naiserator.yml

apiVersion: "nais.io/v1alpha1"
kind: "Application"
metadata:
  name: pam-stihibi
  namespace: teampam
  labels:
    team: teampam
spec:
  image: {{ image }}
  port: 8080
  liveness:
    path: /internal/isAlive
    initialDelay: 20
  readiness:
    path: /internal/isReady
    initialDelay: 20
  replicas:
    min: 2
    max: 3
    cpuThresholdPercentage: 50
  resources:
    limits:
      cpu: 2000m
      memory: 2048Mi
    requests:
      cpu: 1000m
      memory: 1024Mi
  vault:
    enabled: false
  webproxy: false
  prometheus:
    enabled: true
    path: /prometheus
  observability:
    logging:
      destinations:
        - id: loki
        - id: elastic
  kafka:
    pool: {{ kafka_pool }}
  accessPolicy:
    inbound:
      rules:
        - application: pam-ad-api
        - application: pam-ad
  ingresses:
  {{#each ingress as |url|}}
     - {{url}}
  {{/each}}
  filesFrom:
    - secret: pam-stihibi-credentials
      mountPath: /var/run/secrets/credentials/pam-stihibi
  env:
    - name: ADLISTENER_GROUP_ID
      value: "{{ adlistener_group_id }}"
    - name: ADLISTENER_TOPIC
      value: "{{ adlistener_topic }}"
    - name: ADLISTENER_ENABLED
      value: "{{ adlistener_enabled }}"
    - name: GOOGLE_APPLICATION_CREDENTIALS
      value: "/var/run/secrets/credentials/pam-stihibi/secret"
    - name: GOOGLE_CLOUD_PROJECT
      value: "{{ google_cloud_project }}"