- Change log level to INFO in application properties.
- Enable persistence in all modules. On cloud change the storage class from 'Delete' to 'Retain'. If you already have PV as 'Delete', you can edit the PV config and change it to 'Retain' (without having to change storage class)
- Make sure storage class allows expansion of storage.
- Review size of persistent volumes and update.
- Increase the number of nodes in the cluster according to expected load.
- Set up backup for Longhorn.
- Disable registration processor External Stage if not required.
- Set rate control (throttling) parameters for PreReg.
- Reprocessor cronjob frequency and other settings
- All cronjobs timings according to the country (check property files)
- Valid urls redirect in Keycloak - set specific urls.
- Keycloak Realm connection timeout settings - review all.
- Postgres production configuration
- Disable '111111' default OTP.
- Review idschema attribute names again name is Datashare policy and Auth policy for any partner (including IDA).
- Review attributes specified in
ida-zero-knowledge-unencrypted-credential-attributes - Review 1id-authentication-mapping.json` in config vis-a-vis attribute names in idschema
- Scripts to clean up processed packets in landing zone.
- On-prem K8s cluster production configuration as given here.
- Increase
replicaCountfor Clamav. - Kafka: disable option to delte a topic:
deleteTopicEnable: false