Feature/trygdeetaten reverse proxy #3933
Draft
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This pull request introduces a new proxy service called
trygdeetaten-nav-proxy, which acts as a bridge for actors from the trygdeetaten tenant to access thedolly-backendapplication in the nav.no tenant. The changes include all necessary application code, configuration, deployment manifests, build scripts, and documentation to set up, build, and deploy the new proxy.The most important changes are:
Application Implementation:
TrygdeetatenNavProxyApplicationStarter.java, which configures the Spring Boot application, sets up routing with authentication, and integrates with the necessary security and proxy libraries.Consumersconfiguration class to centralize external service (consumer) configuration.Configuration and Deployment:
application.ymlandapplication-local.yml) to define service endpoints, OAuth2 security setup, and consumer properties. [1] [2]config.yml) to define Kubernetes resources, Azure AD applications, access policies, resource limits, and ingress settings for the proxy.Build and Project Setup:
build.gradle,settings.gradle, wrapper scripts, and properties) to enable building, testing, and code analysis for the new proxy. [1] [2] [3] [4] [5] [6]Documentation: