Skip to content

Commit 8cec09f

Browse files
committed
familie-tilbake
1 parent c99d97a commit 8cec09f

696 files changed

Lines changed: 62158 additions & 0 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
---
2+
apiVersion: nais.io/v1
3+
kind: AzureAdApplication
4+
metadata:
5+
name: familie-tilbake-lokal
6+
namespace: teamfamilie
7+
labels:
8+
team: teamfamilie
9+
spec:
10+
claims:
11+
extra:
12+
- "NAVident"
13+
groups:
14+
- id: d21e00a4-969d-4b28-8782-dc818abfae65 # 0000-GA-Barnetrygd
15+
- id: 9449c153-5a1e-44a7-84c6-7cc7a8867233 # 0000-GA-Barnetrygd-Beslutter
16+
- id: 93a26831-9866-4410-927b-74ff51a9107c # 0000-GA-Barnetrygd-Veileder
17+
- id: ee5e0b5e-454c-4612-b931-1fe363df7c2c # 0000-GA-Enslig-Forsorger-Saksbehandler
18+
- id: 01166863-22f1-4e16-9785-d7a05a22df74 # 0000-GA-Enslig-Forsorger-Beslutter
19+
- id: 19dcbfde-4cdb-4c64-a1ea-ac9802b03339 # 0000-GA-Enslig-Forsorger-Veileder
20+
- id: c62e908a-cf20-4ad0-b7b3-3ff6ca4bf38b # teamfamilie-forvaltning
21+
- id: 928636f4-fd0d-4149-978e-a6fb68bb19de # 0000-GA-STDAPPS - tilgang til prosessering
22+
preAuthorizedApplications:
23+
- application: familie-tilbake-frontend-lokal
24+
cluster: dev-gcp
25+
namespace: teamfamilie
26+
- application: familie-ba-sak
27+
cluster: dev-gcp
28+
- application: familie-ks-sak
29+
cluster: dev-gcp
30+
- application: familie-ba-sak-lokal
31+
cluster: dev-gcp
32+
namespace: teamfamilie
33+
- application: familie-ef-sak-lokal
34+
cluster: dev-gcp
35+
namespace: teamfamilie
36+
- application: familie-ks-sak-lokal
37+
cluster: dev-gcp
38+
namespace: teamfamilie
39+
- application: familie-ef-iverksett-lokal
40+
cluster: dev-gcp
41+
namespace: teamfamilie
42+
- application: ida
43+
cluster: prod-fss
44+
namespace: traktor
45+
replyUrls:
46+
- url: "http://localhost:8030/swagger-ui/oauth2-redirect.html"
47+
tenant: trygdeetaten.no
48+
secretName: azuread-familie-tilbake-lokal
49+
singlePageApplication: true
50+
51+
# secret kan hentes fra cluster med "kubectl -n teamfamilie get secret azuread-familie-tilbake-lokal -o json | jq '.data | map_values(@base64d)'"
Lines changed: 119 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,119 @@
1+
apiVersion: "nais.io/v1alpha1"
2+
kind: "Application"
3+
metadata:
4+
name: familie-tilbake
5+
namespace: teamfamilie
6+
labels:
7+
team: teamfamilie
8+
9+
spec:
10+
envFrom:
11+
- secret: familie-tilbake
12+
- secret: familie-tilbake-unleash-api-token
13+
image: {{ image }}
14+
port: 8030
15+
leaderElection: true
16+
liveness:
17+
path: /internal/status/isAlive
18+
initialDelay: 30
19+
failureThreshold: 10
20+
readiness:
21+
path: /internal/status/isAlive
22+
initialDelay: 30
23+
failureThreshold: 10
24+
prometheus:
25+
enabled: true
26+
path: /internal/prometheus
27+
vault:
28+
enabled: false
29+
gcp: # Database
30+
sqlInstances:
31+
- type: POSTGRES_14
32+
tier: db-custom-1-3840
33+
name: familie-tilbake
34+
autoBackupTime: "03:00"
35+
databases:
36+
- name: familie-tilbake
37+
envVarPrefix: DB
38+
azure:
39+
application:
40+
claims:
41+
extra:
42+
- "NAVident"
43+
groups:
44+
- id: d21e00a4-969d-4b28-8782-dc818abfae65 # 0000-GA-Barnetrygd
45+
- id: 9449c153-5a1e-44a7-84c6-7cc7a8867233 # 0000-GA-Barnetrygd-Beslutter
46+
- id: 93a26831-9866-4410-927b-74ff51a9107c # 0000-GA-Barnetrygd-Veileder
47+
- id: ee5e0b5e-454c-4612-b931-1fe363df7c2c # 0000-GA-Enslig-Forsorger-Saksbehandler
48+
- id: 01166863-22f1-4e16-9785-d7a05a22df74 # 0000-GA-Enslig-Forsorger-Beslutter
49+
- id: 19dcbfde-4cdb-4c64-a1ea-ac9802b03339 # 0000-GA-Enslig-Forsorger-Veileder
50+
- id: 71f503a2-c28f-4394-a05a-8da263ceca4a # 0000-GA-Kontantstøtte-Veilder
51+
- id: c7e0b108-7ae6-432c-9ab4-946174c240c0 # 0000-GA-Kontantstøtte
52+
- id: 52fe1bef-224f-49df-a40a-29f92d4520f8 # 0000-GA-Kontantstøtte-Beslutter
53+
- id: c62e908a-cf20-4ad0-b7b3-3ff6ca4bf38b # teamfamilie-forvaltning
54+
- id: 928636f4-fd0d-4149-978e-a6fb68bb19de # 0000-GA-STDAPPS - tilgang til prosessering
55+
enabled: true
56+
tenant: trygdeetaten.no
57+
replyURLs:
58+
- "https://familie-tilbake.intern.dev.nav.no/swagger-ui/oauth2-redirect.html"
59+
singlePageApplication: true
60+
accessPolicy:
61+
inbound:
62+
rules:
63+
- application: familie-ba-sak
64+
namespace: teamfamilie
65+
cluster: dev-gcp
66+
- application: familie-ks-sak
67+
namespace: teamfamilie
68+
cluster: dev-gcp
69+
- application: familie-ef-sak
70+
namespace: teamfamilie
71+
cluster: dev-gcp
72+
- application: familie-ef-iverksett
73+
namespace: teamfamilie
74+
cluster: dev-gcp
75+
- application: familie-ks-sak
76+
namespace: teamfamilie
77+
cluster: dev-gcp
78+
- application: familie-tilbake-frontend
79+
namespace: teamfamilie
80+
cluster: dev-gcp
81+
- application: ida
82+
namespace: traktor
83+
cluster: prod-fss
84+
- application: familie-prosessering
85+
namespace: teamfamilie
86+
cluster: dev-gcp
87+
- application: familie-prosessering-lokal
88+
namespace: teamfamilie
89+
cluster: dev-gcp
90+
outbound:
91+
rules:
92+
- application: familie-historikk
93+
external:
94+
- host: teamfamilie-unleash-api.nav.cloud.nais.io
95+
- host: familie-integrasjoner.dev-fss-pub.nais.io
96+
- host: pdl-api.dev-fss-pub.nais.io
97+
- host: b27apvl220.preprod.local
98+
ports:
99+
- name: mq
100+
port: 1413
101+
protocol: TCP
102+
replicas:
103+
min: 2
104+
max: 4
105+
resources:
106+
limits:
107+
memory: 1024Mi
108+
requests:
109+
memory: 512Mi
110+
cpu: 500m
111+
ingresses:
112+
- https://familie-tilbake.intern.dev.nav.no
113+
secureLogs:
114+
enabled: true
115+
env:
116+
- name: SPRING_PROFILES_ACTIVE
117+
value: dev
118+
kafka:
119+
pool: nav-dev
Lines changed: 116 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,116 @@
1+
apiVersion: "nais.io/v1alpha1"
2+
kind: "Application"
3+
metadata:
4+
name: familie-tilbake
5+
namespace: teamfamilie
6+
labels:
7+
team: teamfamilie
8+
9+
spec:
10+
image: {{ image }}
11+
port: 8030
12+
leaderElection: true
13+
liveness:
14+
path: /internal/status/isAlive
15+
initialDelay: 30
16+
failureThreshold: 10
17+
readiness:
18+
path: /internal/status/isAlive
19+
initialDelay: 30
20+
failureThreshold: 10
21+
prometheus:
22+
enabled: true
23+
path: /internal/prometheus
24+
vault:
25+
enabled: false
26+
gcp: # Database
27+
sqlInstances:
28+
- type: POSTGRES_14
29+
tier: db-custom-1-3840
30+
name: familie-tilbake
31+
diskAutoresize: true
32+
highAvailability: true
33+
autoBackupTime: "03:00"
34+
databases:
35+
- name: familie-tilbake
36+
envVarPrefix: DB
37+
azure:
38+
application:
39+
claims:
40+
extra:
41+
- "NAVident"
42+
groups:
43+
- id: 847e3d72-9dc1-41c3-80ff-f5d4acdd5d46 # 0000-GA-Barnetrygd
44+
- id: 7a271f87-39fb-468b-a9ee-6cf3c070f548 # 0000-GA-Barnetrygd-Beslutter
45+
- id: 199c2b39-e535-4ae8-ac59-8ccbee7991ae # 0000-GA-Barnetrygd-Veileder
46+
- id: e40090eb-c2fb-400e-b412-e9084019a73b # 0000-GA-Kontantstøtte
47+
- id: 54cd86b8-2e23-48b2-8852-b05b5827bb0f # 0000-GA-Kontantstøtte-Veileder
48+
- id: 3d718ae5-f25e-47a4-b4b3-084a97604c1d # teamfamilie-forvaltning
49+
- id: 87190cf3-b278-457d-8ab7-1a5c55a9edd7 # Group_87190cf3-b278-457d-8ab7-1a5c55a9edd7 tilgang til prosessering
50+
- id: 31778fd8-3b71-4867-8db6-a81235fbe001 # 0000-GA-Enslig-Forsorger-Veileder
51+
- id: 6406aba2-b930-41d3-a85b-dd13731bc974 # 0000-GA-Enslig-Forsorger-Saksbehandler
52+
- id: 5fcc0e1d-a4c2-49f0-93dc-27c9fea41e54 # 0000-GA-Enslig-Forsorger-Beslutter
53+
- id: 54cd86b8-2e23-48b2-8852-b05b5827bb0f # 0000-GA-Kontantstøtte-Veileder
54+
- id: e40090eb-c2fb-400e-b412-e9084019a73b # 0000-GA-Kontantstøtte
55+
- id: 4e7f23d9-5db1-45c0-acec-89c86a9ec678 # 0000-GA-Kontantstøtte-Beslutter
56+
enabled: true
57+
replyURLs:
58+
- "https://familie-tilbake.intern.nav.no/swagger-ui/oauth2-redirect.html"
59+
singlePageApplication: true
60+
accessPolicy:
61+
inbound:
62+
rules:
63+
- application: familie-ba-sak
64+
namespace: teamfamilie
65+
cluster: prod-gcp
66+
- application: familie-ks-sak
67+
namespace: teamfamilie
68+
cluster: prod-gcp
69+
- application: familie-ef-sak
70+
namespace: teamfamilie
71+
cluster: prod-gcp
72+
- application: familie-ef-iverksett
73+
namespace: teamfamilie
74+
cluster: prod-gcp
75+
- application: familie-ks-sak
76+
namespace: teamfamilie
77+
cluster: prod-gcp
78+
- application: familie-tilbake-frontend
79+
namespace: teamfamilie
80+
cluster: prod-gcp
81+
- application: familie-prosessering
82+
namespace: teamfamilie
83+
cluster: prod-gcp
84+
outbound:
85+
rules:
86+
- application: familie-historikk
87+
external:
88+
- host: teamfamilie-unleash-api.nav.cloud.nais.io
89+
- host: familie-integrasjoner.prod-fss-pub.nais.io
90+
- host: pdl-api.prod-fss-pub.nais.io
91+
- host: mpls02.adeo.no
92+
ports:
93+
- name: mq
94+
port: 1414
95+
protocol: TCP
96+
replicas:
97+
min: 2
98+
max: 4
99+
resources:
100+
limits:
101+
memory: 1024Mi
102+
requests:
103+
memory: 512Mi
104+
cpu: 500m
105+
secureLogs:
106+
enabled: true
107+
ingresses: # Optional. List of ingress URLs that will route HTTP traffic to the application.
108+
- https://familie-tilbake.intern.nav.no
109+
env:
110+
- name: SPRING_PROFILES_ACTIVE
111+
value: prod
112+
envFrom:
113+
- secret: familie-tilbake
114+
- secret: familie-tilbake-unleash-api-token
115+
kafka:
116+
pool: nav-prod
Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
apiVersion: kafka.nais.io/v1
2+
kind: Topic
3+
metadata:
4+
name: aapen-tbk-datavarehus-sak-topic
5+
namespace: teamfamilie
6+
labels:
7+
team: teamfamilie
8+
spec:
9+
pool: nav-dev
10+
config: # optional; all fields are optional too; defaults shown
11+
cleanupPolicy: delete # delete, compact
12+
minimumInSyncReplicas: 2
13+
partitions: 1
14+
replication: 3 # see min/max requirements
15+
retentionBytes: -1 # -1 means unlimited
16+
retentionHours: -1 # -1 means unlimited
17+
acl:
18+
- team: teamfamilie
19+
application: familie-tilbake #owner
20+
access: readwrite # readwrite
21+
- team: ptsak
22+
application: pt-sak-famtilbake-dev
23+
access: read
24+
- team: ptsak
25+
application: pt-sak-famtilbake-preprod
26+
access: read
27+
- team: teamfamilie
28+
application: familie-tilbake-kafka-manager #forvalter
29+
access: read # read
Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
apiVersion: kafka.nais.io/v1
2+
kind: Topic
3+
metadata:
4+
name: aapen-tbk-datavarehus-vedtak-topic
5+
namespace: teamfamilie
6+
labels:
7+
team: teamfamilie
8+
spec:
9+
pool: nav-dev
10+
config: # optional; all fields are optional too; defaults shown
11+
cleanupPolicy: delete # delete, compact
12+
minimumInSyncReplicas: 2
13+
partitions: 1
14+
replication: 3 # see min/max requirements
15+
retentionBytes: -1 # -1 means unlimited
16+
retentionHours: -1 # -1 means unlimited
17+
acl:
18+
- team: teamfamilie
19+
application: familie-tilbake #owner
20+
access: readwrite # readwrite
21+
- team: ptsak
22+
application: pt-sak-famtilbake-dev
23+
access: read
24+
- team: ptsak
25+
application: pt-sak-famtilbake-preprod
26+
access: read
27+
- team: teamfamilie
28+
application: familie-tilbake-kafka-manager #forvalter
29+
access: read # read
Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
apiVersion: kafka.nais.io/v1
2+
kind: Topic
3+
metadata:
4+
name: privat-tbk-hentfagsystemsbehandling-request-topic
5+
namespace: teamfamilie
6+
labels:
7+
team: teamfamilie
8+
spec:
9+
pool: nav-dev
10+
config: # optional; all fields are optional too; defaults shown
11+
cleanupPolicy: delete # delete, compact
12+
minimumInSyncReplicas: 2
13+
partitions: 1
14+
replication: 3 # see min/max requirements
15+
retentionBytes: -1 # -1 means unlimited
16+
retentionHours: 72 # -1 means unlimited
17+
acl:
18+
- team: teamfamilie
19+
application: familie-tilbake #owner
20+
access: readwrite # readwrite
21+
- team: teamfamilie
22+
application: familie-ba-sak #owner
23+
access: read # readwrite
24+
- team: teamfamilie
25+
application: familie-ks-sak
26+
access: read # read
27+
- team: teamfamilie
28+
application: familie-ef-iverksett #owner
29+
access: read # readwrite
30+
- team: teamfamilie
31+
application: familie-tilbake-kafka-manager #forvalter
32+
access: read # read

0 commit comments

Comments
 (0)