#102 Kafka topics konfigurasjon for prod

.github/workflows/kafka-dev.yaml

@@ -14,13 +14,15 @@ jobs:
   deploy-to-dev:
     name: Deploy to dev-gcp
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
       - name: Deploy topics to dev
-        uses: nais/deploy/actions/deploy@v1
+        uses: nais/deploy/actions/deploy@v2
         env:
-          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           CLUSTER: dev-gcp
-          VAR: kafka-pool=nav-dev
           RESOURCE: ${{ env.TOPIC_FILE }}

.github/workflows/kafka-prod.yaml

@@ -0,0 +1,23 @@
+name: Deploy kafka topics to PROD
+on:
+  workflow_dispatch:
+
+env:
+  TOPIC_FILE: .nais/kafka/kafka-prod.yaml
+
+jobs:
+  deploy-to-prod:
+    name: Deploy to prod-gcp
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Deploy topics to PROD
+        uses: nais/deploy/actions/deploy@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CLUSTER: prod-gcp
+          RESOURCE: ${{ env.TOPIC_FILE }}

.nais/kafka/kafka-dev.yaml

@@ -3,10 +3,10 @@ kind: Topic
 metadata:
   labels:
     team: team-emottak
-  name: ebxml-payload-outgoing
+  name: smtp.out.ebxml.signal
   namespace: team-emottak
 spec:
-  pool: {{kafka-pool}}
+  pool: nav-dev
   config:
     cleanupPolicy: delete
     maxMessageBytes: 1048588
@@ -17,9 +17,15 @@ spec:
     retentionHours: 168
     segmentHours: 168
   acl:
-    - access: read
+    - access: write
       application: ebxml-processor
       team: team-emottak
+    - access: read
+      application: smtp-transport
+      team: team-emottak
+    - access: read
+      application: emottak-kafka-manager
+      team: team-emottak
 
 ---
 
@@ -28,10 +34,10 @@ kind: Topic
 metadata:
   labels:
     team: team-emottak
-  name: ebxml-payload-deenveloped
+  name: smtp.out.ebxml.payload
   namespace: team-emottak
 spec:
-  pool: {{kafka-pool}}
+  pool: nav-dev
   config:
     cleanupPolicy: delete
     maxMessageBytes: 1048588
@@ -44,4 +50,10 @@ spec:
   acl:
     - access: write
       application: ebxml-processor
-      team: team-emottak
+      team: team-emottak
+    - access: read
+      application: smtp-transport
+      team: team-emottak
+    - access: read
+      application: emottak-kafka-manager
+      team: team-emottak

.nais/kafka/kafka-prod.yaml

@@ -0,0 +1,59 @@
+apiVersion: kafka.nais.io/v1
+kind: Topic
+metadata:
+  labels:
+    team: team-emottak
+  name: smtp.out.ebxml.signal
+  namespace: team-emottak
+spec:
+  pool: nav-prod
+  config:
+    cleanupPolicy: delete
+    maxMessageBytes: 1048588
+    minimumInSyncReplicas: 2
+    partitions: 1
+    replication: 3
+    retentionBytes: -1
+    retentionHours: 4380
+    segmentHours: 168
+  acl:
+    - access: write
+      application: ebxml-processor
+      team: team-emottak
+    - access: read
+      application: smtp-transport
+      team: team-emottak
+    - access: read
+      application: emottak-kafka-manager
+      team: team-emottak
+
+---
+
+apiVersion: kafka.nais.io/v1
+kind: Topic
+metadata:
+  labels:
+    team: team-emottak
+  name: smtp.out.ebxml.payload
+  namespace: team-emottak
+spec:
+  pool: nav-prod
+  config:
+    cleanupPolicy: delete
+    maxMessageBytes: 1048588
+    minimumInSyncReplicas: 2
+    partitions: 1
+    replication: 3
+    retentionBytes: -1
+    retentionHours: 4380
+    segmentHours: 168
+  acl:
+    - access: write
+      application: ebxml-processor
+      team: team-emottak
+    - access: read
+      application: smtp-transport
+      team: team-emottak
+    - access: read
+      application: emottak-kafka-manager
+      team: team-emottak