/tenants/acme/65-runtime-core.yaml +++ b/tenants/acme/65-runtime-core.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-acme.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: acme - name: ATM_PLANO diff --git a/tenants/acme/66-runtime-operacao.yaml b/tenants/acme/66-runtime-operacao.yaml index a3c3399..8824b3a 100644 --- a/tenants/acme/66-runtime-operacao.yaml +++ b/tenants/acme/66-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-acme.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: acme - name: ATM_PLANO diff --git a/tenants/acme/67-runtime-saude.yaml b/tenants/acme/67-runtime-saude.yaml index a59fb8f..2196b26 100644 --- a/tenants/acme/67-runtime-saude.yaml +++ b/tenants/acme/67-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-acme.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: acme - name: ATM_PLANO diff --git a/tenants/acme/70-servico-configuracao.yaml b/tenants/acme/70-servico-configuracao.yaml index f924cf1..1657ee5 100644 --- a/tenants/acme/70-servico-configuracao.yaml +++ b/tenants/acme/70-servico-configuracao.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/72-servico-organizacao.yaml b/tenants/acme/72-servico-organizacao.yaml index 26f08b5..d51eccc 100644 --- a/tenants/acme/72-servico-organizacao.yaml +++ b/tenants/acme/72-servico-organizacao.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/74-servico-planejamento.yaml b/tenants/acme/74-servico-planejamento.yaml index 1340a01..58a66fc 100644 --- a/tenants/acme/74-servico-planejamento.yaml +++ b/tenants/acme/74-servico-planejamento.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/76-servico-campeonato.yaml b/tenants/acme/76-servico-campeonato.yaml index f524fe9..ab2948c 100644 --- a/tenants/acme/76-servico-campeonato.yaml +++ b/tenants/acme/76-servico-campeonato.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/acme/78-servico-saude.yaml b/tenants/acme/78-servico-saude.yaml index a959aa0..aded21f 100644 --- a/tenants/acme/78-servico-saude.yaml +++ b/tenants/acme/78-servico-saude.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/acme/79-servico-financeiro.yaml b/tenants/acme/79-servico-financeiro.yaml index 8cd95fb..d2e0496 100644 --- a/tenants/acme/79-servico-financeiro.yaml +++ b/tenants/acme/79-servico-financeiro.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/acme/80-servico-cadastro.yaml b/tenants/acme/80-servico-cadastro.yaml index 3762e2d..c56917e 100644 --- a/tenants/acme/80-servico-cadastro.yaml +++ b/tenants/acme/80-servico-cadastro.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/acme/81-servico-documentos.yaml b/tenants/acme/81-servico-documentos.yaml index d06cd0f..516fcde 100644 --- a/tenants/acme/81-servico-documentos.yaml +++ b/tenants/acme/81-servico-documentos.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/82-servico-administrativo.yaml b/tenants/acme/82-servico-administrativo.yaml index 2031122..8e6e035 100644 --- a/tenants/acme/82-servico-administrativo.yaml +++ b/tenants/acme/82-servico-administrativo.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/83-servico-assistencia-social.yaml b/tenants/acme/83-servico-assistencia-social.yaml index 7bcd322..23723e2 100644 --- a/tenants/acme/83-servico-assistencia-social.yaml +++ b/tenants/acme/83-servico-assistencia-social.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/84-servico-pedagogico.yaml b/tenants/acme/84-servico-pedagogico.yaml index 4934ae5..dba8397 100644 --- a/tenants/acme/84-servico-pedagogico.yaml +++ b/tenants/acme/84-servico-pedagogico.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/85-servico-nutricao.yaml b/tenants/acme/85-servico-nutricao.yaml index d332c3e..b563980 100644 --- a/tenants/acme/85-servico-nutricao.yaml +++ b/tenants/acme/85-servico-nutricao.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/86-servico-agenda.yaml b/tenants/acme/86-servico-agenda.yaml index 22b9986..8cdba00 100644 --- a/tenants/acme/86-servico-agenda.yaml +++ b/tenants/acme/86-servico-agenda.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "acme" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/acme/90-servico-bff.yaml b/tenants/acme/90-servico-bff.yaml index 463433a..6da01fc 100644 --- a/tenants/acme/90-servico-bff.yaml +++ b/tenants/acme/90-servico-bff.yaml @@ -38,7 +38,7 @@ spec: - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-acme.athleticmap.com/realms/athleticmap" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "acme" } diff --git a/tenants/acme/95-frontend-spa.yaml b/tenants/acme/95-frontend-spa.yaml index aa95a46..d779bf7 100644 --- a/tenants/acme/95-frontend-spa.yaml +++ b/tenants/acme/95-frontend-spa.yaml @@ -24,7 +24,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-acme.athleticmap.influxdigital.com.br" } + - { name: ATM_KC_URL, value: "https://auth-acme.athleticmap.com" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "acme" } diff --git a/tenants/demo/20-keycloak.yaml b/tenants/demo/20-keycloak.yaml index 974671c..a94a26c 100644 --- a/tenants/demo/20-keycloak.yaml +++ b/tenants/demo/20-keycloak.yaml @@ -45,7 +45,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-demo.athleticmap.influxdigital.com.br" + value: "auth-demo.athleticmap.com" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/demo/30-apps-stubs.yaml b/tenants/demo/30-apps-stubs.yaml index f73e700..7f6de79 100644 --- a/tenants/demo/30-apps-stubs.yaml +++ b/tenants/demo/30-apps-stubs.yaml @@ -18,7 +18,7 @@ spec: imagePullPolicy: Never env: - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/demo/65-runtime-core.yaml b/tenants/demo/65-runtime-core.yaml index 52c80c2..30e4c3e 100644 --- a/tenants/demo/65-runtime-core.yaml +++ b/tenants/demo/65-runtime-core.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-demo.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: demo - name: ATM_PLANO diff --git a/tenants/demo/66-runtime-operacao.yaml b/tenants/demo/66-runtime-operacao.yaml index 3251ae1..5882c48 100644 --- a/tenants/demo/66-runtime-operacao.yaml +++ b/tenants/demo/66-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-demo.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: demo - name: ATM_PLANO diff --git a/tenants/demo/67-runtime-saude.yaml b/tenants/demo/67-runtime-saude.yaml index 6d92ea3..62e4bdd 100644 --- a/tenants/demo/67-runtime-saude.yaml +++ b/tenants/demo/67-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-demo.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: demo - name: ATM_PLANO diff --git a/tenants/demo/70-servico-configuracao.yaml b/tenants/demo/70-servico-configuracao.yaml index 2d06bfa..263ec9a 100644 --- a/tenants/demo/70-servico-configuracao.yaml +++ b/tenants/demo/70-servico-configuracao.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/demo/72-servico-organizacao.yaml b/tenants/demo/72-servico-organizacao.yaml index 1cc2ce4..fd9695d 100644 --- a/tenants/demo/72-servico-organizacao.yaml +++ b/tenants/demo/72-servico-organizacao.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/demo/74-servico-planejamento.yaml b/tenants/demo/74-servico-planejamento.yaml index f31cafd..717f383 100644 --- a/tenants/demo/74-servico-planejamento.yaml +++ b/tenants/demo/74-servico-planejamento.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/demo/76-servico-campeonato.yaml b/tenants/demo/76-servico-campeonato.yaml index 6b88888..673e155 100644 --- a/tenants/demo/76-servico-campeonato.yaml +++ b/tenants/demo/76-servico-campeonato.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/demo/78-servico-saude.yaml b/tenants/demo/78-servico-saude.yaml index 754b04a..17ba336 100644 --- a/tenants/demo/78-servico-saude.yaml +++ b/tenants/demo/78-servico-saude.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/demo/79-servico-financeiro.yaml b/tenants/demo/79-servico-financeiro.yaml index 15662a1..5255189 100644 --- a/tenants/demo/79-servico-financeiro.yaml +++ b/tenants/demo/79-servico-financeiro.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/demo/80-servico-cadastro.yaml b/tenants/demo/80-servico-cadastro.yaml index af6b5f5..f2812a2 100644 --- a/tenants/demo/80-servico-cadastro.yaml +++ b/tenants/demo/80-servico-cadastro.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/demo/81-servico-documentos.yaml b/tenants/demo/81-servico-documentos.yaml index 799cb4b..b8e1b7f 100644 --- a/tenants/demo/81-servico-documentos.yaml +++ b/tenants/demo/81-servico-documentos.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/82-servico-administrativo.yaml b/tenants/demo/82-servico-administrativo.yaml index e66f684..6bcfd17 100644 --- a/tenants/demo/82-servico-administrativo.yaml +++ b/tenants/demo/82-servico-administrativo.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/83-servico-assistencia-social.yaml b/tenants/demo/83-servico-assistencia-social.yaml index b349010..0fb6433 100644 --- a/tenants/demo/83-servico-assistencia-social.yaml +++ b/tenants/demo/83-servico-assistencia-social.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/84-servico-pedagogico.yaml b/tenants/demo/84-servico-pedagogico.yaml index d3cccec..0b6973b 100644 --- a/tenants/demo/84-servico-pedagogico.yaml +++ b/tenants/demo/84-servico-pedagogico.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/85-servico-nutricao.yaml b/tenants/demo/85-servico-nutricao.yaml index ce94e7c..7edfd88 100644 --- a/tenants/demo/85-servico-nutricao.yaml +++ b/tenants/demo/85-servico-nutricao.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/86-servico-agenda.yaml b/tenants/demo/86-servico-agenda.yaml index f4407ae..6d8f57e 100644 --- a/tenants/demo/86-servico-agenda.yaml +++ b/tenants/demo/86-servico-agenda.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "demo" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/demo/90-servico-bff.yaml b/tenants/demo/90-servico-bff.yaml index 654c069..cceea93 100644 --- a/tenants/demo/90-servico-bff.yaml +++ b/tenants/demo/90-servico-bff.yaml @@ -38,7 +38,7 @@ spec: - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-demo.athleticmap.com/realms/athleticmap" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "demo" } diff --git a/tenants/demo/95-frontend-spa.yaml b/tenants/demo/95-frontend-spa.yaml index 15861ac..098ea15 100644 --- a/tenants/demo/95-frontend-spa.yaml +++ b/tenants/demo/95-frontend-spa.yaml @@ -24,7 +24,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-demo.athleticmap.influxdigital.com.br" } + - { name: ATM_KC_URL, value: "https://auth-demo.athleticmap.com" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "demo" } diff --git a/tenants/escolinha/20-keycloak.yaml b/tenants/escolinha/20-keycloak.yaml index f202f89..4699502 100644 --- a/tenants/escolinha/20-keycloak.yaml +++ b/tenants/escolinha/20-keycloak.yaml @@ -45,7 +45,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-escolinha.athleticmap.influxdigital.com.br" + value: "auth-escolinha.athleticmap.com" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/escolinha/30-apps-stubs.yaml b/tenants/escolinha/30-apps-stubs.yaml index 96e6bc6..4cf5a56 100644 --- a/tenants/escolinha/30-apps-stubs.yaml +++ b/tenants/escolinha/30-apps-stubs.yaml @@ -18,7 +18,7 @@ spec: imagePullPolicy: Never env: - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/escolinha/65-runtime-core.yaml b/tenants/escolinha/65-runtime-core.yaml index 562a58a..b45f9dc 100644 --- a/tenants/escolinha/65-runtime-core.yaml +++ b/tenants/escolinha/65-runtime-core.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-escolinha.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: escolinha - name: ATM_KC_ADMIN_ENABLED diff --git a/tenants/escolinha/66-runtime-operacao.yaml b/tenants/escolinha/66-runtime-operacao.yaml index 77ef793..92f2059 100644 --- a/tenants/escolinha/66-runtime-operacao.yaml +++ b/tenants/escolinha/66-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-escolinha.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: escolinha - name: ATM_PLANO diff --git a/tenants/escolinha/67-runtime-saude.yaml b/tenants/escolinha/67-runtime-saude.yaml index 1ddbdc4..acfc348 100644 --- a/tenants/escolinha/67-runtime-saude.yaml +++ b/tenants/escolinha/67-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-escolinha.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: escolinha - name: GARMIN_REDIRECT_URI diff --git a/tenants/escolinha/70-servico-configuracao.yaml b/tenants/escolinha/70-servico-configuracao.yaml index 4280892..95dbb85 100644 --- a/tenants/escolinha/70-servico-configuracao.yaml +++ b/tenants/escolinha/70-servico-configuracao.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/escolinha/72-servico-organizacao.yaml b/tenants/escolinha/72-servico-organizacao.yaml index 40723d0..f014841 100644 --- a/tenants/escolinha/72-servico-organizacao.yaml +++ b/tenants/escolinha/72-servico-organizacao.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/escolinha/74-servico-planejamento.yaml b/tenants/escolinha/74-servico-planejamento.yaml index 6022e51..96c2297 100644 --- a/tenants/escolinha/74-servico-planejamento.yaml +++ b/tenants/escolinha/74-servico-planejamento.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/escolinha/76-servico-campeonato.yaml b/tenants/escolinha/76-servico-campeonato.yaml index 84a816d..56738e0 100644 --- a/tenants/escolinha/76-servico-campeonato.yaml +++ b/tenants/escolinha/76-servico-campeonato.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/escolinha/78-servico-saude.yaml b/tenants/escolinha/78-servico-saude.yaml index fe97c96..c631219 100644 --- a/tenants/escolinha/78-servico-saude.yaml +++ b/tenants/escolinha/78-servico-saude.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/escolinha/79-servico-financeiro.yaml b/tenants/escolinha/79-servico-financeiro.yaml index b552cb7..f544b5d 100644 --- a/tenants/escolinha/79-servico-financeiro.yaml +++ b/tenants/escolinha/79-servico-financeiro.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/escolinha/80-servico-cadastro.yaml b/tenants/escolinha/80-servico-cadastro.yaml index 78cb14a..f0b4adb 100644 --- a/tenants/escolinha/80-servico-cadastro.yaml +++ b/tenants/escolinha/80-servico-cadastro.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/escolinha/81-servico-documentos.yaml b/tenants/escolinha/81-servico-documentos.yaml index 83a1a18..bd96967 100644 --- a/tenants/escolinha/81-servico-documentos.yaml +++ b/tenants/escolinha/81-servico-documentos.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/82-servico-administrativo.yaml b/tenants/escolinha/82-servico-administrativo.yaml index 123f7cc..178eb82 100644 --- a/tenants/escolinha/82-servico-administrativo.yaml +++ b/tenants/escolinha/82-servico-administrativo.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/83-servico-assistencia-social.yaml b/tenants/escolinha/83-servico-assistencia-social.yaml index 9e5c277..cd7e0dc 100644 --- a/tenants/escolinha/83-servico-assistencia-social.yaml +++ b/tenants/escolinha/83-servico-assistencia-social.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/84-servico-pedagogico.yaml b/tenants/escolinha/84-servico-pedagogico.yaml index b4d08e7..dfe68c3 100644 --- a/tenants/escolinha/84-servico-pedagogico.yaml +++ b/tenants/escolinha/84-servico-pedagogico.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/85-servico-nutricao.yaml b/tenants/escolinha/85-servico-nutricao.yaml index 958ce49..5e55967 100644 --- a/tenants/escolinha/85-servico-nutricao.yaml +++ b/tenants/escolinha/85-servico-nutricao.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/86-servico-agenda.yaml b/tenants/escolinha/86-servico-agenda.yaml index dab3b21..026b5b7 100644 --- a/tenants/escolinha/86-servico-agenda.yaml +++ b/tenants/escolinha/86-servico-agenda.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-credentials, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "escolinha" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/escolinha/90-servico-bff.yaml b/tenants/escolinha/90-servico-bff.yaml index 3bf23f6..a5a71e9 100644 --- a/tenants/escolinha/90-servico-bff.yaml +++ b/tenants/escolinha/90-servico-bff.yaml @@ -38,7 +38,7 @@ spec: - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-escolinha.athleticmap.com/realms/athleticmap" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "escolinha" } diff --git a/tenants/escolinha/95-frontend-spa.yaml b/tenants/escolinha/95-frontend-spa.yaml index 45f3e4a..5a92ab4 100644 --- a/tenants/escolinha/95-frontend-spa.yaml +++ b/tenants/escolinha/95-frontend-spa.yaml @@ -24,7 +24,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-escolinha.athleticmap.influxdigital.com.br" } + - { name: ATM_KC_URL, value: "https://auth-escolinha.athleticmap.com" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "escolinha" } diff --git a/tenants/piloto/20-keycloak.yaml b/tenants/piloto/20-keycloak.yaml index b79d341..71cfd83 100644 --- a/tenants/piloto/20-keycloak.yaml +++ b/tenants/piloto/20-keycloak.yaml @@ -44,7 +44,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-piloto.athleticmap.influxdigital.com.br" + value: "auth-piloto.athleticmap.com" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/piloto/30-apps-stubs.yaml b/tenants/piloto/30-apps-stubs.yaml index 2724996..83edaaf 100644 --- a/tenants/piloto/30-apps-stubs.yaml +++ b/tenants/piloto/30-apps-stubs.yaml @@ -18,7 +18,7 @@ spec: imagePullPolicy: Never env: - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } ports: [{ containerPort: 8083 }] readinessProbe: diff --git a/tenants/piloto/65-runtime-core.yaml b/tenants/piloto/65-runtime-core.yaml index 6f3c9b9..bf43a4f 100644 --- a/tenants/piloto/65-runtime-core.yaml +++ b/tenants/piloto/65-runtime-core.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-piloto.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: piloto - name: ATM_PLANO diff --git a/tenants/piloto/66-runtime-operacao.yaml b/tenants/piloto/66-runtime-operacao.yaml index e2e5048..159534e 100644 --- a/tenants/piloto/66-runtime-operacao.yaml +++ b/tenants/piloto/66-runtime-operacao.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-piloto.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: piloto - name: ATM_PLANO diff --git a/tenants/piloto/67-runtime-saude.yaml b/tenants/piloto/67-runtime-saude.yaml index 2f04e73..9f0b20e 100644 --- a/tenants/piloto/67-runtime-saude.yaml +++ b/tenants/piloto/67-runtime-saude.yaml @@ -38,7 +38,7 @@ spec: - name: ATM_JWK_SET_URI value: http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs - name: ATM_ISSUER - value: https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap + value: https://auth-piloto.athleticmap.com/realms/athleticmap - name: ATM_TENANT value: piloto - name: ATM_PLANO diff --git a/tenants/piloto/70-servico-configuracao.yaml b/tenants/piloto/70-servico-configuracao.yaml index 37ce064..0ff1e95 100644 --- a/tenants/piloto/70-servico-configuracao.yaml +++ b/tenants/piloto/70-servico-configuracao.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/72-servico-organizacao.yaml b/tenants/piloto/72-servico-organizacao.yaml index 856de8f..894a233 100644 --- a/tenants/piloto/72-servico-organizacao.yaml +++ b/tenants/piloto/72-servico-organizacao.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/74-servico-planejamento.yaml b/tenants/piloto/74-servico-planejamento.yaml index 3ee1f21..eb8b509 100644 --- a/tenants/piloto/74-servico-planejamento.yaml +++ b/tenants/piloto/74-servico-planejamento.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/76-servico-campeonato.yaml b/tenants/piloto/76-servico-campeonato.yaml index 5a522a5..b6879d0 100644 --- a/tenants/piloto/76-servico-campeonato.yaml +++ b/tenants/piloto/76-servico-campeonato.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 320Mi } diff --git a/tenants/piloto/78-servico-saude.yaml b/tenants/piloto/78-servico-saude.yaml index b21bf04..c8c06cb 100644 --- a/tenants/piloto/78-servico-saude.yaml +++ b/tenants/piloto/78-servico-saude.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } # Garmin: DNS devolve IPv6 primeiro e a rota IPv6 do cluster falha; forcar IPv4. - { name: JAVA_TOOL_OPTIONS, value: "-Djava.net.preferIPv4Stack=true" } diff --git a/tenants/piloto/79-servico-financeiro.yaml b/tenants/piloto/79-servico-financeiro.yaml index c198262..09b251e 100644 --- a/tenants/piloto/79-servico-financeiro.yaml +++ b/tenants/piloto/79-servico-financeiro.yaml @@ -31,7 +31,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } - { name: ATM_PLANO, value: "institucional" } resources: diff --git a/tenants/piloto/80-servico-cadastro.yaml b/tenants/piloto/80-servico-cadastro.yaml index 49b25fc..6864021 100644 --- a/tenants/piloto/80-servico-cadastro.yaml +++ b/tenants/piloto/80-servico-cadastro.yaml @@ -32,7 +32,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } - { name: ATM_KC_ADMIN_ENABLED, value: "true" } - name: ATM_KC_CLIENT_SECRET diff --git a/tenants/piloto/81-servico-documentos.yaml b/tenants/piloto/81-servico-documentos.yaml index 948e2c5..993d4f2 100644 --- a/tenants/piloto/81-servico-documentos.yaml +++ b/tenants/piloto/81-servico-documentos.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/82-servico-administrativo.yaml b/tenants/piloto/82-servico-administrativo.yaml index 4817ded..ecccdcb 100644 --- a/tenants/piloto/82-servico-administrativo.yaml +++ b/tenants/piloto/82-servico-administrativo.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/83-servico-assistencia-social.yaml b/tenants/piloto/83-servico-assistencia-social.yaml index b173793..fee704a 100644 --- a/tenants/piloto/83-servico-assistencia-social.yaml +++ b/tenants/piloto/83-servico-assistencia-social.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/84-servico-pedagogico.yaml b/tenants/piloto/84-servico-pedagogico.yaml index 53fd012..1c1976b 100644 --- a/tenants/piloto/84-servico-pedagogico.yaml +++ b/tenants/piloto/84-servico-pedagogico.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/85-servico-nutricao.yaml b/tenants/piloto/85-servico-nutricao.yaml index fc32fe0..6073b3a 100644 --- a/tenants/piloto/85-servico-nutricao.yaml +++ b/tenants/piloto/85-servico-nutricao.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/86-servico-agenda.yaml b/tenants/piloto/86-servico-agenda.yaml index cef7985..e7239ee 100644 --- a/tenants/piloto/86-servico-agenda.yaml +++ b/tenants/piloto/86-servico-agenda.yaml @@ -27,7 +27,7 @@ spec: valueFrom: secretKeyRef: { name: db-compartilhado, key: password } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - { name: ATM_TENANT, value: "piloto" } resources: requests: { cpu: 50m, memory: 300Mi } diff --git a/tenants/piloto/90-servico-bff.yaml b/tenants/piloto/90-servico-bff.yaml index 1fa1eb3..a07cca6 100644 --- a/tenants/piloto/90-servico-bff.yaml +++ b/tenants/piloto/90-servico-bff.yaml @@ -38,7 +38,7 @@ spec: - { name: ATM_NUTRICAO_URL, value: "http://servico-nutricao" } - { name: ATM_AGENDA_URL, value: "http://servico-agenda" } - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.influxdigital.com.br/realms/athleticmap" } + - { name: ATM_ISSUER, value: "https://auth-piloto.athleticmap.com/realms/athleticmap" } - name: ATM_CONSENTIMENTO_SEGREDO valueFrom: { secretKeyRef: { name: consentimento-selo, key: segredo } } - { name: ATM_TENANT, value: "piloto" } diff --git a/tenants/piloto/95-frontend-spa.yaml b/tenants/piloto/95-frontend-spa.yaml index 57213da..238aca4 100644 --- a/tenants/piloto/95-frontend-spa.yaml +++ b/tenants/piloto/95-frontend-spa.yaml @@ -24,7 +24,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-piloto.athleticmap.influxdigital.com.br" } + - { name: ATM_KC_URL, value: "https://auth-piloto.athleticmap.com" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "piloto" } diff --git a/tenants/plataforma/20-keycloak.yaml b/tenants/plataforma/20-keycloak.yaml index 86bd603..da0944a 100644 --- a/tenants/plataforma/20-keycloak.yaml +++ b/tenants/plataforma/20-keycloak.yaml @@ -44,7 +44,7 @@ spec: - name: KC_PROXY_HEADERS value: xforwarded - name: KC_HOSTNAME - value: "auth-plataforma.athleticmap.influxdigital.com.br" + value: "auth-plataforma.athleticmap.com" - name: KC_HOSTNAME_STRICT value: "true" ports: diff --git a/tenants/plataforma/55-cronjobs-financeiro.yaml b/tenants/plataforma/55-cronjobs-financeiro.yaml index b4b9bb0..c0dca3d 100644 --- a/tenants/plataforma/55-cronjobs-financeiro.yaml +++ b/tenants/plataforma/55-cronjobs-financeiro.yaml @@ -166,7 +166,7 @@ spec: env: - { name: KEYCLOAK_URL, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token" } # O host publico do realm: vira `iss` do token (ver disparar.sh). - - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.influxdigital.com.br" } + - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.com" } - name: CLIENT_SECRET valueFrom: secretKeyRef: { name: operacao-credentials, key: client-secret } @@ -205,7 +205,7 @@ spec: env: - { name: KEYCLOAK_URL, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token" } # O host publico do realm: vira `iss` do token (ver disparar.sh). - - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.influxdigital.com.br" } + - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.com" } - { name: ALVO, value: "http://servico-financeiro/api/financeiro/notas/processar?limite=50" } - name: CLIENT_SECRET valueFrom: @@ -245,7 +245,7 @@ spec: env: - { name: KEYCLOAK_URL, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/token" } # O host publico do realm: vira `iss` do token (ver disparar.sh). - - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.influxdigital.com.br" } + - { name: ISSUER_HOST, value: "auth-plataforma.athleticmap.com" } # limiteCobrancas=100: cada uma custa uma chamada ao provedor. - { name: ALVO, value: "http://servico-financeiro/api/financeiro/conciliacao?limiteEventos=100&limiteCobrancas=100" } - name: CLIENT_SECRET diff --git a/tenants/plataforma/70-servico-configuracao.yaml b/tenants/plataforma/70-servico-configuracao.yaml index 7791910..90f9862 100644 --- a/tenants/plataforma/70-servico-configuracao.yaml +++ b/tenants/plataforma/70-servico-configuracao.yaml @@ -1,68 +1,68 @@ -# Bounded context "configuracao" como app proprio (ADR-0002): Deployment/pod -# medivel = centro de custo. Schema proprio "configuracao" no Postgres do silo -# (criado pelo Flyway). Roteado em /api/configuracao no ingress do tenant. ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: servico-configuracao - namespace: plataforma-prod - labels: - app: servico-configuracao - athleticmap.io/contexto: configuracao -spec: - replicas: 1 - selector: { matchLabels: { app: servico-configuracao } } - template: - metadata: - labels: - app: servico-configuracao - athleticmap.io/contexto: configuracao - spec: - containers: - - name: servico-configuracao - # Tag alinhada com o tenant `escolinha`, que e o mais atual do - # cluster. A que estava aqui vinha do molde defasado deste - # repositorio, e nenhum tenant real a usava mais. - # - # O preco disso apareceu no primeiro deploy: com - # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e - # parou — a imagem foi construida antes de V002..V007 existirem, e a - # tabela `plano_financeiro` nem chegou a ser criada. "Imagem - # presente no no" nao e o mesmo que "imagem atual". - image: docker.io/library/servico-configuracao:1.10-categoria-modalidade - imagePullPolicy: Never - ports: [{ containerPort: 8083 }] - env: - - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } - - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } - - name: SPRING_DATASOURCE_PASSWORD - valueFrom: - secretKeyRef: { name: db-credentials, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" } - - { name: ATM_TENANT, value: "plataforma" } - resources: - requests: { cpu: 150m, memory: 320Mi } - limits: { cpu: "1", memory: 768Mi } - readinessProbe: - httpGet: { path: /api/configuracao/health, port: 8083 } - initialDelaySeconds: 25 - periodSeconds: 10 - failureThreshold: 30 - livenessProbe: - httpGet: { path: /actuator/health/liveness, port: 8083 } - initialDelaySeconds: 60 - periodSeconds: 20 - failureThreshold: 6 ---- -apiVersion: v1 -kind: Service -metadata: - name: servico-configuracao - namespace: plataforma-prod - labels: - app: servico-configuracao -spec: - selector: { app: servico-configuracao } - ports: [{ name: http, port: 80, targetPort: 8083 }] +# Bounded context "configuracao" como app proprio (ADR-0002): Deployment/pod +# medivel = centro de custo. Schema proprio "configuracao" no Postgres do silo +# (criado pelo Flyway). Roteado em /api/configuracao no ingress do tenant. +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: servico-configuracao + namespace: plataforma-prod + labels: + app: servico-configuracao + athleticmap.io/contexto: configuracao +spec: + replicas: 1 + selector: { matchLabels: { app: servico-configuracao } } + template: + metadata: + labels: + app: servico-configuracao + athleticmap.io/contexto: configuracao + spec: + containers: + - name: servico-configuracao + # Tag alinhada com o tenant `escolinha`, que e o mais atual do + # cluster. A que estava aqui vinha do molde defasado deste + # repositorio, e nenhum tenant real a usava mais. + # + # O preco disso apareceu no primeiro deploy: com + # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e + # parou — a imagem foi construida antes de V002..V007 existirem, e a + # tabela `plano_financeiro` nem chegou a ser criada. "Imagem + # presente no no" nao e o mesmo que "imagem atual". + image: docker.io/library/servico-configuracao:1.10-categoria-modalidade + imagePullPolicy: Never + ports: [{ containerPort: 8083 }] + env: + - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } + - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } + - name: SPRING_DATASOURCE_PASSWORD + valueFrom: + secretKeyRef: { name: db-credentials, key: password } + - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" } + - { name: ATM_TENANT, value: "plataforma" } + resources: + requests: { cpu: 150m, memory: 320Mi } + limits: { cpu: "1", memory: 768Mi } + readinessProbe: + httpGet: { path: /api/configuracao/health, port: 8083 } + initialDelaySeconds: 25 + periodSeconds: 10 + failureThreshold: 30 + livenessProbe: + httpGet: { path: /actuator/health/liveness, port: 8083 } + initialDelaySeconds: 60 + periodSeconds: 20 + failureThreshold: 6 +--- +apiVersion: v1 +kind: Service +metadata: + name: servico-configuracao + namespace: plataforma-prod + labels: + app: servico-configuracao +spec: + selector: { app: servico-configuracao } + ports: [{ name: http, port: 80, targetPort: 8083 }] diff --git a/tenants/plataforma/79-servico-financeiro.yaml b/tenants/plataforma/79-servico-financeiro.yaml index 38d6e69..d75040f 100644 --- a/tenants/plataforma/79-servico-financeiro.yaml +++ b/tenants/plataforma/79-servico-financeiro.yaml @@ -1,93 +1,93 @@ -# Bounded context "financeiro" (2a onda): Cobranca + ApuracaoRateio (centros de custo). -# Schema proprio "financeiro" (Flyway). Roteado em /api/financeiro no ingress. ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: servico-financeiro - namespace: plataforma-prod - labels: - app: servico-financeiro - athleticmap.io/contexto: financeiro -spec: - replicas: 1 - selector: { matchLabels: { app: servico-financeiro } } - template: - metadata: - labels: - app: servico-financeiro - athleticmap.io/contexto: financeiro - spec: - containers: - - name: servico-financeiro - # Tag alinhada com o tenant `escolinha`, que e o mais atual do - # cluster. A que estava aqui vinha do molde defasado deste - # repositorio, e nenhum tenant real a usava mais. - # - # O preco disso apareceu no primeiro deploy: com - # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e - # parou — a imagem foi construida antes de V002..V007 existirem, e a - # tabela `plano_financeiro` nem chegou a ser criada. "Imagem - # presente no no" nao e o mesmo que "imagem atual". - image: docker.io/library/servico-financeiro:1.6-assinatura - imagePullPolicy: Never - ports: [{ containerPort: 8083 }] - env: - - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } - - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } - - name: SPRING_DATASOURCE_PASSWORD - valueFrom: - secretKeyRef: { name: db-credentials, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" } - - { name: ATM_TENANT, value: "plataforma" } - # Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta - # variavel o servico nasce Bronze e responde 403 no que e pago. - - { name: ATM_PLANO, value: "institucional" } - - # ── Asaas de PRODUCAO (P3.3) ────────────────────────────────── - # Aqui e o tenant da plataforma: a conta Asaas e a da propria - # Athletic Map, e nao a de um cliente. - # - # O rotulo `ASAAS_AMBIENTE` e a URL tem de concordar. Se nao - # concordarem, `AsaasClient` RECUSA a emissao — de proposito: - # producao apontando para sandbox faria a cobranca "funcionar" sem - # ninguem pagar de verdade, que e o erro caro e silencioso. - - { name: ASAAS_BASE_URL, value: "https://api.asaas.com/v3" } - - { name: ASAAS_AMBIENTE, value: "producao" } - - { name: ASAAS_USER_AGENT, value: "AthleticMap/plataforma" } - - # Os DOIS segredos sao separados, e nao por preciosismo: a API Key - # autoriza movimentar dinheiro; o token do webhook so autoriza - # alguem a nos avisar que algo aconteceu. Se forem iguais, - # `AsaasConfig` RECUSA subir o pod. - - name: ASAAS_API_KEY - valueFrom: - secretKeyRef: { name: asaas-credentials, key: api-key } - - name: ASAAS_WEBHOOK_TOKEN - valueFrom: - secretKeyRef: { name: asaas-credentials, key: webhook-token } - resources: - requests: { cpu: 150m, memory: 320Mi } - limits: { cpu: "1", memory: 768Mi } - readinessProbe: - httpGet: { path: /api/financeiro/health, port: 8083 } - initialDelaySeconds: 25 - periodSeconds: 10 - failureThreshold: 30 - livenessProbe: - httpGet: { path: /actuator/health/liveness, port: 8083 } - initialDelaySeconds: 60 - periodSeconds: 20 - failureThreshold: 6 ---- -apiVersion: v1 -kind: Service -metadata: - name: servico-financeiro - namespace: plataforma-prod - labels: - app: servico-financeiro -spec: - selector: { app: servico-financeiro } - ports: [{ name: http, port: 80, targetPort: 8083 }] +# Bounded context "financeiro" (2a onda): Cobranca + ApuracaoRateio (centros de custo). +# Schema proprio "financeiro" (Flyway). Roteado em /api/financeiro no ingress. +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: servico-financeiro + namespace: plataforma-prod + labels: + app: servico-financeiro + athleticmap.io/contexto: financeiro +spec: + replicas: 1 + selector: { matchLabels: { app: servico-financeiro } } + template: + metadata: + labels: + app: servico-financeiro + athleticmap.io/contexto: financeiro + spec: + containers: + - name: servico-financeiro + # Tag alinhada com o tenant `escolinha`, que e o mais atual do + # cluster. A que estava aqui vinha do molde defasado deste + # repositorio, e nenhum tenant real a usava mais. + # + # O preco disso apareceu no primeiro deploy: com + # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e + # parou — a imagem foi construida antes de V002..V007 existirem, e a + # tabela `plano_financeiro` nem chegou a ser criada. "Imagem + # presente no no" nao e o mesmo que "imagem atual". + image: docker.io/library/servico-financeiro:1.6-assinatura + imagePullPolicy: Never + ports: [{ containerPort: 8083 }] + env: + - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } + - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } + - name: SPRING_DATASOURCE_PASSWORD + valueFrom: + secretKeyRef: { name: db-credentials, key: password } + - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" } + - { name: ATM_TENANT, value: "plataforma" } + # Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta + # variavel o servico nasce Bronze e responde 403 no que e pago. + - { name: ATM_PLANO, value: "institucional" } + + # ── Asaas de PRODUCAO (P3.3) ────────────────────────────────── + # Aqui e o tenant da plataforma: a conta Asaas e a da propria + # Athletic Map, e nao a de um cliente. + # + # O rotulo `ASAAS_AMBIENTE` e a URL tem de concordar. Se nao + # concordarem, `AsaasClient` RECUSA a emissao — de proposito: + # producao apontando para sandbox faria a cobranca "funcionar" sem + # ninguem pagar de verdade, que e o erro caro e silencioso. + - { name: ASAAS_BASE_URL, value: "https://api.asaas.com/v3" } + - { name: ASAAS_AMBIENTE, value: "producao" } + - { name: ASAAS_USER_AGENT, value: "AthleticMap/plataforma" } + + # Os DOIS segredos sao separados, e nao por preciosismo: a API Key + # autoriza movimentar dinheiro; o token do webhook so autoriza + # alguem a nos avisar que algo aconteceu. Se forem iguais, + # `AsaasConfig` RECUSA subir o pod. + - name: ASAAS_API_KEY + valueFrom: + secretKeyRef: { name: asaas-credentials, key: api-key } + - name: ASAAS_WEBHOOK_TOKEN + valueFrom: + secretKeyRef: { name: asaas-credentials, key: webhook-token } + resources: + requests: { cpu: 150m, memory: 320Mi } + limits: { cpu: "1", memory: 768Mi } + readinessProbe: + httpGet: { path: /api/financeiro/health, port: 8083 } + initialDelaySeconds: 25 + periodSeconds: 10 + failureThreshold: 30 + livenessProbe: + httpGet: { path: /actuator/health/liveness, port: 8083 } + initialDelaySeconds: 60 + periodSeconds: 20 + failureThreshold: 6 +--- +apiVersion: v1 +kind: Service +metadata: + name: servico-financeiro + namespace: plataforma-prod + labels: + app: servico-financeiro +spec: + selector: { app: servico-financeiro } + ports: [{ name: http, port: 80, targetPort: 8083 }] diff --git a/tenants/plataforma/80-servico-cadastro.yaml b/tenants/plataforma/80-servico-cadastro.yaml index e520e03..be84a32 100644 --- a/tenants/plataforma/80-servico-cadastro.yaml +++ b/tenants/plataforma/80-servico-cadastro.yaml @@ -1,68 +1,68 @@ -# Bounded context "cadastro" como app proprio (ADR-0002/0003): Deployment/pod -# medivel = centro de custo. Schema proprio "cadastro" no Postgres do silo -# (criado pelo Flyway). Roteado em /api/cadastro no ingress do tenant. ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: servico-cadastro - namespace: plataforma-prod - labels: - app: servico-cadastro - athleticmap.io/contexto: cadastro -spec: - replicas: 1 - selector: { matchLabels: { app: servico-cadastro } } - template: - metadata: - labels: - app: servico-cadastro - athleticmap.io/contexto: cadastro - spec: - containers: - - name: servico-cadastro - # Tag alinhada com o tenant `escolinha`, que e o mais atual do - # cluster. A que estava aqui vinha do molde defasado deste - # repositorio, e nenhum tenant real a usava mais. - # - # O preco disso apareceu no primeiro deploy: com - # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e - # parou — a imagem foi construida antes de V002..V007 existirem, e a - # tabela `plano_financeiro` nem chegou a ser criada. "Imagem - # presente no no" nao e o mesmo que "imagem atual". - image: docker.io/library/servico-cadastro:1.20-posicao-e-listas - imagePullPolicy: Never - ports: [{ containerPort: 8083 }] - env: - - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } - - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } - - name: SPRING_DATASOURCE_PASSWORD - valueFrom: - secretKeyRef: { name: db-credentials, key: password } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" } - - { name: ATM_TENANT, value: "plataforma" } - resources: - requests: { cpu: 150m, memory: 320Mi } - limits: { cpu: "1", memory: 768Mi } - readinessProbe: - httpGet: { path: /api/cadastro/health, port: 8083 } - initialDelaySeconds: 25 - periodSeconds: 10 - failureThreshold: 30 - livenessProbe: - httpGet: { path: /actuator/health/liveness, port: 8083 } - initialDelaySeconds: 60 - periodSeconds: 20 - failureThreshold: 6 ---- -apiVersion: v1 -kind: Service -metadata: - name: servico-cadastro - namespace: plataforma-prod - labels: - app: servico-cadastro -spec: - selector: { app: servico-cadastro } - ports: [{ name: http, port: 80, targetPort: 8083 }] +# Bounded context "cadastro" como app proprio (ADR-0002/0003): Deployment/pod +# medivel = centro de custo. Schema proprio "cadastro" no Postgres do silo +# (criado pelo Flyway). Roteado em /api/cadastro no ingress do tenant. +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: servico-cadastro + namespace: plataforma-prod + labels: + app: servico-cadastro + athleticmap.io/contexto: cadastro +spec: + replicas: 1 + selector: { matchLabels: { app: servico-cadastro } } + template: + metadata: + labels: + app: servico-cadastro + athleticmap.io/contexto: cadastro + spec: + containers: + - name: servico-cadastro + # Tag alinhada com o tenant `escolinha`, que e o mais atual do + # cluster. A que estava aqui vinha do molde defasado deste + # repositorio, e nenhum tenant real a usava mais. + # + # O preco disso apareceu no primeiro deploy: com + # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e + # parou — a imagem foi construida antes de V002..V007 existirem, e a + # tabela `plano_financeiro` nem chegou a ser criada. "Imagem + # presente no no" nao e o mesmo que "imagem atual". + image: docker.io/library/servico-cadastro:1.20-posicao-e-listas + imagePullPolicy: Never + ports: [{ containerPort: 8083 }] + env: + - { name: SPRING_DATASOURCE_URL, value: "jdbc:postgresql://postgres:5432/athleticmap?sslmode=require" } + - { name: SPRING_DATASOURCE_USERNAME, value: "atm" } + - name: SPRING_DATASOURCE_PASSWORD + valueFrom: + secretKeyRef: { name: db-credentials, key: password } + - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" } + - { name: ATM_TENANT, value: "plataforma" } + resources: + requests: { cpu: 150m, memory: 320Mi } + limits: { cpu: "1", memory: 768Mi } + readinessProbe: + httpGet: { path: /api/cadastro/health, port: 8083 } + initialDelaySeconds: 25 + periodSeconds: 10 + failureThreshold: 30 + livenessProbe: + httpGet: { path: /actuator/health/liveness, port: 8083 } + initialDelaySeconds: 60 + periodSeconds: 20 + failureThreshold: 6 +--- +apiVersion: v1 +kind: Service +metadata: + name: servico-cadastro + namespace: plataforma-prod + labels: + app: servico-cadastro +spec: + selector: { app: servico-cadastro } + ports: [{ name: http, port: 80, targetPort: 8083 }] diff --git a/tenants/plataforma/82-servico-captacao.yaml b/tenants/plataforma/82-servico-captacao.yaml index 44dfae4..15be5c5 100644 --- a/tenants/plataforma/82-servico-captacao.yaml +++ b/tenants/plataforma/82-servico-captacao.yaml @@ -100,7 +100,7 @@ spec: # `@CrossOrigin` aqui aceita UMA origem: o placeholder vira string # literal, entao virgula nao separa em duas. Se a LP for publicada # noutro host, este valor muda junto ou o formulario toma CORS. - - { name: CAPTACAO_ORIGEM, value: "https://plataforma.athleticmap.influxdigital.com.br" } + - { name: CAPTACAO_ORIGEM, value: "https://plataforma.athleticmap.com" } - { name: CAPTACAO_RETENCAO_MESES, value: "24" } # P5.1 — o token do webhook de ASSINATURA. Sem ele o endpoint # RECUSA TUDO, de proposito, e o log diz exatamente isso. O mesmo diff --git a/tenants/plataforma/90-servico-bff.yaml b/tenants/plataforma/90-servico-bff.yaml index a7b098b..f037c93 100644 --- a/tenants/plataforma/90-servico-bff.yaml +++ b/tenants/plataforma/90-servico-bff.yaml @@ -1,72 +1,72 @@ -# BFF (Backend-for-Frontend) — ponto unico da SPA; agrega configuracao + cadastro -# com token relay. Stateless (sem banco). Roteado em /bff no ingress do tenant. ---- -apiVersion: apps/v1 -kind: Deployment -metadata: - name: servico-bff - namespace: plataforma-prod - labels: - app: servico-bff - athleticmap.io/contexto: bff -spec: - replicas: 1 - selector: { matchLabels: { app: servico-bff } } - template: - metadata: - labels: - app: servico-bff - athleticmap.io/contexto: bff - spec: - containers: - - name: servico-bff - # Tag alinhada com o tenant `escolinha`, que e o mais atual do - # cluster. A que estava aqui vinha do molde defasado deste - # repositorio, e nenhum tenant real a usava mais. - # - # O preco disso apareceu no primeiro deploy: com - # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e - # parou — a imagem foi construida antes de V002..V007 existirem, e a - # tabela `plano_financeiro` nem chegou a ser criada. "Imagem - # presente no no" nao e o mesmo que "imagem atual". - image: docker.io/library/servico-bff:1.98-barreira-de-plano - imagePullPolicy: Never - ports: [{ containerPort: 8083 }] - env: - - { name: ATM_CONFIG_URL, value: "http://servico-configuracao" } - - { name: ATM_CADASTRO_URL, value: "http://servico-cadastro" } - - { name: ATM_ORGANIZACAO_URL, value: "http://servico-organizacao" } - - { name: ATM_PLANEJAMENTO_URL, value: "http://servico-planejamento" } - - { name: ATM_CAMPEONATO_URL, value: "http://servico-campeonato" } - - { name: ATM_SAUDE_URL, value: "http://servico-saude" } - - { name: ATM_FINANCEIRO_URL, value: "http://servico-financeiro" } - - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } - - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.influxdigital.com.br/realms/athleticmap" } - - { name: ATM_TENANT, value: "plataforma" } - # Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta - # variavel o servico nasce Bronze e responde 403 no que e pago. - - { name: ATM_PLANO, value: "institucional" } - resources: - requests: { cpu: 100m, memory: 256Mi } - limits: { cpu: 500m, memory: 512Mi } - readinessProbe: - httpGet: { path: /bff/health, port: 8083 } - initialDelaySeconds: 20 - periodSeconds: 10 - failureThreshold: 30 - livenessProbe: - httpGet: { path: /actuator/health/liveness, port: 8083 } - initialDelaySeconds: 50 - periodSeconds: 20 - failureThreshold: 6 ---- -apiVersion: v1 -kind: Service -metadata: - name: servico-bff - namespace: plataforma-prod - labels: - app: servico-bff -spec: - selector: { app: servico-bff } - ports: [{ name: http, port: 80, targetPort: 8083 }] +# BFF (Backend-for-Frontend) — ponto unico da SPA; agrega configuracao + cadastro +# com token relay. Stateless (sem banco). Roteado em /bff no ingress do tenant. +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: servico-bff + namespace: plataforma-prod + labels: + app: servico-bff + athleticmap.io/contexto: bff +spec: + replicas: 1 + selector: { matchLabels: { app: servico-bff } } + template: + metadata: + labels: + app: servico-bff + athleticmap.io/contexto: bff + spec: + containers: + - name: servico-bff + # Tag alinhada com o tenant `escolinha`, que e o mais atual do + # cluster. A que estava aqui vinha do molde defasado deste + # repositorio, e nenhum tenant real a usava mais. + # + # O preco disso apareceu no primeiro deploy: com + # `servico-financeiro:1.0`, o Flyway aplicou UMA migracao (V001) e + # parou — a imagem foi construida antes de V002..V007 existirem, e a + # tabela `plano_financeiro` nem chegou a ser criada. "Imagem + # presente no no" nao e o mesmo que "imagem atual". + image: docker.io/library/servico-bff:1.98-barreira-de-plano + imagePullPolicy: Never + ports: [{ containerPort: 8083 }] + env: + - { name: ATM_CONFIG_URL, value: "http://servico-configuracao" } + - { name: ATM_CADASTRO_URL, value: "http://servico-cadastro" } + - { name: ATM_ORGANIZACAO_URL, value: "http://servico-organizacao" } + - { name: ATM_PLANEJAMENTO_URL, value: "http://servico-planejamento" } + - { name: ATM_CAMPEONATO_URL, value: "http://servico-campeonato" } + - { name: ATM_SAUDE_URL, value: "http://servico-saude" } + - { name: ATM_FINANCEIRO_URL, value: "http://servico-financeiro" } + - { name: ATM_JWK_SET_URI, value: "http://keycloak:8080/realms/athleticmap/protocol/openid-connect/certs" } + - { name: ATM_ISSUER, value: "https://auth-plataforma.athleticmap.com/realms/athleticmap" } + - { name: ATM_TENANT, value: "plataforma" } + # Plano do tenant, lido pela BarreiraDePlano (P3.7). Sem esta + # variavel o servico nasce Bronze e responde 403 no que e pago. + - { name: ATM_PLANO, value: "institucional" } + resources: + requests: { cpu: 100m, memory: 256Mi } + limits: { cpu: 500m, memory: 512Mi } + readinessProbe: + httpGet: { path: /bff/health, port: 8083 } + initialDelaySeconds: 20 + periodSeconds: 10 + failureThreshold: 30 + livenessProbe: + httpGet: { path: /actuator/health/liveness, port: 8083 } + initialDelaySeconds: 50 + periodSeconds: 20 + failureThreshold: 6 +--- +apiVersion: v1 +kind: Service +metadata: + name: servico-bff + namespace: plataforma-prod + labels: + app: servico-bff +spec: + selector: { app: servico-bff } + ports: [{ name: http, port: 80, targetPort: 8083 }] diff --git a/tenants/plataforma/95-frontend-spa.yaml b/tenants/plataforma/95-frontend-spa.yaml index c290faf..ec19857 100644 --- a/tenants/plataforma/95-frontend-spa.yaml +++ b/tenants/plataforma/95-frontend-spa.yaml @@ -33,7 +33,7 @@ spec: imagePullPolicy: Never ports: [{ containerPort: 80 }] env: - - { name: ATM_KC_URL, value: "https://auth-plataforma.athleticmap.influxdigital.com.br" } + - { name: ATM_KC_URL, value: "https://auth-plataforma.athleticmap.com" } - { name: ATM_REALM, value: "athleticmap" } - { name: ATM_CLIENT, value: "spa" } - { name: ATM_TENANT, value: "plataforma" }