Full example

apiVersion: "nais.io/v1alpha1"
kind: "Application"
metadata:
  name: nais-testapp
  namespace: aura
  labels:
    team: aura
spec:
  image: navikt/testapp:69.0.0
  port: 8080
  strategy:
    type: RollingUpdate
  liveness:
    path: isalive
    port: http
    initialDelay: 20
    timeout: 1
    periodSeconds: 5
    failureThreshold: 10
  readiness:
    path: isready
    port: http
    initialDelay: 20
    timeout: 1
  replicas:
    min: 2
    max: 4
    cpuThresholdPercentage: 50
  prometheus:
    enabled: false
    path: /metrics
  resources:
    limits:
      cpu: 500m
      memory: 512Mi
    requests:
      cpu: 200m
      memory: 256Mi
  ingresses:
    - "https://testapp.adeo.no/"
  vault:
    enabled: false
    sidecar: false
    paths:
      - mountPath: /var/run/secrets/nais.io/vault
        kvPath: /kv/preprod/fss/application/namespace
  filesFrom:
    - configmap: example_files_configmap
      mountPath: /var/run/configmaps
    - secret: my-secret-file
      mountPath: /var/run/secrets
  envFrom:
    - secret: my-secret
    - configmap: example_files_configmap
  env:
    - name: MY_CUSTOM_VAR
      value: some_value
  preStopHookPath: "/stop"
  leaderElection: false
  webproxy: false
  logformat: accesslog
  logtransform: http_loglevel
  secureLogs:
    enabled: false
  service:
    port: 80
    protocol: http
  kafka:
    pool: nav-dev
  skipCaBundle: false
  azure:
    application:
      enabled: false
      replyUrls:
        - "https://nais-testapp.nais.adeo.no/oauth2/callback"
      tenant: nav.no
      claims:
        extra:
          - "NAVident"
          - "azp_name"
        groups:
          - id: "00000000-0000-0000-0000-000000000000"
  tokenx:
    enabled: false
  #
  # startup probes will be available with Kubernetes 1.17.
  #
  startup:
    path: isstarted
    port: http
    initialDelay: 20
    timeout: 1
    periodSeconds: 5
    failureThreshold: 10

  #
  # the following spec is only available when running in GCP.
  #
  idporten:
    enabled: false
    clientURI: "https://www.nav.no"
    postLogoutRedirectURIs:
      - "https://www.nav.no"
    redirectPath: "/oauth2/callback"
    frontchannelLogoutPath: "/oauth2/logout"
    sessionLifetime: 7200
    accessTokenLifetime: 3600
  maskinporten:
    enabled: false
    scopes:
      - name: "some:scope"

  gcp:
    buckets:
      - name: my-cloud-storage-bucket
        cascadingDelete: false
        retentionPeriodDays: 30
        lifecycleCondition:
          age: 10
          createdBefore: 2020-01-01
          numNewerVersions: 2
          withState: ARCHIVED
    sqlInstances:
      - name: myinstance
        type: POSTGRES_11
        tier: db-f1-micro
        diskType: SSD
        highAvailability: true
        diskSize: 10
        diskAutoresize: true
        autoBackupTime: "03:00"
        databases:
          - name: mydb
            envVarPrefix: NAIS_DATABASE
            users:
              - name: user2
              - name: _user3
        maintenanceWindow:
          day: 1
          hour: 4
        cascadingDelete: false
  accessPolicy:
    inbound:
      rules:
        - application: app1
        - application: app2
          namespace: q1
        - application: app3
          namespace: q2
          cluster: dev-gcp
        - application: *
          namespace: t1
    outbound:
      rules:
        - application: app4
        - application: app1
          namespace: q1
        - application: app5
          namespace: q2
          cluster: dev-gcp
        - application: *
          namespace: t1
      external:
        - host: www.external-application.com
        - host: another-external.com
          ports:
            - port: 9200
              protocol: TCP