deployment.yml

---
###  SERVICE INSTANCE CONFIGURATION  ###
# Xsuaa instance
apiVersion: services.cloud.sap.com/v1
kind: ServiceInstance
metadata:
  name: xsuaa
spec:
  serviceOfferingName: xsuaa
  servicePlanName: application
  parameters:
    xsappname: xsuaa-java-security
    tenant-mode: dedicated
    scopes:
      - name: "$XSAPPNAME.Read"
        description: Scope for java-security-usage sample application
    role-templates:
      - name: Viewer
        description: Role for java-security-usage sample application
        scope-references:
          - "$XSAPPNAME.Read"
    role-collections:
      - name: "Sample Viewer (java-security-usage)"
        description: Role collection for java-security-usage sample application
        role-template-references:
          - "$XSAPPNAME.Viewer"
---
apiVersion: services.cloud.sap.com/v1
kind: ServiceBinding
metadata:
  name: xsuaa-service-binding
spec:
  serviceInstanceName: xsuaa
---
# Xsuaa broker instance
apiVersion: services.cloud.sap.com/v1
kind: ServiceInstance
metadata:
  name: xsuaa-broker
spec:
  serviceOfferingName: xsuaa
  servicePlanName: broker
  parameters:
    xsappname: xsuaa-broker
    tenant-mode: dedicated
---
apiVersion: services.cloud.sap.com/v1
kind: ServiceBinding
metadata:
  name: xsuaa-broker-binding
spec:
  serviceInstanceName: xsuaa-broker
---
###  APPLICATION CONFIGURATION  ###
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    app: java-security-usage
  name: java-security-usage
spec:
  replicas: 1
  selector:
    matchLabels:
      app: java-security-usage
  template:
    metadata:
      labels:
        app: java-security-usage
    spec:
      containers:
        - image: <YOUR IMAGE TAG>
          env:
            - name: SERVICE_BINDING_ROOT
              value: "/bindings"
          imagePullPolicy: Always
          name: java-security-usage
          ports:
            - name: http
              containerPort: 8080
          volumeMounts:
            - name: xsuaa
              mountPath: "/bindings/xsuaa"
              readOnly: true
            - name: xsuaa-broker
              mountPath: "/bindings/xsuaa-broker"
              readOnly: true
      volumes:
        - name: xsuaa
          secret:
            secretName: xsuaa-service-binding
        - name: xsuaa-broker
          secret:
            secretName: xsuaa-broker-binding
---
apiVersion: v1
kind: Service
metadata:
  labels:
    app: java-security-usage
  name: java-security-usage
spec:
  ports:
    - name: http
      port: 80
      protocol: TCP
      targetPort: 8080
  selector:
    app: java-security-usage

---
apiVersion: gateway.kyma-project.io/v1beta1
kind: APIRule
metadata:
  name: java-security-api
  labels:
    app: java-security-usage
spec:
  gateway: kyma-gateway.kyma-system.svc.cluster.local
  host: java-security-api
  rules:
    - accessStrategies:
        - config: {}
          handler: allow
      methods:
        - GET
        - POST
        - PUT
        - PATCH
        - DELETE
        - HEAD
      path: /.*
  service:
    name: java-security-usage
    port: 80