193 lines
4.3 KiB
JSON
193 lines
4.3 KiB
JSON
{
|
|
"environment": "$ENVIRONMENT",
|
|
"metadata": {
|
|
"repo": "navi-infra/deployment-portal-backend",
|
|
"language": "Java",
|
|
"dataSensitivity": "Internal",
|
|
"logCriticality": "AccessLogs",
|
|
"disasterRecovery":"true"
|
|
},
|
|
"deployment": {
|
|
"cluster": "$CLUSTER",
|
|
"serviceAccount": true,
|
|
"name": "deployment-portal-backend",
|
|
"instance": {
|
|
"count": 2,
|
|
"cpu": 1,
|
|
"memory": "2048Mi"
|
|
},
|
|
"environmentVariables": [
|
|
{
|
|
"name": "ENVIRONMENT",
|
|
"value": "$ENVIRONMENT"
|
|
},
|
|
{
|
|
"name": "DATASOURCE_URL",
|
|
"value": "$DATASOURCE_URL"
|
|
},
|
|
{
|
|
"name": "DATASOURCE_PASSWORD",
|
|
"value": "$DATASOURCE_PASSWORD"
|
|
},
|
|
{
|
|
"name": "DATASOURCE_USERNAME",
|
|
"value": "$DATASOURCE_USERNAME"
|
|
},
|
|
{
|
|
"name": "OKTA_CLIENT_ID",
|
|
"value": "$OKTA_CLIENT_ID"
|
|
},
|
|
{
|
|
"name": "OKTA_CLIENT_SECRET",
|
|
"value": "$OKTA_CLIENT_SECRET"
|
|
},
|
|
{
|
|
"name": "OKTA_URL",
|
|
"value": "$OKTA_URL"
|
|
},
|
|
{
|
|
"name": "ALLOWED_ORIGINS",
|
|
"value": "$ALLOWED_ORIGINS"
|
|
},
|
|
{
|
|
"name": "VAULT_ADDRESS",
|
|
"value": "$VAULT_ADDRESS"
|
|
},
|
|
{
|
|
"name": "VAULT_METATOKEN",
|
|
"value": "$VAULT_METATOKEN"
|
|
},
|
|
{
|
|
"name": "DDL_AUTO",
|
|
"value": "$DDL_AUTO"
|
|
},
|
|
{
|
|
"name": "KUBE_CONFIG",
|
|
"value": "$KUBE_CONFIG"
|
|
},
|
|
{
|
|
"name": "VAULT_AUTH_METHOD",
|
|
"value": "$VAULT_AUTH_METHOD"
|
|
},
|
|
{
|
|
"name": "VAULT_KUBE_PROVIDER",
|
|
"value": "$VAULT_KUBE_PROVIDER"
|
|
},
|
|
{
|
|
"name": "VAULT_KUBE_ROLE",
|
|
"value": "$VAULT_KUBE_ROLE"
|
|
},
|
|
{
|
|
"name": "VAULT_KUBE_TOKEN_CRON",
|
|
"value": "$VAULT_KUBE_TOKEN_CRON"
|
|
},
|
|
{
|
|
"name": "JVM_OPTS",
|
|
"value": "-Djdk.tls.client.protocols=TLSv1.2 -XX:+UseContainerSupport -XX:MaxRAMPercentage=60.0"
|
|
},
|
|
{
|
|
"name": "PORTAL_VERTICAL",
|
|
"value": "$PORTAL_VERTICAL"
|
|
},
|
|
{
|
|
"name": "SLACK_WEBHOOK_URL",
|
|
"value": "$SLACK_WEBHOOK_URL"
|
|
},
|
|
{
|
|
"name": "OKTA_GROUP_MAPPING",
|
|
"value": "$OKTA_GROUP_MAPPING"
|
|
},
|
|
{
|
|
"name": "DOCKER_REGISTRY_NAMESPACE",
|
|
"value": "$DOCKER_REGISTRY_NAMESPACE"
|
|
},
|
|
{
|
|
"name": "JWT_SECRET_KEY",
|
|
"value": "$JWT_SECRET_KEY"
|
|
},
|
|
{
|
|
"name": "TEAMS_LIST_VAULT",
|
|
"value": "$TEAMS_LIST_VAULT"
|
|
}
|
|
],
|
|
"namespace": "$NAMESPACE",
|
|
"exposedPorts": [
|
|
{
|
|
"name": "metrics",
|
|
"port": 4001
|
|
}
|
|
],
|
|
"loadBalancers": [
|
|
{
|
|
"type": "$LB_TYPE",
|
|
"groupName": "shared-infra-alb",
|
|
"accessPolicies": [
|
|
$ACCESS_POLICIES
|
|
],
|
|
"endpoint": "$SERVICE_ENDPOINT"
|
|
}
|
|
],
|
|
"allowEgress": [],
|
|
"healthChecks": {
|
|
"readinessCheck": {
|
|
"type": "http",
|
|
"port": "serviceport",
|
|
"path": "/health",
|
|
"successThreshold": 1,
|
|
"initialDelaySeconds": 90,
|
|
"periodSeconds": 30,
|
|
"failureThreshold": 3,
|
|
"httpHeaders": []
|
|
},
|
|
"livenessCheck": {
|
|
"type": "http",
|
|
"port": "metrics",
|
|
"path": "/actuator/health",
|
|
"successThreshold": 1,
|
|
"initialDelaySeconds": 90,
|
|
"periodSeconds": 30,
|
|
"failureThreshold": 3,
|
|
"httpHeaders": []
|
|
}
|
|
}
|
|
},
|
|
"extraResources": {
|
|
"environment": "$ENVIRONMENT",
|
|
"workspace": "$WORKSPACE",
|
|
"aws_access": {
|
|
"roleName": "$ROLE_NAME",
|
|
"policies": [
|
|
{
|
|
"resource": "*",
|
|
"actions": [
|
|
"sts:*"
|
|
]
|
|
},
|
|
{
|
|
"Sid": "",
|
|
"Effect": "Allow",
|
|
"Action": [
|
|
"ecr:GetDownloadUrlForLayer",
|
|
"ecr:GetAuthorizationToken",
|
|
"ecr:BatchGetImage"
|
|
],
|
|
"Resource": "*"
|
|
},
|
|
{
|
|
"Sid": "",
|
|
"Effect": "Allow",
|
|
"Action": "ecr:*",
|
|
"Resource": "arn:aws:ecr:*:*:repository/sandbox/*"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"team": {
|
|
"name": "Infra"
|
|
},
|
|
"labels": {
|
|
"micrometer-prometheus": "enabled"
|
|
},
|
|
"version": "v1"
|
|
}
|