app-prod.teamfamilie.yaml

apiVersion: "nais.io/v1alpha1"
kind: "Application"
metadata:
  name: familie-integrasjoner
  namespace: teamfamilie
  labels:
    team: teamfamilie
  annotations:
    nginx.ingress.kubernetes.io/proxy-body-size: "600M"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "300"

spec:
  image: {{ image }}
  port: 8085
  liveness:
    path: /internal/status/isAlive
    initialDelay: 30
    timeout: 5
    failureThreshold: 10
  readiness:
    path: /internal/status/isAlive
    initialDelay: 30
    timeout: 5
    failureThreshold: 10
  vault:
    enabled: true
  secureLogs:
    enabled: true
  prometheus:
    enabled: true
    path: /internal/prometheus
  webproxy: true
  azure:
    application:
      enabled: true
      claims:
        groups:
          - id: "e750ceb5-b70b-4d94-b4fa-9d22467b786b"  # 0000-GA-Egne_ansatte
          - id: "9ec6487d-f37a-4aad-a027-cd221c1ac32b"  # 0000-GA-Fortrolig_Adresse
          - id: "ad7b87a6-9180-467c-affc-20a566b0fec0"  # 0000-GA-Strengt_Fortrolig_Adresse
          - id: "199c2b39-e535-4ae8-ac59-8ccbee7991ae"  # 0000-GA-Barnetrygd-Veileder
          - id: "847e3d72-9dc1-41c3-80ff-f5d4acdd5d46"  # 0000-GA-Barnetrygd
          - id: "7a271f87-39fb-468b-a9ee-6cf3c070f548"  # 0000-GA-Barnetrygd-Beslutter
          - id: "31778fd8-3b71-4867-8db6-a81235fbe001"  # 0000-GA-Enslig-Forsorger-Veileder
          - id: "6406aba2-b930-41d3-a85b-dd13731bc974"  # 0000-GA-Enslig-Forsorger-Saksbehandler
          - id: "5fcc0e1d-a4c2-49f0-93dc-27c9fea41e54"  # 0000-GA-Enslig-Forsorger-Beslutter
          - id: "e40090eb-c2fb-400e-b412-e9084019a73b"  # 0000-GA-Kontantstotte
          - id: "54cd86b8-2e23-48b2-8852-b05b5827bb0f"  # 0000-GA-Kontantstotte-Veileder
        extra:
          - "NAVident"

  accessPolicy:
    inbound:
      rules:
        - application: familie-ks-sak
          cluster: prod-gcp
        - application: familie-ks-sak
          cluster: prod-fss
        - application: familie-ba-sak
          cluster: prod-gcp
        - application: familie-tilbake
          cluster: prod-gcp
        - application: tilbakekreving-backend
          namespace: tilbake
          cluster: prod-gcp
        - application: familie-ks-mottak
        - application: familie-baks-mottak
          cluster: prod-gcp
        - application: familie-ef-mottak
        - application: familie-ef-mottak
          cluster: prod-gcp
        - application: familie-ef-sak
          cluster: prod-gcp
        - application: familie-klage
          cluster: prod-gcp
        - application: familie-ef-iverksett
          cluster: prod-gcp
        - application: familie-ef-personhendelse
          cluster: prod-gcp
        - application: familie-ef-proxy
  replicas:
    min: 2
    max: 2
  resources:
    limits:
      memory: 4Gi
    requests:
      memory: 1Gi
      cpu: 200m
  ingresses: # Optional. List of ingress URLs that will route HTTP traffic to the application.
    - https://familie-integrasjoner.prod-fss-pub.nais.io
    - https://familie-integrasjoner.nais.adeo.no
    - https://familie-integrasjoner.intern.nav.no

  observability:
    autoInstrumentation:
      enabled: true
      runtime: java
      destinations:
        - id: "grafana-lgtm"
        - id: "elastic-apm"
  env:
    - name: SPRING_PROFILES_ACTIVE
      value: prod