deployment-prod.yaml

apiVersion: v1
kind: ConfigMap
metadata:
  name: walletkit-config
data:
  issuer-config.json: |
    {
      "issuerUiUrl": "https://issuer.walletkit.walt.id",
      "issuerApiUrl": "https://issuer.walletkit.walt.id/issuer-api/default",
      "issuerClientName": "walt.id Issuer Portal",
      "wallets": {
        "walt.id": {
          "id": "walt.id",
          "url": "https://wallet.walt.id",
          "presentPath": "api/siop/initiatePresentation/",
          "receivePath" : "api/siop/initiateIssuance/",
          "description": "walt.id web wallet"
        }
      }
    }
  verifier-config.json: |
    {
      "verifierUiUrl": "https://verifier.walletkit.walt.id",
      "verifierApiUrl": "https://verifier.walletkit.walt.id/verifier-api/default",
      "wallets": {
        "walt.id": {
          "id": "walt.id",
          "url": "https://wallet.walt.id",
          "presentPath": "api/siop/initiatePresentation/",
          "receivePath" : "api/siop/initiateIssuance/",
          "description": "walt.id web wallet"
        }
      }
    }
  wallet-config.json: |
    {
      "walletUiUrl": "https://wallet.walt.id",
      "walletApiUrl": "https://wallet.walt.id/api",
      "issuers": {
        "walt.id": {
          "id": "walt.id",
          "url": "https://wallet.walt.id/issuer-api/default/oidc",
          "description": "walt.id Issuer Portal"
        },
        "yes.com": {
          "id": "yes.com",
          "url": "https://demo.sandbox.yes.com/essif/issuer/c2id",
          "description": "yes.com Bank ID issuer"
        }
      }
    }
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: walletkit-data-volume-claim
  namespace: default
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 10Gi
---
kind: Deployment
apiVersion: apps/v1
metadata:
  name: walletkit
spec:
  replicas: 1
  selector:
    matchLabels:
      app: walletkit
  template:
    metadata:
      labels:
        app: walletkit
      annotations:
        deployment/id: "_DEFAULT_DEPLOYMENT_"
    spec:
      containers:
        - name: walletkit
          image: waltid/walletkit:latest
          volumeMounts:
            - name: walletkit-config
              mountPath: "/waltid/wallet/config/"
              readOnly: true
            - name: issuers-secret
              mountPath: "/waltid/wallet/secrets"
              readOnly: true
            - mountPath: "/waltid/wallet/data/"
              name: walletkit-data
          env:
            - name: WALTID_DATA_ROOT
              value: "/waltid/wallet"
            - name: WALTID_WALLET_BACKEND_BIND_ADDRESS
              value: 0.0.0.0
          args:
            - run
          ports:
            - containerPort: 8080
              name: http-api
      volumes:
        - name: walletkit-config
          configMap:
            name: walletkit-config
        - name: issuers-secret
          secret:
            secretName: issuers-secret
        - name: walletkit-data
          persistentVolumeClaim:
            claimName: walletkit-data-volume-claim
---
kind: Service
apiVersion: v1
metadata:
  name: walletkit
spec:
  ports:
    - name: http
      port: 80
      targetPort: http-api
      protocol: TCP
  selector:
    app: walletkit
---
kind: Deployment
apiVersion: apps/v1
metadata:
  name: verifier-portal
spec:
  replicas: 1
  selector:
    matchLabels:
      app: verifier-portal
  template:
    metadata:
      labels:
        app: verifier-portal
      annotations:
        deployment/id: "_DEFAULT_DEPLOYMENT_"
    spec:
      containers:
        - name: ssikit-verifier-portal
          image: waltid/ssikit-verifier-portal:latest
          ports:
            - containerPort: 80
              name: http-api
---
kind: Service
apiVersion: v1
metadata:
  name: verifier-portal
spec:
  ports:
    - name: http
      port: 80
      targetPort: http-api
      protocol: TCP
  selector:
    app: verifier-portal
---
kind: Deployment
apiVersion: apps/v1
metadata:
  name: issuer-portal
spec:
  replicas: 1
  selector:
    matchLabels:
      app: issuer-portal
  template:
    metadata:
      labels:
        app: issuer-portal
      annotations:
        deployment/id: "_DEFAULT_DEPLOYMENT_"
    spec:
      containers:
        - name: ssikit-issuer-portal
          image: waltid/ssikit-issuer-portal:latest
          ports:
            - containerPort: 80
              name: http-api
---
kind: Service
apiVersion: v1
metadata:
  name: issuer-portal
spec:
  ports:
    - name: http
      port: 80
      targetPort: http-api
      protocol: TCP
  selector:
    app: issuer-portal
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: walletkit
  annotations:
    kubernetes.io/ingress.class: "nginx"
    cert-manager.io/cluster-issuer: letsencrypt-prod
spec:
  tls:
    - hosts:
        - verifier.walletkit.walt.id
        - issuer.walletkit.walt.id
        - walletkit.walt.id
      secretName: walletkit-tls-secret
  rules:
    - host: verifier.walletkit.walt.id
      http:
        paths:
          - path: /verifier-api/
            pathType: Prefix
            backend:
              service:
                name: walletkit
                port:
                  number: 80
          - path: /
            pathType: Prefix
            backend:
              service:
                name: verifier-portal
                port:
                  number: 80
    - host: issuer.walletkit.walt.id
      http:
        paths:
          - path: /issuer-api/
            pathType: Prefix
            backend:
              service:
                name: walletkit
                port:
                  number: 80
          - path: /api/
            pathType: Prefix
            backend:
              service:
                name: walletkit
                port:
                  number: 80
          - path: /
            pathType: Prefix
            backend:
              service:
                name: issuer-portal
                port:
                  number: 80
    - host: walletkit.walt.id
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: walletkit
                port:
                  number: 80