api-service.yml

apiVersion: serving.knative.dev/v1
kind: Service
metadata:
  name: veraid-authority
spec:
  template:
    metadata:
      annotations:
        autoscaling.knative.dev/min-scale: "1"
    spec:
      containers:
        - name: api
          image: dev.local/veraid-authority
          args: [api]
          env:
            - name: AUTHORITY_VERSION
              value: "1.0.0dev1"
            - name: AUTHORITY_SUPERADMIN
              value: admin@veraid.example

            - name: MONGODB_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: credentials
                  key: mongodb_password

            - name: OAUTH2_JWKS_URL
              value: http://mock-authz-server.default/default/jwks
            - name: OAUTH2_TOKEN_AUDIENCE
              value: default
            - name: OAUTH2_TOKEN_ISSUER_REGEX
              value: ^http://[^/]+/default$

            # Mock AWS KMS (used by WebCrypto KMS)
            - name: KMS_ADAPTER
              value: AWS
            - name: AWS_ACCESS_KEY_ID
              valueFrom:
                configMapKeyRef:
                  name: mock-aws-kms
                  key: access_key_id
            - name: AWS_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: credentials
                  key: aws_kms_secret_access_key
            - name: AWS_KMS_ENDPOINT
              valueFrom:
                configMapKeyRef:
                  name: mock-aws-kms
                  key: endpoint
            - name: AWS_KMS_REGION
              value: eu-west-2
          envFrom:
            - configMapRef:
                name: mongodb
          livenessProbe:
            httpGet:
              path: /
              port: 8080
            periodSeconds: 5
            failureThreshold: 2
            timeoutSeconds: 3
            initialDelaySeconds: 10
          readinessProbe:
            httpGet:
              path: /
              port: 8080
            periodSeconds: 5
            failureThreshold: 2
            timeoutSeconds: 3