Skip to content

Commit 032e9dd

Browse files
arcuri82arcuri82
committed
familie-ba-sak
1 parent 942173f commit 032e9dd

1,557 files changed

Lines changed: 168537 additions & 0 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎jdk_17_maven/cs/rest/familie-ba-sak/.deploy/ba-sak-proxy/Dockerfile‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
FROM nginx
2+
3+
COPY nginx.conf /etc/nginx/conf.d/default.conf

‎jdk_17_maven/cs/rest/familie-ba-sak/.deploy/ba-sak-proxy/nais.yaml‎

Lines changed: 85 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,85 @@
1+
apiVersion: "nais.io/v1alpha1"
2+
kind: "Application"
3+
metadata:
4+
name: familie-ba-sak
5+
namespace: teamfamilie
6+
labels:
7+
team: teamfamilie
8+
9+
spec:
10+
image: {{image}}
11+
port: 8089
12+
leaderElection: true
13+
liveness:
14+
path: /internal/health
15+
initialDelay: 20
16+
failureThreshold: 10
17+
readiness:
18+
path: /internal/health
19+
initialDelay: 20
20+
failureThreshold: 10
21+
prometheus:
22+
enabled: true
23+
path: /internal/prometheus
24+
replicas:
25+
min: 2
26+
max: 4
27+
cpuThresholdPercentage: 50
28+
resources:
29+
limits:
30+
memory: 64Mi
31+
cpu: 200m
32+
requests:
33+
memory: 32Mi
34+
cpu: 50m
35+
ingresses: # Optional. List of ingress URLs that will route HTTP traffic to the application.
36+
- https://familie-ba-sak.dev-fss-pub.nais.io # Deprecated - erstattes av dev.adeo.no
37+
- https://familie-ba-sak.dev.adeo.no
38+
secureLogs:
39+
enabled: true
40+
kafka:
41+
pool: nav-dev
42+
env:
43+
- name: SPRING_PROFILES_ACTIVE
44+
value: preprod
45+
- name: SRVUSER_BA_SAK_SECRET
46+
value: /var/run/secrets/srvfamilie-ba-sak/password
47+
azure:
48+
application:
49+
enabled: true
50+
allowAllUsers: false
51+
claims:
52+
groups:
53+
- id: "928636f4-fd0d-4149-978e-a6fb68bb19de" # 0000-GA-STDAPPS
54+
- id: "93a26831-9866-4410-927b-74ff51a9107c" # VEILEDER_ROLLE
55+
- id: "d21e00a4-969d-4b28-8782-dc818abfae65" # SAKSBEHANDLER_ROLLE
56+
- id: "9449c153-5a1e-44a7-84c6-7cc7a8867233" # BESLUTTER_ROLLE
57+
extra:
58+
- "NAVident"
59+
accessPolicy:
60+
inbound:
61+
rules:
62+
- application: familie-ba-sak-frontend
63+
- application: familie-ba-sak-frontend
64+
cluster: dev-gcp
65+
- application: familie-prosessering
66+
cluster: dev-gcp
67+
- application: familie-ba-skatteetaten-api
68+
cluster: dev-gcp
69+
- application: familie-ba-migrering
70+
cluster: dev-gcp
71+
- application: bidrag-grunnlag-feature
72+
namespace: bidrag
73+
cluster: dev-gcp
74+
- application: bidrag-grunnlag
75+
namespace: bidrag
76+
cluster: dev-gcp
77+
outbound:
78+
rules:
79+
- application: familie-brev
80+
cluster: dev-gcp
81+
- application: familie-integrasjoner
82+
- application: familie-ba-infotrygd-feed
83+
- application: familie-ba-infotrygd
84+
- application: familie-ef-sak
85+
cluster: dev-gcp

‎jdk_17_maven/cs/rest/familie-ba-sak/.deploy/ba-sak-proxy/nginx.conf‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
server {
2+
listen 8089;
3+
server_name ba-sak-proxy;
4+
5+
location / {
6+
proxy_pass https://familie-ba-sak.intern.dev.nav.no;
7+
}
8+
}

‎jdk_17_maven/cs/rest/familie-ba-sak/.deploy/nais/app-preprod.yaml‎

Lines changed: 141 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,141 @@
1+
apiVersion: "nais.io/v1alpha1"
2+
kind: "Application"
3+
metadata:
4+
name: familie-ba-sak
5+
namespace: teamfamilie
6+
labels:
7+
team: teamfamilie
8+
annotations:
9+
nginx.ingress.kubernetes.io/proxy-next-upstream-tries: '1'
10+
spec:
11+
envFrom:
12+
- secret: familie-ba-sak
13+
- secret: familie-ba-sak-unleash-api-token
14+
image: {{image}}
15+
port: 8089
16+
leaderElection: true
17+
liveness:
18+
path: /internal/health/liveness
19+
initialDelay: 30
20+
failureThreshold: 10
21+
readiness:
22+
path: /internal/health/readyness
23+
initialDelay: 30
24+
failureThreshold: 10
25+
prometheus:
26+
enabled: true
27+
path: /internal/prometheus
28+
gcp: # Database
29+
sqlInstances:
30+
- type: POSTGRES_15 # IF This is changed, all data will be lost. Read on nais.io how to upgrade
31+
tier: db-custom-1-3840
32+
name: familie-ba-sak
33+
autoBackupTime: "02:00"
34+
pointInTimeRecovery: true
35+
diskAutoresize: true
36+
highAvailability: false
37+
databases:
38+
- name: familie-ba-sak
39+
envVarPrefix: DB
40+
azure:
41+
application:
42+
enabled: true
43+
allowAllUsers: false
44+
claims:
45+
extra:
46+
- "NAVident"
47+
groups:
48+
- id: "928636f4-fd0d-4149-978e-a6fb68bb19de" # 0000-GA-STDAPPS
49+
- id: "93a26831-9866-4410-927b-74ff51a9107c" # VEILEDER_ROLLE
50+
- id: "d21e00a4-969d-4b28-8782-dc818abfae65" # SAKSBEHANDLER_ROLLE
51+
- id: "9449c153-5a1e-44a7-84c6-7cc7a8867233" # BESLUTTER_ROLLE
52+
- id: "c62e908a-cf20-4ad0-b7b3-3ff6ca4bf38b" # teamfamilie-forvaltning
53+
- id: "5ef775f2-61f8-4283-bf3d-8d03f428aa14" # 0000-GA-Strengt_Fortrolig_Adresse
54+
- id: "ea930b6b-9397-44d9-b9e6-f4cf527a632a" # 0000-GA-Fortrolig_Adresse
55+
replyURLs:
56+
- "https://familie-ba-sak.intern.dev.nav.no/swagger-ui/oauth2-redirect.html"
57+
- "http://localhost:8089/swagger-ui/oauth2-redirect.html"
58+
singlePageApplication: true
59+
accessPolicy:
60+
inbound:
61+
rules:
62+
- application: familie-ba-sak-frontend
63+
cluster: dev-gcp
64+
- application: familie-ba-sak-frontend-lokal
65+
cluster: dev-gcp
66+
- application: familie-baks-mottak
67+
cluster: dev-gcp
68+
- application: familie-prosessering
69+
cluster: dev-gcp
70+
- application: familie-ba-skatteetaten-api
71+
cluster: dev-gcp
72+
- application: familie-klage
73+
cluster: dev-gcp
74+
- application: familie-ba-statistikk
75+
cluster: dev-fss
76+
- application: bidrag-grunnlag-feature
77+
namespace: bidrag
78+
cluster: dev-gcp
79+
- application: bidrag-grunnlag
80+
namespace: bidrag
81+
cluster: dev-gcp
82+
- application: omsorgsopptjening-start-innlesning
83+
namespace: pensjonopptjening
84+
cluster: dev-gcp
85+
outbound:
86+
rules:
87+
- application: familie-brev
88+
cluster: dev-gcp
89+
- application: familie-integrasjoner
90+
cluster: dev-fss
91+
- application: familie-ba-infotrygd-feed
92+
cluster: dev-fss
93+
- application: familie-ba-infotrygd
94+
cluster: dev-fss
95+
- application: familie-ef-sak
96+
cluster: dev-gcp
97+
- application: familie-tilbake
98+
cluster: dev-gcp
99+
- application: familie-oppdrag
100+
cluster: dev-fss
101+
- application: familie-klage
102+
cluster: dev-gcp
103+
external:
104+
- host: xsrv1mh6.api.sanity.io
105+
- host: unleash.nais.io
106+
- host: pdl-api.dev-fss-pub.nais.io
107+
- host: familie-integrasjoner.dev-fss-pub.nais.io
108+
- host: familie-oppdrag.dev-fss-pub.nais.io
109+
- host: familie-ba-statistikk.dev-fss-pub.nais.io
110+
- host: familie-ba-infotrygd.dev-fss-pub.nais.io
111+
- host: familie-ba-infotrygd-feed.dev-fss-pub.nais.io
112+
- host: sdw-wsrest.ecb.europa.eu
113+
- host: sentry.gc.nav.no
114+
- host: data-api.ecb.europa.eu
115+
- host: teamfamilie-unleash-api.nav.cloud.nais.io
116+
replicas:
117+
min: 2
118+
max: 2
119+
resources:
120+
limits:
121+
memory: 1024Mi
122+
requests:
123+
memory: 1024Mi
124+
cpu: 500m
125+
ingresses:
126+
- https://familie-ba-sak.intern.dev.nav.no
127+
secureLogs:
128+
enabled: true
129+
env:
130+
- name: SPRING_PROFILES_ACTIVE
131+
value: preprod
132+
133+
- name: JAVA_OPTS
134+
value: "-XX:MinRAMPercentage=25.0 -XX:MaxRAMPercentage=75.0 -XX:+HeapDumpOnOutOfMemoryError"
135+
kafka:
136+
pool: nav-dev
137+
strategy:
138+
rollingUpdate:
139+
maxSurge: 100%
140+
maxUnavailable: 99%
141+

‎jdk_17_maven/cs/rest/familie-ba-sak/.deploy/nais/app-prod.yaml‎

Lines changed: 139 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,139 @@
1+
apiVersion: "nais.io/v1alpha1"
2+
kind: "Application"
3+
metadata:
4+
name: familie-ba-sak
5+
namespace: teamfamilie
6+
labels:
7+
team: teamfamilie
8+
annotations:
9+
nginx.ingress.kubernetes.io/proxy-next-upstream-tries: '1'
10+
nginx.ingress.kubernetes.io/proxy-read-timeout: "180"
11+
nginx.ingress.kubernetes.io/proxy-send-timeout: "180"
12+
13+
spec:
14+
envFrom:
15+
- secret: familie-ba-sak
16+
- secret: familie-ba-sak-unleash-api-token
17+
image: {{image}}
18+
port: 8089
19+
leaderElection: true
20+
liveness:
21+
path: /internal/health/liveness
22+
initialDelay: 30
23+
failureThreshold: 10
24+
readiness:
25+
path: /internal/health/readyness
26+
initialDelay: 30
27+
failureThreshold: 10
28+
prometheus:
29+
enabled: true
30+
path: /internal/prometheus
31+
gcp: # Database
32+
sqlInstances:
33+
- type: POSTGRES_15 # Read nais doc and https://github.com/navikt/familie/blob/master/doc/Google%20cloud/oppgrader-database.md on how to upgrade
34+
tier: db-custom-4-3840
35+
name: familie-ba-sak
36+
autoBackupTime: "02:00"
37+
diskAutoresize: true
38+
highAvailability: true
39+
databases:
40+
- name: familie-ba-sak
41+
envVarPrefix: DB
42+
azure:
43+
application:
44+
enabled: true
45+
allowAllUsers: false
46+
claims:
47+
extra:
48+
- "NAVident"
49+
groups:
50+
- id: "87190cf3-b278-457d-8ab7-1a5c55a9edd7" # Group_87190cf3-b278-457d-8ab7-1a5c55a9edd7 tilgang til prosessering
51+
- id: "199c2b39-e535-4ae8-ac59-8ccbee7991ae" # VEILEDER_ROLLE
52+
- id: "847e3d72-9dc1-41c3-80ff-f5d4acdd5d46" # SAKSBEHANDLER_ROLLE
53+
- id: "7a271f87-39fb-468b-a9ee-6cf3c070f548" # BESLUTTER_ROLLE
54+
- id: "3d718ae5-f25e-47a4-b4b3-084a97604c1d" # Forvalterrolle
55+
- id: "ad7b87a6-9180-467c-affc-20a566b0fec0" # 0000-GA-Strengt_Fortrolig_Adresse
56+
- id: "9ec6487d-f37a-4aad-a027-cd221c1ac32b" # 0000-GA-Fortrolig_Adresse
57+
replyURLs:
58+
- "https://familie-ba-sak.intern.nav.no/swagger-ui/oauth2-redirect.html"
59+
singlePageApplication: true
60+
accessPolicy:
61+
inbound:
62+
rules:
63+
- application: familie-ba-sak-frontend
64+
cluster: prod-gcp
65+
- application: familie-baks-mottak
66+
cluster: prod-gcp
67+
- application: familie-prosessering
68+
cluster: prod-gcp
69+
- application: familie-ba-skatteetaten-api
70+
cluster: prod-gcp
71+
- application: familie-klage
72+
cluster: prod-gcp
73+
- application: familie-ba-statistikk
74+
cluster: prod-fss
75+
- application: bidrag-grunnlag-feature
76+
namespace: bidrag
77+
cluster: prod-gcp
78+
- application: bidrag-grunnlag
79+
namespace: bidrag
80+
cluster: prod-gcp
81+
- application: omsorgsopptjening-start-innlesning
82+
namespace: pensjonopptjening
83+
cluster: prod-gcp
84+
outbound:
85+
rules:
86+
- application: familie-brev
87+
cluster: prod-gcp
88+
- application: familie-integrasjoner
89+
cluster: prod-fss
90+
- application: familie-ba-infotrygd-feed
91+
cluster: prod-fss
92+
- application: familie-ba-infotrygd
93+
cluster: prod-fss
94+
- application: familie-ef-sak
95+
cluster: prod-gcp
96+
- application: familie-tilbake
97+
cluster: prod-gcp
98+
- application: familie-oppdrag
99+
cluster: prod-fss
100+
- application: familie-klage
101+
cluster: prod-gcp
102+
external:
103+
- host: xsrv1mh6.api.sanity.io
104+
- host: unleash.nais.io
105+
- host: pdl-api.prod-fss-pub.nais.io
106+
- host: familie-integrasjoner.prod-fss-pub.nais.io
107+
- host: familie-oppdrag.prod-fss-pub.nais.io
108+
- host: familie-ba-statistikk.prod-fss-pub.nais.io
109+
- host: familie-ba-infotrygd.prod-fss-pub.nais.io
110+
- host: familie-ba-infotrygd-feed.prod-fss-pub.nais.io
111+
- host: sdw-wsrest.ecb.europa.eu
112+
- host: sentry.gc.nav.no
113+
- host: data-api.ecb.europa.eu
114+
- host: teamfamilie-unleash-api.nav.cloud.nais.io
115+
replicas:
116+
min: 3
117+
max: 5
118+
resources:
119+
limits:
120+
memory: 4096Mi
121+
requests:
122+
memory: 4096Mi
123+
cpu: 500m
124+
ingresses:
125+
- https://familie-ba-sak.intern.nav.no
126+
secureLogs:
127+
enabled: true
128+
env:
129+
- name: SPRING_PROFILES_ACTIVE
130+
value: prod
131+
132+
- name: JAVA_OPTS
133+
value: "-XX:MinRAMPercentage=25.0 -XX:MaxRAMPercentage=75.0 -XX:+HeapDumpOnOutOfMemoryError"
134+
kafka:
135+
pool: nav-prod
136+
strategy:
137+
rollingUpdate:
138+
maxSurge: 100%
139+
maxUnavailable: 99%

0 commit comments

Comments
 (0)