diff --git a/.github/workflows/microk8s.yml b/.github/workflows/microk8s.yml index a446b4272..cd6754880 100644 --- a/.github/workflows/microk8s.yml +++ b/.github/workflows/microk8s.yml @@ -202,7 +202,7 @@ jobs: - name: Install microk8s run: | - sudo snap install microk8s --classic --channel=1.19 + sudo snap install microk8s --classic --channel=1.21 sudo snap alias microk8s.kubectl kubectl sudo microk8s.status --wait-ready sudo microk8s.enable dns registry ingress diff --git a/pygluu/kubernetes/templates/helm/gluu/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/Chart.yaml index 923acf93d..3ee7e834e 100644 --- a/pygluu/kubernetes/templates/helm/gluu/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/Chart.yaml @@ -1,40 +1,40 @@ # License terms and conditions for Gluu Cloud Native Edition: # https://www.apache.org/licenses/LICENSE-2.0 apiVersion: v2 -appVersion: "4.3.0" +appVersion: "4.3.1" kubeVersion: ">=v1.21.0-0" annotations: artifacthub.io/changes: | - - Gluu 4.3.0 official chart release + - Gluu 4.3.1 official chart release artifacthub.io/images: | - name: casa - image: gluufederation/casa:4.3.0_dev + image: gluufederation/casa:4.3.1_dev - name: fido2 - image: gluufederation/fido2:4.3.0_dev + image: gluufederation/fido2:4.3.1_dev - name: scim - image: gluufederation/scim:4.3.0_dev + image: gluufederation/scim:4.3.1_dev - name: configuration-manager - image: gluufederation/config-init:4.3.0_dev + image: gluufederation/config-init:4.3.1_dev - name: cr-rotate - image: gluufederation/cr-rotate:4.3.0_dev + image: gluufederation/cr-rotate:4.3.1_dev - name: certmanager - image: gluufederation/certmanager:4.3.0_dev + image: gluufederation/certmanager:4.3.1_dev - name: opendj - image: gluufederation/opendj:4.3.0_dev + image: gluufederation/opendj:4.3.1_dev - name: jackrabbit - image: gluufederation/jackrabbit:4.3.0_dev + image: gluufederation/jackrabbit:4.3.1_dev - name: oxauth - image: gluufederation/oxauth:4.3.0_dev + image: gluufederation/oxauth:4.3.1_dev - name: oxd-server - image: gluufederation/oxd-server:4.3.0_dev + image: gluufederation/oxd-server:4.3.1_dev - name: oxpassport - image: gluufederation/oxpassport:4.3.0_dev + image: gluufederation/oxpassport:4.3.1_dev - name: oxshibboleth - image: gluufederation/oxshibboleth:4.3.0_dev + image: gluufederation/oxshibboleth:4.3.1_dev - name: persistence - image: gluufederation/persistence:4.3.0_dev + image: gluufederation/persistence:4.3.1_dev - name: oxtrust - image: gluufederation/oxtrust:4.3.0_dev + image: gluufederation/oxtrust:4.3.1_dev artifacthub.io/license: Apache-2.0 icon: https://gluu.org/docs/gluu-server/favicon.ico home: https://www.gluu.org diff --git a/pygluu/kubernetes/templates/helm/gluu/README.md b/pygluu/kubernetes/templates/helm/gluu/README.md index a7f9113e9..092647076 100644 --- a/pygluu/kubernetes/templates/helm/gluu/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/README.md @@ -1,6 +1,6 @@ # gluu -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Gluu Access and Identity Mangement @@ -19,33 +19,33 @@ Gluu Access and Identity Mangement ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` | Repository | Name | Version | |------------|------|---------| -| | casa | 1.6.14 | -| | config | 1.6.14 | -| | cr-rotate | 1.6.14 | -| | fido2 | 1.6.14 | -| | gluu-alb-ingress | 1.6.14 | -| | gluu-istio-ingress | 1.6.14 | -| | jackrabbit | 1.6.14 | -| | nginx-ingress | 1.6.14 | -| | opendj | 1.6.14 | -| | oxauth | 1.6.14 | -| | oxauth-key-rotation | 1.6.14 | -| | oxd-server | 1.6.14 | -| | oxpassport | 1.6.14 | -| | oxshibboleth | 1.6.14 | -| | oxtrust | 1.6.14 | -| | persistence | 1.6.14 | -| | scim | 1.6.14 | +| | casa | 1.6.15 | +| | config | 1.6.15 | +| | cr-rotate | 1.6.15 | +| | fido2 | 1.6.15 | +| | gluu-alb-ingress | 1.6.15 | +| | gluu-istio-ingress | 1.6.15 | +| | jackrabbit | 1.6.15 | +| | nginx-ingress | 1.6.15 | +| | opendj | 1.6.15 | +| | oxauth | 1.6.15 | +| | oxauth-key-rotation | 1.6.15 | +| | oxd-server | 1.6.15 | +| | oxpassport | 1.6.15 | +| | oxshibboleth | 1.6.15 | +| | oxtrust | 1.6.15 | +| | persistence | 1.6.15 | +| | scim | 1.6.15 | ## Values | Key | Type | Default | Description | |-----|------|---------|-------------| -| casa | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/casa","tag":"4.3.0_02"},"livenessProbe":{"httpGet":{"path":"/casa/health-check","port":"http-casa"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"readinessProbe":{"httpGet":{"path":"/casa/health-check","port":"http-casa"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"500m","memory":"500Mi"},"requests":{"cpu":"500m","memory":"500Mi"}},"service":{"casaServiceName":"casa","name":"http-casa","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Gluu Casa ("Casa") is a self-service web portal for end-users to manage authentication and authorization preferences for their account in a Gluu Server. | +| casa | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/casa","tag":"4.3.1_01"},"livenessProbe":{"httpGet":{"path":"/casa/health-check","port":"http-casa"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"readinessProbe":{"httpGet":{"path":"/casa/health-check","port":"http-casa"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"500m","memory":"500Mi"},"requests":{"cpu":"500m","memory":"500Mi"}},"service":{"casaServiceName":"casa","name":"http-casa","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Gluu Casa ("Casa") is a self-service web portal for end-users to manage authentication and authorization preferences for their account in a Gluu Server. | | casa.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | casa.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | casa.dnsConfig | object | `{}` | Add custom dns config | @@ -56,7 +56,7 @@ Kubernetes: `>=v1.18.0-0` | casa.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | casa.image.pullSecrets | list | `[]` | Image Pull Secrets | | casa.image.repository | string | `"gluufederation/casa"` | Image to use for deploying. | -| casa.image.tag | string | `"4.3.0_02"` | Image tag to use for deploying. | +| casa.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | casa.livenessProbe | object | `{"httpGet":{"path":"/casa/health-check","port":"http-casa"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the liveness healthcheck for casa if needed. | | casa.livenessProbe.httpGet.path | string | `"/casa/health-check"` | http liveness probe endpoint | | casa.readinessProbe | object | `{"httpGet":{"path":"/casa/health-check","port":"http-casa"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the readiness healthcheck for the casa if needed. | @@ -75,7 +75,7 @@ Kubernetes: `>=v1.18.0-0` | casa.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | casa.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | casa.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| config | object | `{"additionalAnnotations":{},"additionalLabels":{},"adminPass":"P@ssw0rd","city":"Austin","configmap":{"cnConfigGoogleSecretNamePrefix":"gluu","cnConfigGoogleSecretVersionId":"latest","cnGoogleProjectId":"google-project-to-save-config-and-secrets-to","cnGoogleSecretManagerPassPhrase":"Test1234#","cnGoogleServiceAccount":"SWFtTm90YVNlcnZpY2VBY2NvdW50Q2hhbmdlTWV0b09uZQo=","cnGoogleSpannerDatabaseId":"","cnGoogleSpannerInstanceId":"","cnSecretGoogleSecretNamePrefix":"gluu","cnSecretGoogleSecretVersionId":"latest","cnSqlDbDialect":"mysql","cnSqlDbHost":"my-release-mysql.default.svc.cluster.local","cnSqlDbName":"gluu","cnSqlDbPort":3306,"cnSqlDbTimezone":"UTC","cnSqlDbUser":"gluu","cnSqlPasswordFile":"/etc/gluu/conf/sql_password","cnSqldbUserPassword":"Test1234#","containerMetadataName":"kubernetes","gluuCacheType":"NATIVE_PERSISTENCE","gluuCasaEnabled":false,"gluuCouchbaseBucketPrefix":"gluu","gluuCouchbaseCertFile":"/etc/certs/couchbase.crt","gluuCouchbaseCrt":"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","gluuCouchbaseIndexNumReplica":0,"gluuCouchbasePass":"P@ssw0rd","gluuCouchbasePassFile":"/etc/gluu/conf/couchbase_password","gluuCouchbaseSuperUser":"admin","gluuCouchbaseSuperUserPass":"P@ssw0rd","gluuCouchbaseSuperUserPassFile":"/etc/gluu/conf/couchbase_superuser_password","gluuCouchbaseUrl":"cbgluu.default.svc.cluster.local","gluuCouchbaseUser":"gluu","gluuDocumentStoreType":"JCA","gluuJackrabbitAdminId":"admin","gluuJackrabbitAdminIdFile":"/etc/gluu/conf/jackrabbit_admin_id","gluuJackrabbitAdminPassFile":"/etc/gluu/conf/jackrabbit_admin_password","gluuJackrabbitPostgresDatabaseName":"jackrabbit","gluuJackrabbitPostgresHost":"postgresql.postgres.svc.cluster.local","gluuJackrabbitPostgresPasswordFile":"/etc/gluu/conf/postgres_password","gluuJackrabbitPostgresPort":5432,"gluuJackrabbitPostgresUser":"jackrabbit","gluuJackrabbitSyncInterval":300,"gluuJackrabbitUrl":"http://jackrabbit:8080","gluuLdapUrl":"opendj:1636","gluuMaxRamPercent":"75.0","gluuOxauthBackend":"oxauth:8080","gluuOxdAdminCertCn":"oxd-server","gluuOxdApplicationCertCn":"oxd-server","gluuOxdBindIpAddresses":"*","gluuOxdServerUrl":"oxd-server:8443","gluuOxtrustApiEnabled":false,"gluuOxtrustApiTestMode":false,"gluuOxtrustBackend":"oxtrust:8080","gluuOxtrustConfigGeneration":true,"gluuPassportEnabled":false,"gluuPassportFailureRedirectUrl":"","gluuPersistenceLdapMapping":"default","gluuRedisSentinelGroup":"","gluuRedisSslTruststore":"","gluuRedisType":"STANDALONE","gluuRedisUrl":"redis:6379","gluuRedisUseSsl":"false","gluuSamlEnabled":false,"gluuScimProtectionMode":"OAUTH","gluuSyncCasaManifests":false,"gluuSyncShibManifests":false,"lbAddr":""},"countryCode":"US","dnsConfig":{},"dnsPolicy":"","email":"support@gluu.com","image":{"pullSecrets":[],"repository":"gluufederation/config-init","tag":"4.3.0_01"},"ldapPass":"P@ssw0rd","migration":{"enabled":false,"migrationDataFormat":"ldif","migrationDir":"/ce-migration"},"orgName":"Gluu","redisPass":"P@assw0rd","resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"state":"TX","usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Configuration parameters for setup and initial configuration secret and config layers used by Gluu services. | +| config | object | `{"additionalAnnotations":{},"additionalLabels":{},"adminPass":"P@ssw0rd","city":"Austin","configmap":{"cnConfigGoogleSecretNamePrefix":"gluu","cnConfigGoogleSecretVersionId":"latest","cnGoogleProjectId":"google-project-to-save-config-and-secrets-to","cnGoogleSecretManagerPassPhrase":"Test1234#","cnGoogleServiceAccount":"SWFtTm90YVNlcnZpY2VBY2NvdW50Q2hhbmdlTWV0b09uZQo=","cnGoogleSpannerDatabaseId":"","cnGoogleSpannerInstanceId":"","cnSecretGoogleSecretNamePrefix":"gluu","cnSecretGoogleSecretVersionId":"latest","cnSqlDbDialect":"mysql","cnSqlDbHost":"my-release-mysql.default.svc.cluster.local","cnSqlDbName":"gluu","cnSqlDbPort":3306,"cnSqlDbTimezone":"UTC","cnSqlDbUser":"gluu","cnSqlPasswordFile":"/etc/gluu/conf/sql_password","cnSqldbUserPassword":"Test1234#","containerMetadataName":"kubernetes","gluuCacheType":"NATIVE_PERSISTENCE","gluuCasaEnabled":false,"gluuCouchbaseBucketPrefix":"gluu","gluuCouchbaseCertFile":"/etc/certs/couchbase.crt","gluuCouchbaseCrt":"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","gluuCouchbaseIndexNumReplica":0,"gluuCouchbasePass":"P@ssw0rd","gluuCouchbasePassFile":"/etc/gluu/conf/couchbase_password","gluuCouchbaseSuperUser":"admin","gluuCouchbaseSuperUserPass":"P@ssw0rd","gluuCouchbaseSuperUserPassFile":"/etc/gluu/conf/couchbase_superuser_password","gluuCouchbaseUrl":"cbgluu.default.svc.cluster.local","gluuCouchbaseUser":"gluu","gluuDocumentStoreType":"JCA","gluuJackrabbitAdminId":"admin","gluuJackrabbitAdminIdFile":"/etc/gluu/conf/jackrabbit_admin_id","gluuJackrabbitAdminPassFile":"/etc/gluu/conf/jackrabbit_admin_password","gluuJackrabbitPostgresDatabaseName":"jackrabbit","gluuJackrabbitPostgresHost":"postgresql.postgres.svc.cluster.local","gluuJackrabbitPostgresPasswordFile":"/etc/gluu/conf/postgres_password","gluuJackrabbitPostgresPort":5432,"gluuJackrabbitPostgresUser":"jackrabbit","gluuJackrabbitSyncInterval":300,"gluuJackrabbitUrl":"http://jackrabbit:8080","gluuLdapUrl":"opendj:1636","gluuMaxRamPercent":"75.0","gluuOxauthBackend":"oxauth:8080","gluuOxdAdminCertCn":"oxd-server","gluuOxdApplicationCertCn":"oxd-server","gluuOxdBindIpAddresses":"*","gluuOxdServerUrl":"oxd-server:8443","gluuOxtrustApiEnabled":false,"gluuOxtrustApiTestMode":false,"gluuOxtrustBackend":"oxtrust:8080","gluuOxtrustConfigGeneration":true,"gluuPassportEnabled":false,"gluuPassportFailureRedirectUrl":"","gluuPersistenceLdapMapping":"default","gluuRedisSentinelGroup":"","gluuRedisSslTruststore":"","gluuRedisType":"STANDALONE","gluuRedisUrl":"redis:6379","gluuRedisUseSsl":"false","gluuSamlEnabled":false,"gluuScimProtectionMode":"OAUTH","gluuSyncCasaManifests":false,"gluuSyncShibManifests":false,"lbAddr":""},"countryCode":"US","dnsConfig":{},"dnsPolicy":"","email":"support@gluu.com","image":{"pullSecrets":[],"repository":"gluufederation/config-init","tag":"4.3.1_01"},"ldapPass":"P@ssw0rd","migration":{"enabled":false,"migrationDataFormat":"ldif","migrationDir":"/ce-migration"},"orgName":"Gluu","redisPass":"P@assw0rd","resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"state":"TX","usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Configuration parameters for setup and initial configuration secret and config layers used by Gluu services. | | config.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | config.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | config.adminPass | string | `"P@ssw0rd"` | Admin password to log in to the UI. | @@ -148,7 +148,7 @@ Kubernetes: `>=v1.18.0-0` | config.email | string | `"support@gluu.com"` | Email address of the administrator usually. Used for certificate creation. | | config.image.pullSecrets | list | `[]` | Image Pull Secrets | | config.image.repository | string | `"gluufederation/config-init"` | Image to use for deploying. | -| config.image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| config.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | config.ldapPass | string | `"P@ssw0rd"` | LDAP admin password if OpennDJ is used for persistence. | | config.migration | object | `{"enabled":false,"migrationDataFormat":"ldif","migrationDir":"/ce-migration"}` | CE to CN Migration section | | config.migration.enabled | bool | `false` | Boolean flag to enable migration from CE | @@ -167,7 +167,7 @@ Kubernetes: `>=v1.18.0-0` | config.usrEnvs.secret | object | `{}` | Add custom secret envs to the service. variable1: value1 | | config.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | config.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| cr-rotate | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/cr-rotate","tag":"4.3.0_01"},"resources":{"limits":{"cpu":"200m","memory":"200Mi"},"requests":{"cpu":"200m","memory":"200Mi"}},"service":{"crRotateServiceName":"cr-rotate","name":"http-cr-rotate","port":8084},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | CacheRefreshRotation is a special container to monitor cache refresh on oxTrust containers. This may be depreciated. | +| cr-rotate | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/cr-rotate","tag":"4.3.1_01"},"resources":{"limits":{"cpu":"200m","memory":"200Mi"},"requests":{"cpu":"200m","memory":"200Mi"}},"service":{"crRotateServiceName":"cr-rotate","name":"http-cr-rotate","port":8084},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | CacheRefreshRotation is a special container to monitor cache refresh on oxTrust containers. This may be depreciated. | | cr-rotate.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | cr-rotate.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | cr-rotate.dnsConfig | object | `{}` | Add custom dns config | @@ -175,7 +175,7 @@ Kubernetes: `>=v1.18.0-0` | cr-rotate.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | cr-rotate.image.pullSecrets | list | `[]` | Image Pull Secrets | | cr-rotate.image.repository | string | `"gluufederation/cr-rotate"` | Image to use for deploying. | -| cr-rotate.image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| cr-rotate.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | cr-rotate.resources | object | `{"limits":{"cpu":"200m","memory":"200Mi"},"requests":{"cpu":"200m","memory":"200Mi"}}` | Resource specs. | | cr-rotate.resources.limits.cpu | string | `"200m"` | CPU limit. | | cr-rotate.resources.limits.memory | string | `"200Mi"` | Memory limit. | @@ -189,7 +189,7 @@ Kubernetes: `>=v1.18.0-0` | cr-rotate.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | cr-rotate.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | cr-rotate.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| fido2 | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/fido2","tag":"4.3.0_02"},"livenessProbe":{"httpGet":{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"readinessProbe":{"httpGet":{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"500m","memory":"500Mi"},"requests":{"cpu":"500m","memory":"500Mi"}},"service":{"fido2ServiceName":"fido2","name":"http-fido2","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | FIDO 2.0 (FIDO2) is an open authentication standard that enables leveraging common devices to authenticate to online services in both mobile and desktop environments. | +| fido2 | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/fido2","tag":"4.3.1_01"},"livenessProbe":{"httpGet":{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"readinessProbe":{"httpGet":{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"500m","memory":"500Mi"},"requests":{"cpu":"500m","memory":"500Mi"}},"service":{"fido2ServiceName":"fido2","name":"http-fido2","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | FIDO 2.0 (FIDO2) is an open authentication standard that enables leveraging common devices to authenticate to online services in both mobile and desktop environments. | | fido2.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | fido2.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | fido2.dnsConfig | object | `{}` | Add custom dns config | @@ -200,7 +200,7 @@ Kubernetes: `>=v1.18.0-0` | fido2.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | fido2.image.pullSecrets | list | `[]` | Image Pull Secrets | | fido2.image.repository | string | `"gluufederation/fido2"` | Image to use for deploying. | -| fido2.image.tag | string | `"4.3.0_02"` | Image tag to use for deploying. | +| fido2.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | fido2.livenessProbe | object | `{"httpGet":{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the liveness healthcheck for the fido2 if needed. | | fido2.livenessProbe.httpGet | object | `{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"}` | http liveness probe endpoint | | fido2.readinessProbe | object | `{"httpGet":{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the readiness healthcheck for the fido2 if needed. | @@ -218,7 +218,7 @@ Kubernetes: `>=v1.18.0-0` | fido2.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | fido2.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | fido2.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| global | object | `{"alb":{"ingress":{"additionalAnnotations":{"alb.ingress.kubernetes.io/auth-session-cookie":"custom-cookie","alb.ingress.kubernetes.io/certificate-arn":"arn:aws:acm:us-west-2:xxxx:certificate/xxxxxx","alb.ingress.kubernetes.io/scheme":"internet-facing","kubernetes.io/ingress.class":"alb"},"additionalLabels":{},"adminUiEnabled":true,"authServerEnabled":true,"casaEnabled":false,"enabled":false,"fido2ConfigEnabled":false,"fido2Enabled":false,"openidConfigEnabled":true,"passportEnabled":false,"scimConfigEnabled":false,"scimEnabled":false,"shibEnabled":false,"u2fConfigEnabled":true,"uma2ConfigEnabled":true,"webdiscoveryEnabled":true,"webfingerEnabled":true}},"azureStorageAccountType":"Standard_LRS","azureStorageKind":"Managed","cloud":{"testEnviroment":false},"cnGoogleApplicationCredentials":"/etc/gluu/conf/google-credentials.json","config":{"enabled":true},"configAdapterName":"kubernetes","configSecretAdapter":"kubernetes","cr-rotate":{"enabled":false},"domain":"demoexample.gluu.org","fido2":{"enabled":false},"gcePdStorageType":"pd-standard","gluuJackrabbitCluster":"true","gluuPersistenceType":"couchbase","isDomainRegistered":"false","istio":{"additionalAnnotations":{},"additionalLabels":{},"enabled":false,"ingress":false,"namespace":"istio-system"},"jackrabbit":{"enabled":true},"lbIp":"","ldapServiceName":"opendj","nginx-ingress":{"enabled":true},"opendj":{"enabled":true},"oxauth":{"enabled":true},"oxauth-key-rotation":{"enabled":false},"oxd-server":{"enabled":false},"oxshibboleth":{"enabled":false},"oxtrust":{"enabled":true},"persistence":{"enabled":true},"scim":{"enabled":false},"storageClass":{"allowVolumeExpansion":true,"allowedTopologies":[],"mountOptions":["debug"],"parameters":{},"provisioner":"microk8s.io/hostpath","reclaimPolicy":"Retain","volumeBindingMode":"WaitForFirstConsumer"},"upgrade":{"enabled":false,"image":{"repository":"gluufederation/upgrade","tag":"4.3.0_01"},"sourceVersion":"4.2","targetVersion":"4.3"},"usrEnvs":{"normal":{},"secret":{}}}` | Parameters used globally across all services helm charts. | +| global | object | `{"alb":{"ingress":{"additionalAnnotations":{"alb.ingress.kubernetes.io/auth-session-cookie":"custom-cookie","alb.ingress.kubernetes.io/certificate-arn":"arn:aws:acm:us-west-2:xxxx:certificate/xxxxxx","alb.ingress.kubernetes.io/scheme":"internet-facing","kubernetes.io/ingress.class":"alb"},"additionalLabels":{},"adminUiEnabled":true,"authServerEnabled":true,"casaEnabled":false,"enabled":false,"fido2ConfigEnabled":false,"fido2Enabled":false,"openidConfigEnabled":true,"passportEnabled":false,"scimConfigEnabled":false,"scimEnabled":false,"shibEnabled":false,"u2fConfigEnabled":true,"uma2ConfigEnabled":true,"webdiscoveryEnabled":true,"webfingerEnabled":true}},"azureStorageAccountType":"Standard_LRS","azureStorageKind":"Managed","cloud":{"testEnviroment":false},"cnGoogleApplicationCredentials":"/etc/gluu/conf/google-credentials.json","config":{"enabled":true},"configAdapterName":"kubernetes","configSecretAdapter":"kubernetes","cr-rotate":{"enabled":false},"domain":"demoexample.gluu.org","fido2":{"appLoggers":{"fido2LogLevel":"INFO","fido2LogTarget":"STDOUT","persistenceLogLevel":"INFO","persistenceLogTarget":"FILE"},"enabled":false},"gcePdStorageType":"pd-standard","gluuJackrabbitCluster":"true","gluuPersistenceType":"couchbase","isDomainRegistered":"false","istio":{"additionalAnnotations":{},"additionalLabels":{},"enabled":false,"ingress":false,"namespace":"istio-system"},"jackrabbit":{"enabled":true},"lbIp":"","ldapServiceName":"opendj","nginx-ingress":{"enabled":true},"opendj":{"enabled":true},"oxauth":{"appLoggers":{"auditStatsLogLevel":"INFO","auditStatsLogTarget":"FILE","authLogLevel":"INFO","authLogTarget":"STDOUT","cleanerLogLevel":"INFO","cleanerLogTarget":"FILE","httpLogLevel":"INFO","httpLogTarget":"FILE","ldapStatsLogLevel":"INFO","ldapStatsLogTarget":"FILE","persistenceDurationLogLevel":"INFO","persistenceDurationLogTarget":"FILE","persistenceLogLevel":"INFO","persistenceLogTarget":"FILE","scriptLogLevel":"INFO","scriptLogTarget":"FILE"},"enabled":true},"oxauth-key-rotation":{"enabled":false},"oxd-server":{"appLoggers":{"oxdServerLogLevel":"INFO","oxdServerLogTarget":"STDOUT"},"enabled":false},"oxshibboleth":{"appLoggers":{"auditStatsLogLevel":"INFO","auditStatsLogTarget":"FILE","consentAuditLogLevel":"INFO","consentAuditLogTarget":"FILE","idpLogLevel":"INFO","idpLogTarget":"STDOUT","scriptLogLevel":"INFO","scriptLogTarget":"FILE"},"enabled":false},"oxtrust":{"appLoggers":{"apachehcLogLevel":"INFO","apachehcLogTarget":"FILE","auditStatsLogLevel":"INFO","auditStatsLogTarget":"FILE","cacheRefreshLogLevel":"INFO","cacheRefreshLogTarget":"FILE","cacheRefreshPythonLogLevel":"INFO","cacheRefreshPythonLogTarget":"FILE","cleanerLogLevel":"INFO","cleanerLogTarget":"FILE","httpLogLevel":"INFO","httpLogTarget":"FILE","ldapStatsLogLevel":"INFO","ldapStatsLogTarget":"FILE","oxtrustLogLevel":"INFO","oxtrustLogTarget":"STDOUT","persistenceDurationLogLevel":"INFO","persistenceDurationLogTarget":"FILE","persistenceLogLevel":"INFO","persistenceLogTarget":"FILE","scriptLogLevel":"INFO","scriptLogTarget":"FILE","velocityLogLevel":"INFO","velocityLogTarget":"FILE"},"enabled":true},"persistence":{"enabled":true},"scim":{"appLoggers":{"persistenceDurationLogLevel":"INFO","persistenceDurationLogTarget":"FILE","persistenceLogLevel":"INFO","persistenceLogTarget":"FILE","scimLogLevel":"INFO","scimLogTarget":"STDOUT","scriptLogLevel":"INFO","scriptLogTarget":"FILE"},"enabled":false},"storageClass":{"allowVolumeExpansion":true,"allowedTopologies":[],"mountOptions":["debug"],"parameters":{},"provisioner":"microk8s.io/hostpath","reclaimPolicy":"Retain","volumeBindingMode":"WaitForFirstConsumer"},"upgrade":{"enabled":false,"image":{"repository":"gluufederation/upgrade","tag":"4.3.1_01"},"sourceVersion":"4.2","targetVersion":"4.3"},"usrEnvs":{"normal":{},"secret":{}}}` | Parameters used globally across all services helm charts. | | global.alb.ingress.additionalAnnotations | object | `{"alb.ingress.kubernetes.io/auth-session-cookie":"custom-cookie","alb.ingress.kubernetes.io/certificate-arn":"arn:aws:acm:us-west-2:xxxx:certificate/xxxxxx","alb.ingress.kubernetes.io/scheme":"internet-facing","kubernetes.io/ingress.class":"alb"}` | Additional annotations that will be added across all ingress definitions in the format of {cert-manager.io/issuer: "letsencrypt-prod"} | | global.alb.ingress.additionalLabels | object | `{}` | Additional labels that will be added across all ingress definitions in the format of {mylabel: "myapp"} | | global.alb.ingress.adminUiEnabled | bool | `true` | Enable Admin UI endpoints /identity | @@ -244,6 +244,11 @@ Kubernetes: `>=v1.18.0-0` | global.configSecretAdapter | string | `"kubernetes"` | The config backend adapter that will hold Gluu secret layer. google|kubernetes | | global.cr-rotate.enabled | bool | `false` | Boolean flag to enable/disable the cr-rotate chart. | | global.domain | string | `"demoexample.gluu.org"` | Fully qualified domain name to be used for Gluu installation. This address will be used to reach Gluu services. | +| global.fido2.appLoggers | object | `{"fido2LogLevel":"INFO","fido2LogTarget":"STDOUT","persistenceLogLevel":"INFO","persistenceLogTarget":"FILE"}` | App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" Targets are "STDOUT" and "FILE" | +| global.fido2.appLoggers.fido2LogLevel | string | `"INFO"` | fido2.log level | +| global.fido2.appLoggers.fido2LogTarget | string | `"STDOUT"` | fido2.log target | +| global.fido2.appLoggers.persistenceLogLevel | string | `"INFO"` | fido2_persistence.log level | +| global.fido2.appLoggers.persistenceLogTarget | string | `"FILE"` | fido2_persistence.log target | | global.fido2.enabled | bool | `false` | Boolean flag to enable/disable the fido2 chart. | | global.gcePdStorageType | string | `"pd-standard"` | GCE storage kind if using Google disks | | global.gluuJackrabbitCluster | string | `"true"` | Boolean flag if enabled will enable jackrabbit in cluster mode with Postgres. | @@ -260,23 +265,86 @@ Kubernetes: `>=v1.18.0-0` | global.nginx-ingress.enabled | bool | `true` | Boolean flag to enable/disable the nginx-ingress definitions chart. | | global.opendj.enabled | bool | `true` | Boolean flag to enable/disable the OpenDJ chart. | | global.oxauth-key-rotation.enabled | bool | `false` | Boolean flag to enable/disable the oxauth-server-key rotation cronjob chart. | +| global.oxauth.appLoggers | object | `{"auditStatsLogLevel":"INFO","auditStatsLogTarget":"FILE","authLogLevel":"INFO","authLogTarget":"STDOUT","cleanerLogLevel":"INFO","cleanerLogTarget":"FILE","httpLogLevel":"INFO","httpLogTarget":"FILE","ldapStatsLogLevel":"INFO","ldapStatsLogTarget":"FILE","persistenceDurationLogLevel":"INFO","persistenceDurationLogTarget":"FILE","persistenceLogLevel":"INFO","persistenceLogTarget":"FILE","scriptLogLevel":"INFO","scriptLogTarget":"FILE"}` | App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" Targets are "STDOUT" and "FILE" | +| global.oxauth.appLoggers.auditStatsLogLevel | string | `"INFO"` | oxauth_audit.log level | +| global.oxauth.appLoggers.auditStatsLogTarget | string | `"FILE"` | oxauth_script.log target | +| global.oxauth.appLoggers.authLogLevel | string | `"INFO"` | oxauth.log level | +| global.oxauth.appLoggers.authLogTarget | string | `"STDOUT"` | oxauth.log target | +| global.oxauth.appLoggers.cleanerLogLevel | string | `"INFO"` | cleaner log level | +| global.oxauth.appLoggers.cleanerLogTarget | string | `"FILE"` | cleaner log target | +| global.oxauth.appLoggers.httpLogLevel | string | `"INFO"` | http_request_response.log level | +| global.oxauth.appLoggers.httpLogTarget | string | `"FILE"` | http_request_response.log target | +| global.oxauth.appLoggers.ldapStatsLogLevel | string | `"INFO"` | oxauth_persistence_ldap_statistics.log level | +| global.oxauth.appLoggers.ldapStatsLogTarget | string | `"FILE"` | oxauth_persistence_ldap_statistics.log target | +| global.oxauth.appLoggers.persistenceDurationLogLevel | string | `"INFO"` | oxauth_persistence_duration.log level | +| global.oxauth.appLoggers.persistenceDurationLogTarget | string | `"FILE"` | oxauth_persistence_duration.log target | +| global.oxauth.appLoggers.persistenceLogLevel | string | `"INFO"` | oxauth_persistence.log level | +| global.oxauth.appLoggers.persistenceLogTarget | string | `"FILE"` | oxauth_persistence.log target | +| global.oxauth.appLoggers.scriptLogLevel | string | `"INFO"` | oxauth_script.log level | +| global.oxauth.appLoggers.scriptLogTarget | string | `"FILE"` | oxauth_script.log target | | global.oxauth.enabled | bool | `true` | Boolean flag to enable/disable oxauth chart. You should never set this to false. | +| global.oxd-server.appLoggers | object | `{"oxdServerLogLevel":"INFO","oxdServerLogTarget":"STDOUT"}` | App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" Targets are "STDOUT" and "FILE" | +| global.oxd-server.appLoggers.oxdServerLogLevel | string | `"INFO"` | oxd-server.log level | +| global.oxd-server.appLoggers.oxdServerLogTarget | string | `"STDOUT"` | oxd-server.log target | | global.oxd-server.enabled | bool | `false` | Boolean flag to enable/disable the oxd-server chart. | +| global.oxshibboleth.appLoggers | object | `{"auditStatsLogLevel":"INFO","auditStatsLogTarget":"FILE","consentAuditLogLevel":"INFO","consentAuditLogTarget":"FILE","idpLogLevel":"INFO","idpLogTarget":"STDOUT","scriptLogLevel":"INFO","scriptLogTarget":"FILE"}` | App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" Targets are "STDOUT" and "FILE" | +| global.oxshibboleth.appLoggers.auditStatsLogLevel | string | `"INFO"` | idp-audit.log level | +| global.oxshibboleth.appLoggers.auditStatsLogTarget | string | `"FILE"` | idp-audit.log target | +| global.oxshibboleth.appLoggers.consentAuditLogLevel | string | `"INFO"` | idp-consent-audit.log level | +| global.oxshibboleth.appLoggers.consentAuditLogTarget | string | `"FILE"` | idp-consent-audit.log target | +| global.oxshibboleth.appLoggers.idpLogLevel | string | `"INFO"` | idp-process.log level | +| global.oxshibboleth.appLoggers.idpLogTarget | string | `"STDOUT"` | idp-process.log target | +| global.oxshibboleth.appLoggers.scriptLogLevel | string | `"INFO"` | idp script.log level | +| global.oxshibboleth.appLoggers.scriptLogTarget | string | `"FILE"` | idp script.log target | | global.oxshibboleth.enabled | bool | `false` | Boolean flag to enable/disable the oxShibbboleth chart. | +| global.oxtrust.appLoggers | object | `{"apachehcLogLevel":"INFO","apachehcLogTarget":"FILE","auditStatsLogLevel":"INFO","auditStatsLogTarget":"FILE","cacheRefreshLogLevel":"INFO","cacheRefreshLogTarget":"FILE","cacheRefreshPythonLogLevel":"INFO","cacheRefreshPythonLogTarget":"FILE","cleanerLogLevel":"INFO","cleanerLogTarget":"FILE","httpLogLevel":"INFO","httpLogTarget":"FILE","ldapStatsLogLevel":"INFO","ldapStatsLogTarget":"FILE","oxtrustLogLevel":"INFO","oxtrustLogTarget":"STDOUT","persistenceDurationLogLevel":"INFO","persistenceDurationLogTarget":"FILE","persistenceLogLevel":"INFO","persistenceLogTarget":"FILE","scriptLogLevel":"INFO","scriptLogTarget":"FILE","velocityLogLevel":"INFO","velocityLogTarget":"FILE"}` | App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" Targets are "STDOUT" and "FILE" | +| global.oxtrust.appLoggers.apachehcLogLevel | string | `"INFO"` | apachehc log level | +| global.oxtrust.appLoggers.apachehcLogTarget | string | `"FILE"` | apachehc log target | +| global.oxtrust.appLoggers.auditStatsLogLevel | string | `"INFO"` | oxtrust_audit.log level | +| global.oxtrust.appLoggers.auditStatsLogTarget | string | `"FILE"` | oxtrust_script.log target | +| global.oxtrust.appLoggers.cacheRefreshLogLevel | string | `"INFO"` | cache refresh log level | +| global.oxtrust.appLoggers.cacheRefreshLogTarget | string | `"FILE"` | cache refresh log target | +| global.oxtrust.appLoggers.cacheRefreshPythonLogLevel | string | `"INFO"` | cleaner log level | +| global.oxtrust.appLoggers.cacheRefreshPythonLogTarget | string | `"FILE"` | cache refresh python log target | +| global.oxtrust.appLoggers.cleanerLogLevel | string | `"INFO"` | cleaner log target | +| global.oxtrust.appLoggers.cleanerLogTarget | string | `"FILE"` | cleaner log target | +| global.oxtrust.appLoggers.httpLogLevel | string | `"INFO"` | http_request_response.log level | +| global.oxtrust.appLoggers.httpLogTarget | string | `"FILE"` | http_request_response.log target | +| global.oxtrust.appLoggers.ldapStatsLogLevel | string | `"INFO"` | oxtrust_persistence_ldap_statistics.log level | +| global.oxtrust.appLoggers.ldapStatsLogTarget | string | `"FILE"` | oxtrust_persistence_ldap_statistics.log target | +| global.oxtrust.appLoggers.oxtrustLogLevel | string | `"INFO"` | oxtrust.log level | +| global.oxtrust.appLoggers.oxtrustLogTarget | string | `"STDOUT"` | oxtrust.log target | +| global.oxtrust.appLoggers.persistenceDurationLogLevel | string | `"INFO"` | oxtrust_persistence_duration.log level | +| global.oxtrust.appLoggers.persistenceDurationLogTarget | string | `"FILE"` | oxtrust_persistence_duration.log target | +| global.oxtrust.appLoggers.persistenceLogLevel | string | `"INFO"` | oxtrust_persistence.log level | +| global.oxtrust.appLoggers.persistenceLogTarget | string | `"FILE"` | oxtrust_persistence.log target | +| global.oxtrust.appLoggers.scriptLogLevel | string | `"INFO"` | oxtrust_script.log level | +| global.oxtrust.appLoggers.scriptLogTarget | string | `"FILE"` | oxtrust_script.log target | +| global.oxtrust.appLoggers.velocityLogLevel | string | `"INFO"` | velocity log level | +| global.oxtrust.appLoggers.velocityLogTarget | string | `"FILE"` | velocity log target | | global.oxtrust.enabled | bool | `true` | Boolean flag to enable/disable the oxtrust chart. | | global.persistence.enabled | bool | `true` | Boolean flag to enable/disable the persistence chart. | +| global.scim.appLoggers | object | `{"persistenceDurationLogLevel":"INFO","persistenceDurationLogTarget":"FILE","persistenceLogLevel":"INFO","persistenceLogTarget":"FILE","scimLogLevel":"INFO","scimLogTarget":"STDOUT","scriptLogLevel":"INFO","scriptLogTarget":"FILE"}` | App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" Targets are "STDOUT" and "FILE" | +| global.scim.appLoggers.persistenceDurationLogLevel | string | `"INFO"` | scim_persistence_duration.log level | +| global.scim.appLoggers.persistenceDurationLogTarget | string | `"FILE"` | scim_persistence_duration.log target | +| global.scim.appLoggers.persistenceLogLevel | string | `"INFO"` | scim_persistence.log level | +| global.scim.appLoggers.persistenceLogTarget | string | `"FILE"` | scim_persistence.log target | +| global.scim.appLoggers.scimLogLevel | string | `"INFO"` | scim.log level | +| global.scim.appLoggers.scimLogTarget | string | `"STDOUT"` | scim.log target | +| global.scim.appLoggers.scriptLogLevel | string | `"INFO"` | scim_script.log level | +| global.scim.appLoggers.scriptLogTarget | string | `"FILE"` | scim_script.log target | | global.scim.enabled | bool | `false` | Boolean flag to enable/disable the SCIM chart. | | global.storageClass | object | `{"allowVolumeExpansion":true,"allowedTopologies":[],"mountOptions":["debug"],"parameters":{},"provisioner":"microk8s.io/hostpath","reclaimPolicy":"Retain","volumeBindingMode":"WaitForFirstConsumer"}` | StorageClass section for Jackrabbit and OpenDJ charts. This is not currently used by the openbanking distribution. You may specify custom parameters as needed. | | global.storageClass.parameters | object | `{}` | parameters: | | global.upgrade.enabled | bool | `false` | Boolean flag used when running upgrading through versions command. | | global.upgrade.image.repository | string | `"gluufederation/upgrade"` | Image to use for deploying. | -| global.upgrade.image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| global.upgrade.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | global.upgrade.sourceVersion | string | `"4.2"` | Source version currently running. This is normally one minor version down. The step should only be one minor version per upgrade | | global.upgrade.targetVersion | string | `"4.3"` | Target version currently running. This is normally one minor version up. The step should only be one minor version per upgrade | | global.usrEnvs | object | `{"normal":{},"secret":{}}` | Add custom normal and secret envs to the service. Envs defined in global.userEnvs will be globally available to all services | | global.usrEnvs.normal | object | `{}` | Add custom normal envs to the service. variable1: value1 | | global.usrEnvs.secret | object | `{}` | Add custom secret envs to the service. variable1: value1 | -| jackrabbit | object | `{"additionalAnnotations":{},"additionalLabels":{},"clusterId":"","dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/jackrabbit","tag":"4.3.0_01"},"livenessProbe":{"initialDelaySeconds":25,"periodSeconds":25,"tcpSocket":{"port":"http-jackrabbit"},"timeoutSeconds":5},"readinessProbe":{"initialDelaySeconds":30,"periodSeconds":30,"tcpSocket":{"port":"http-jackrabbit"},"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1500m","memory":"1000Mi"},"requests":{"cpu":"1500m","memory":"1000Mi"}},"secrets":{"gluuJackrabbitAdminPass":"Test1234#","gluuJackrabbitPostgresPass":"P@ssw0rd"},"service":{"jackRabbitServiceName":"jackrabbit","name":"http-jackrabbit","port":8080},"storage":{"size":"5Gi"},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Jackrabbit Oak is a complementary implementation of the JCR specification. It is an effort to implement a scalable and performant hierarchical content repository for use as the foundation of modern world-class web sites and other demanding content applications https://jackrabbit.apache.org/jcr/index.html | +| jackrabbit | object | `{"additionalAnnotations":{},"additionalLabels":{},"clusterId":"","dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/jackrabbit","tag":"4.3.1_01"},"livenessProbe":{"initialDelaySeconds":25,"periodSeconds":25,"tcpSocket":{"port":"http-jackrabbit"},"timeoutSeconds":5},"readinessProbe":{"initialDelaySeconds":30,"periodSeconds":30,"tcpSocket":{"port":"http-jackrabbit"},"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1500m","memory":"1000Mi"},"requests":{"cpu":"1500m","memory":"1000Mi"}},"secrets":{"gluuJackrabbitAdminPass":"Test1234#","gluuJackrabbitPostgresPass":"P@ssw0rd"},"service":{"jackRabbitServiceName":"jackrabbit","name":"http-jackrabbit","port":8080},"storage":{"size":"5Gi"},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Jackrabbit Oak is a complementary implementation of the JCR specification. It is an effort to implement a scalable and performant hierarchical content repository for use as the foundation of modern world-class web sites and other demanding content applications https://jackrabbit.apache.org/jcr/index.html | | jackrabbit.additionalAnnotations | object | `{}` | Additional annotations that will be added across the gateway in the format of {cert-manager.io/issuer: "letsencrypt-prod"} | | jackrabbit.additionalLabels | object | `{}` | Additional labels that will be added across the gateway in the format of {mylabel: "myapp"} | | jackrabbit.clusterId | string | `""` | This id needs to be unique to each kubernetes cluster in a multi cluster setup west, east, south, north, region ...etc If left empty it will be randomly generated. | @@ -288,7 +356,7 @@ Kubernetes: `>=v1.18.0-0` | jackrabbit.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | jackrabbit.image.pullSecrets | list | `[]` | Image Pull Secrets | | jackrabbit.image.repository | string | `"gluufederation/jackrabbit"` | Image to use for deploying. | -| jackrabbit.image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| jackrabbit.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | jackrabbit.livenessProbe | object | `{"initialDelaySeconds":25,"periodSeconds":25,"tcpSocket":{"port":"http-jackrabbit"},"timeoutSeconds":5}` | Configure the liveness healthcheck for the Jackrabbit if needed. | | jackrabbit.livenessProbe.tcpSocket | object | `{"port":"http-jackrabbit"}` | Executes tcp healthcheck. | | jackrabbit.readinessProbe | object | `{"initialDelaySeconds":30,"periodSeconds":30,"tcpSocket":{"port":"http-jackrabbit"},"timeoutSeconds":5}` | Configure the readiness healthcheck for the Jackrabbit if needed. | @@ -356,7 +424,7 @@ Kubernetes: `>=v1.18.0-0` | nginx-ingress.ingress.webfingerAdditionalAnnotations | object | `{}` | webfinger ingress resource additional annotations. | | nginx-ingress.ingress.webfingerEnabled | bool | `true` | Enable endpoint /.well-known/webfinger | | nginx-ingress.ingress.webfingerLabels | object | `{}` | webfinger ingress resource labels. key app is taken | -| opendj | object | `{"additionalAnnotations":{},"additionalLabels":{},"backup":{"cronJobSchedule":"*/59 * * * *","enabled":true},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/opendj","tag":"4.3.0_01"},"livenessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"failureThreshold":20,"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"multiCluster":{"clusterId":"","enabled":false,"namespaceIntId":0,"replicaCount":1,"serfAdvertiseAddrSuffix":"regional.gluu.org","serfKey":"Z51b6PgKU1MZ75NCZOTGGoc0LP2OF3qvF6sjxHyQCYk=","serfPeers":["gluu-opendj-regional-0-regional.gluu.org:30946","gluu-opendj-regional-0-regional.gluu.org:31946"]},"persistence":{"size":"5Gi"},"ports":{"tcp-admin":{"nodePort":"","port":4444,"protocol":"TCP","targetPort":4444},"tcp-ldap":{"nodePort":"","port":1389,"protocol":"TCP","targetPort":1389},"tcp-ldaps":{"nodePort":"","port":1636,"protocol":"TCP","targetPort":1636},"tcp-repl":{"nodePort":"","port":8989,"protocol":"TCP","targetPort":8989},"tcp-serf":{"nodePort":"","port":7946,"protocol":"TCP","targetPort":7946},"udp-serf":{"nodePort":"","port":7946,"protocol":"UDP","targetPort":7946}},"readinessProbe":{"failureThreshold":20,"initialDelaySeconds":60,"periodSeconds":25,"tcpSocket":{"port":1636},"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1500m","memory":"2000Mi"},"requests":{"cpu":"1500m","memory":"2000Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | OpenDJ is a directory server which implements a wide range of Lightweight Directory Access Protocol and related standards, including full compliance with LDAPv3 but also support for Directory Service Markup Language (DSMLv2).Written in Java, OpenDJ offers multi-master replication, access control, and many extensions. | +| opendj | object | `{"additionalAnnotations":{},"additionalLabels":{},"backup":{"cronJobSchedule":"*/59 * * * *","enabled":true},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/opendj","tag":"4.3.1_01"},"livenessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"failureThreshold":20,"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"multiCluster":{"clusterId":"","enabled":false,"namespaceIntId":0,"replicaCount":1,"serfAdvertiseAddrSuffix":"regional.gluu.org","serfKey":"Z51b6PgKU1MZ75NCZOTGGoc0LP2OF3qvF6sjxHyQCYk=","serfPeers":["gluu-opendj-regional-0-regional.gluu.org:30946","gluu-opendj-regional-0-regional.gluu.org:31946"]},"persistence":{"size":"5Gi"},"ports":{"tcp-admin":{"nodePort":"","port":4444,"protocol":"TCP","targetPort":4444},"tcp-ldap":{"nodePort":"","port":1389,"protocol":"TCP","targetPort":1389},"tcp-ldaps":{"nodePort":"","port":1636,"protocol":"TCP","targetPort":1636},"tcp-repl":{"nodePort":"","port":8989,"protocol":"TCP","targetPort":8989},"tcp-serf":{"nodePort":"","port":7946,"protocol":"TCP","targetPort":7946},"udp-serf":{"nodePort":"","port":7946,"protocol":"UDP","targetPort":7946}},"readinessProbe":{"failureThreshold":20,"initialDelaySeconds":60,"periodSeconds":25,"tcpSocket":{"port":1636},"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1500m","memory":"2000Mi"},"requests":{"cpu":"1500m","memory":"2000Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | OpenDJ is a directory server which implements a wide range of Lightweight Directory Access Protocol and related standards, including full compliance with LDAPv3 but also support for Directory Service Markup Language (DSMLv2).Written in Java, OpenDJ offers multi-master replication, access control, and many extensions. | | opendj.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | opendj.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | opendj.backup | object | `{"cronJobSchedule":"*/59 * * * *","enabled":true}` | Configure ldap backup cronjob | @@ -368,7 +436,7 @@ Kubernetes: `>=v1.18.0-0` | opendj.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | opendj.image.pullSecrets | list | `[]` | Image Pull Secrets | | opendj.image.repository | string | `"gluufederation/opendj"` | Image to use for deploying. | -| opendj.image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| opendj.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | opendj.livenessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"failureThreshold":20,"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for OpenDJ if needed. https://github.com/GluuFederation/docker-opendj/blob/4.3/scripts/healthcheck.py | | opendj.livenessProbe.exec | object | `{"command":["python3","/app/scripts/healthcheck.py"]}` | Executes the python3 healthcheck. | | opendj.multiCluster.clusterId | string | `""` | This id needs to be unique to each kubernetes cluster in a multi cluster setup west, east, south, north, region ...etc If left empty it will be randomly generated. | @@ -392,8 +460,8 @@ Kubernetes: `>=v1.18.0-0` | opendj.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | opendj.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | opendj.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| oxauth | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxauth","tag":"4.3.0_02"},"livenessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"2500m","memory":"2500Mi"},"requests":{"cpu":"2500m","memory":"2500Mi"}},"service":{"name":"http-oxauth","oxAuthServiceName":"oxauth","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | OAuth Authorization Server, the OpenID Connect Provider, the UMA Authorization Server--this is the main Internet facing component of Gluu. It's the service that returns tokens, JWT's and identity assertions. This service must be Internet facing. | -| oxauth-key-rotation | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/certmanager","tag":"4.3.0_01"},"keysLife":48,"resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Responsible for regenerating auth-keys per x hours | +| oxauth | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxauth","tag":"4.3.1_01"},"livenessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"2500m","memory":"2500Mi"},"requests":{"cpu":"2500m","memory":"2500Mi"}},"service":{"name":"http-oxauth","oxAuthServiceName":"oxauth","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | OAuth Authorization Server, the OpenID Connect Provider, the UMA Authorization Server--this is the main Internet facing component of Gluu. It's the service that returns tokens, JWT's and identity assertions. This service must be Internet facing. | +| oxauth-key-rotation | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/certmanager","tag":"4.3.1_01"},"keysLife":48,"resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Responsible for regenerating auth-keys per x hours | | oxauth-key-rotation.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | oxauth-key-rotation.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | oxauth-key-rotation.dnsConfig | object | `{}` | Add custom dns config | @@ -401,7 +469,7 @@ Kubernetes: `>=v1.18.0-0` | oxauth-key-rotation.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | oxauth-key-rotation.image.pullSecrets | list | `[]` | Image Pull Secrets | | oxauth-key-rotation.image.repository | string | `"gluufederation/certmanager"` | Image to use for deploying. | -| oxauth-key-rotation.image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| oxauth-key-rotation.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | oxauth-key-rotation.keysLife | int | `48` | Auth server key rotation keys life in hours | | oxauth-key-rotation.resources | object | `{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}}` | Resource specs. | | oxauth-key-rotation.resources.limits.cpu | string | `"300m"` | CPU limit. | @@ -423,7 +491,7 @@ Kubernetes: `>=v1.18.0-0` | oxauth.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | oxauth.image.pullSecrets | list | `[]` | Image Pull Secrets | | oxauth.image.repository | string | `"gluufederation/oxauth"` | Image to use for deploying. | -| oxauth.image.tag | string | `"4.3.0_02"` | Image tag to use for deploying. | +| oxauth.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | oxauth.livenessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the auth server if needed. | | oxauth.livenessProbe.exec | object | `{"command":["python3","/app/scripts/healthcheck.py"]}` | Executes the python3 healthcheck. https://github.com/GluuFederation/docker-oxauth/blob/4.3/scripts/healthcheck.py | | oxauth.readinessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the auth server if needed. https://github.com/GluuFederation/docker-oxauth/blob/4.3/scripts/healthcheck.py | @@ -441,7 +509,7 @@ Kubernetes: `>=v1.18.0-0` | oxauth.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | oxauth.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | oxauth.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| oxd-server | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxd-server","tag":"4.3.0_02"},"livenessProbe":{"exec":{"command":["curl","-k","https://localhost:8443/health-check"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"exec":{"command":["curl","-k","https://localhost:8443/health-check"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1000m","memory":"400Mi"},"requests":{"cpu":"1000m","memory":"400Mi"}},"service":{"oxdServerServiceName":"oxd-server"},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Middleware API to help application developers call an OAuth, OpenID or UMA server. You may wonder why this is necessary. It makes it easier for client developers to use OpenID signing and encryption features, without becoming crypto experts. This API provides some high level endpoints to do some of the heavy lifting. | +| oxd-server | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxd-server","tag":"4.3.1_01"},"livenessProbe":{"exec":{"command":["curl","-k","https://localhost:8443/health-check"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"exec":{"command":["curl","-k","https://localhost:8443/health-check"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1000m","memory":"400Mi"},"requests":{"cpu":"1000m","memory":"400Mi"}},"service":{"oxdServerServiceName":"oxd-server"},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Middleware API to help application developers call an OAuth, OpenID or UMA server. You may wonder why this is necessary. It makes it easier for client developers to use OpenID signing and encryption features, without becoming crypto experts. This API provides some high level endpoints to do some of the heavy lifting. | | oxd-server.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | oxd-server.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | oxd-server.dnsConfig | object | `{}` | Add custom dns config | @@ -452,7 +520,7 @@ Kubernetes: `>=v1.18.0-0` | oxd-server.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | oxd-server.image.pullSecrets | list | `[]` | Image Pull Secrets | | oxd-server.image.repository | string | `"gluufederation/oxd-server"` | Image to use for deploying. | -| oxd-server.image.tag | string | `"4.3.0_02"` | Image tag to use for deploying. | +| oxd-server.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | oxd-server.livenessProbe | object | `{"exec":{"command":["curl","-k","https://localhost:8443/health-check"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the auth server if needed. | | oxd-server.livenessProbe.exec | object | `{"command":["curl","-k","https://localhost:8443/health-check"]}` | Executes the python3 healthcheck. | | oxd-server.readinessProbe | object | `{"exec":{"command":["curl","-k","https://localhost:8443/health-check"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the auth server if needed. | @@ -468,7 +536,7 @@ Kubernetes: `>=v1.18.0-0` | oxd-server.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | oxd-server.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | oxd-server.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| oxpassport | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxpassport","tag":"4.3.0_01"},"livenessProbe":{"failureThreshold":20,"httpGet":{"path":"/passport/health-check","port":"http-passport"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"failureThreshold":20,"httpGet":{"path":"/passport/health-check","port":"http-passport"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"700m","memory":"900Mi"},"requests":{"cpu":"700m","memory":"900Mi"}},"service":{"name":"http-passport","oxPassportServiceName":"oxpassport","port":8090},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Gluu interface to Passport.js to support social login and inbound identity. | +| oxpassport | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxpassport","tag":"4.3.1_01"},"livenessProbe":{"failureThreshold":20,"httpGet":{"path":"/passport/health-check","port":"http-passport"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"failureThreshold":20,"httpGet":{"path":"/passport/health-check","port":"http-passport"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"700m","memory":"900Mi"},"requests":{"cpu":"700m","memory":"900Mi"}},"service":{"name":"http-passport","oxPassportServiceName":"oxpassport","port":8090},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Gluu interface to Passport.js to support social login and inbound identity. | | oxpassport.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | oxpassport.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | oxpassport.dnsConfig | object | `{}` | Add custom dns config | @@ -479,7 +547,7 @@ Kubernetes: `>=v1.18.0-0` | oxpassport.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | oxpassport.image.pullSecrets | list | `[]` | Image Pull Secrets | | oxpassport.image.repository | string | `"gluufederation/oxpassport"` | Image to use for deploying. | -| oxpassport.image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| oxpassport.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | oxpassport.livenessProbe | object | `{"failureThreshold":20,"httpGet":{"path":"/passport/health-check","port":"http-passport"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for oxPassport if needed. | | oxpassport.livenessProbe.httpGet.path | string | `"/passport/health-check"` | http liveness probe endpoint | | oxpassport.readinessProbe | object | `{"failureThreshold":20,"httpGet":{"path":"/passport/health-check","port":"http-passport"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the oxPassport if needed. | @@ -498,7 +566,7 @@ Kubernetes: `>=v1.18.0-0` | oxpassport.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | oxpassport.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | oxpassport.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| oxshibboleth | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxshibboleth","tag":"4.3.0_02"},"livenessProbe":{"httpGet":{"path":"/idp","port":"http-oxshib"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"httpGet":{"path":"/idp","port":"http-oxshib"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1000m","memory":"1000Mi"},"requests":{"cpu":"1000m","memory":"1000Mi"}},"service":{"name":"http-oxshib","oxShibbolethServiceName":"oxshibboleth","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Shibboleth project for the Gluu Server's SAML IDP functionality. | +| oxshibboleth | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxshibboleth","tag":"4.3.1_01"},"livenessProbe":{"httpGet":{"path":"/idp","port":"http-oxshib"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"httpGet":{"path":"/idp","port":"http-oxshib"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1000m","memory":"1000Mi"},"requests":{"cpu":"1000m","memory":"1000Mi"}},"service":{"name":"http-oxshib","oxShibbolethServiceName":"oxshibboleth","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Shibboleth project for the Gluu Server's SAML IDP functionality. | | oxshibboleth.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | oxshibboleth.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | oxshibboleth.dnsConfig | object | `{}` | Add custom dns config | @@ -509,7 +577,7 @@ Kubernetes: `>=v1.18.0-0` | oxshibboleth.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | oxshibboleth.image.pullSecrets | list | `[]` | Image Pull Secrets | | oxshibboleth.image.repository | string | `"gluufederation/oxshibboleth"` | Image to use for deploying. | -| oxshibboleth.image.tag | string | `"4.3.0_02"` | Image tag to use for deploying. | +| oxshibboleth.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | oxshibboleth.livenessProbe | object | `{"httpGet":{"path":"/idp","port":"http-oxshib"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the oxShibboleth if needed. | | oxshibboleth.livenessProbe.httpGet.path | string | `"/idp"` | http liveness probe endpoint | | oxshibboleth.readinessProbe | object | `{"httpGet":{"path":"/idp","port":"http-oxshib"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the casa if needed. | @@ -528,7 +596,7 @@ Kubernetes: `>=v1.18.0-0` | oxshibboleth.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | oxshibboleth.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | oxshibboleth.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| oxtrust | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxtrust","tag":"4.3.0_02"},"livenessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"2500m","memory":"2500Mi"},"requests":{"cpu":"2500m","memory":"2500Mi"}},"service":{"clusterIp":"None","name":"http-oxtrust","oxTrustServiceName":"oxtrust","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Gluu Admin UI. This shouldn't be internet facing. | +| oxtrust | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/oxtrust","tag":"4.3.1_01"},"livenessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"2500m","memory":"2500Mi"},"requests":{"cpu":"2500m","memory":"2500Mi"}},"service":{"clusterIp":"None","name":"http-oxtrust","oxTrustServiceName":"oxtrust","port":8080},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Gluu Admin UI. This shouldn't be internet facing. | | oxtrust.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | oxtrust.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | oxtrust.dnsConfig | object | `{}` | Add custom dns config | @@ -539,7 +607,7 @@ Kubernetes: `>=v1.18.0-0` | oxtrust.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | oxtrust.image.pullSecrets | list | `[]` | Image Pull Secrets | | oxtrust.image.repository | string | `"gluufederation/oxtrust"` | Image to use for deploying. | -| oxtrust.image.tag | string | `"4.3.0_02"` | Image tag to use for deploying. | +| oxtrust.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | oxtrust.livenessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the auth server if needed. | | oxtrust.livenessProbe.exec | object | `{"command":["python3","/app/scripts/healthcheck.py"]}` | Executes the python3 healthcheck. https://github.com/GluuFederation/docker-oxauth/blob/4.3/scripts/healthcheck.py | | oxtrust.readinessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the auth server if needed. https://github.com/GluuFederation/docker-oxauth/blob/4.3/scripts/healthcheck.py | @@ -557,7 +625,7 @@ Kubernetes: `>=v1.18.0-0` | oxtrust.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | oxtrust.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | oxtrust.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| persistence | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/persistence","tag":"4.3.0_01"},"resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Job to generate data and initial config for Gluu Server persistence layer. | +| persistence | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/persistence","tag":"4.3.1_01"},"resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Job to generate data and initial config for Gluu Server persistence layer. | | persistence.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | persistence.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | persistence.dnsConfig | object | `{}` | Add custom dns config | @@ -565,7 +633,7 @@ Kubernetes: `>=v1.18.0-0` | persistence.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | persistence.image.pullSecrets | list | `[]` | Image Pull Secrets | | persistence.image.repository | string | `"gluufederation/persistence"` | Image to use for deploying. | -| persistence.image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| persistence.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | persistence.resources | object | `{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}}` | Resource specs. | | persistence.resources.limits.cpu | string | `"300m"` | CPU limit | | persistence.resources.limits.memory | string | `"300Mi"` | Memory limit. | @@ -576,7 +644,7 @@ Kubernetes: `>=v1.18.0-0` | persistence.usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | persistence.volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | persistence.volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | -| scim | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/scim","tag":"4.3.0_02"},"livenessProbe":{"httpGet":{"path":"/scim/restv1/scim/v2/ServiceProviderConfig","port":8080},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"httpGet":{"path":"/scim/restv1/scim/v2/ServiceProviderConfig","port":8080},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1000m","memory":"1000Mi"},"requests":{"cpu":"1000m","memory":"1000Mi"}},"service":{"name":"http-scim","port":8080,"scimServiceName":"scim"},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | System for Cross-domain Identity Management (SCIM) version 2.0 | +| scim | object | `{"additionalAnnotations":{},"additionalLabels":{},"dnsConfig":{},"dnsPolicy":"","hpa":{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50},"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"gluufederation/scim","tag":"4.3.1_01"},"livenessProbe":{"httpGet":{"path":"/scim/restv1/scim/v2/ServiceProviderConfig","port":8080},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5},"readinessProbe":{"httpGet":{"path":"/scim/restv1/scim/v2/ServiceProviderConfig","port":8080},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5},"replicas":1,"resources":{"limits":{"cpu":"1000m","memory":"1000Mi"},"requests":{"cpu":"1000m","memory":"1000Mi"}},"service":{"name":"http-scim","port":8080,"scimServiceName":"scim"},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | System for Cross-domain Identity Management (SCIM) version 2.0 | | scim.additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | scim.additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | scim.dnsConfig | object | `{}` | Add custom dns config | @@ -587,7 +655,7 @@ Kubernetes: `>=v1.18.0-0` | scim.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | scim.image.pullSecrets | list | `[]` | Image Pull Secrets | | scim.image.repository | string | `"gluufederation/scim"` | Image to use for deploying. | -| scim.image.tag | string | `"4.3.0_02"` | Image tag to use for deploying. | +| scim.image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | scim.livenessProbe | object | `{"httpGet":{"path":"/scim/restv1/scim/v2/ServiceProviderConfig","port":8080},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for SCIM if needed. | | scim.livenessProbe.httpGet.path | string | `"/scim/restv1/scim/v2/ServiceProviderConfig"` | http liveness probe endpoint | | scim.readinessProbe | object | `{"httpGet":{"path":"/scim/restv1/scim/v2/ServiceProviderConfig","port":8080},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the SCIM if needed. | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/casa/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/casa/Chart.yaml index ad453dc0e..e3a6b8eaf 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/casa/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/casa/Chart.yaml @@ -20,4 +20,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://casa.gluu.org/wp-content/themes/gluucasa/casafavicon.ico -appVersion: "4.3.0" \ No newline at end of file +appVersion: "4.3.1" \ No newline at end of file diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/casa/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/casa/README.md index 6d7c0143d..5a9bb3f7c 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/casa/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/casa/README.md @@ -1,6 +1,6 @@ # casa -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Gluu Casa ("Casa") is a self-service web portal for end-users to manage authentication and authorization preferences for their account in a Gluu Server. @@ -20,7 +20,7 @@ Gluu Casa ("Casa") is a self-service web portal for end-users to manage authenti ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -40,7 +40,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/casa"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | livenessProbe | object | `{"httpGet":{"path":"/casa/health-check","port":"http-casa"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the liveness healthcheck for casa if needed. | | livenessProbe.httpGet.path | string | `"/casa/health-check"` | http liveness probe endpoint | | nameOverride | string | `""` | | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/casa/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/casa/values.yaml index 48684a340..260634ff1 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/casa/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/casa/values.yaml @@ -29,7 +29,7 @@ image: # -- Image to use for deploying. repository: gluufederation/casa # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/config/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/config/Chart.yaml index 6ac263f47..fa8d43595 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/config/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/config/Chart.yaml @@ -19,4 +19,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/config/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/config/README.md index 19e5f3a68..d45c5ec29 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/config/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/config/README.md @@ -1,6 +1,6 @@ # config -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Configuration parameters for setup and initial configuration secret and config layers used by Gluu services. @@ -20,7 +20,7 @@ Configuration parameters for setup and initial configuration secret and config l ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -102,7 +102,7 @@ Kubernetes: `>=v1.18.0-0` | email | string | `"support@gluu.com"` | Email address of the administrator usually. Used for certificate creation. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/config-init"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | ldapPass | string | `"P@ssw0rd"` | LDAP admin password if OpennDJ is used for persistence. | | migration | object | `{"enabled":false,"migrationDataFormat":"ldif","migrationDir":"/ce-migration"}` | CE to CN Migration section | | migration.enabled | bool | `false` | Boolean flag to enable migration from CE | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/config/templates/configmaps.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/config/templates/configmaps.yaml index 051deabdb..bc4d1bc45 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/config/templates/configmaps.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/config/templates/configmaps.yaml @@ -48,8 +48,34 @@ data: GLUU_JACKRABBIT_URL: {{ .Values.configmap.gluuJackrabbitUrl | quote }} DOMAIN: {{ .Values.global.domain | quote }} GLUU_OXAUTH_BACKEND: {{ .Values.configmap.gluuOxauthBackend | quote }} + GLUU_OXAUTH_APP_LOGGERS: {{ .Values.global.oxauth.appLoggers + | toJson + | replace "authLogTarget" "oxauth_log_target" + | replace "authLogLevel" "oxauth_log_level" + | replace "httpLogTarget" "http_log_target" + | replace "httpLogLevel" "http_log_level" + | replace "persistenceLogTarget" "persistence_log_target" + | replace "persistenceLogLevel" "persistence_log_level" + | replace "persistenceDurationLogTarget" "persistence_duration_log_target" + | replace "persistenceDurationLogLevel" "persistence_duration_log_level" + | replace "ldapStatsLogTarget" "ldap_stats_log_target" + | replace "ldapStatsLogLevel" "ldap_stats_log_level" + | replace "scriptLogTarget" "script_log_target" + | replace "scriptLogLevel" "script_log_level" + | replace "auditStatsLogTarget" "audit_log_target" + | replace "auditStatsLogLevel" "audit_log_level" + | replace "cleanerLogTarget" "cleaner_log_target" + | replace "cleanerLogLevel" "cleaner_log_level" + | squote + }} GLUU_OXD_SERVER_URL: {{ .Values.configmap.gluuOxdServerUrl | quote }} GLUU_OXD_BIND_IP_ADDRESSES: {{ .Values.configmap.gluuOxdBindIpAddresses | quote }} + GLUU_OXD_APP_LOGGERS: {{ index .Values "global" "oxd-server" "appLoggers" + | toJson + | replace "oxdServerLogTarget" "oxd_log_target" + | replace "oxdServerLogLevel" "oxd_log_level" + | squote + }} {{- if and (eq .Values.global.isDomainRegistered "false") (or (eq .Values.global.storageClass.provisioner "kubernetes.io/aws-ebs") (eq .Values.global.storageClass.provisioner "openebs.io/local")) }} LB_ADDR: {{ .Values.configmap.lbAddr }} {{- end }} @@ -82,6 +108,42 @@ data: GLUU_CERT_ALT_NAME: {{ .Values.global.ldapServiceName }} #{{ template "gluu.fullname" . }}-service GLUU_SYNC_CASA_MANIFESTS: {{ .Values.configmap.gluuSyncCasaManifests | quote }} GLUU_OXTRUST_BACKEND: {{ .Values.configmap.gluuOxtrustBackend | quote }} + GLUU_OXTRUST_APP_LOGGERS: {{ .Values.global.oxtrust.appLoggers + | toJson + | replace "oxtrustLogTarget" "oxtrust_log_target" + | replace "oxtrustLogLevel" "oxtrust_log_level" + | replace "httpLogTarget" "http_log_target" + | replace "httpLogLevel" "http_log_level" + | replace "persistenceLogTarget" "persistence_log_target" + | replace "persistenceLogLevel" "persistence_log_level" + | replace "persistenceDurationLogTarget" "persistence_duration_log_target" + | replace "persistenceDurationLogLevel" "persistence_duration_log_level" + | replace "ldapStatsLogTarget" "ldap_stats_log_target" + | replace "ldapStatsLogLevel" "ldap_stats_log_level" + | replace "scriptLogTarget" "script_log_target" + | replace "scriptLogLevel" "script_log_level" + | replace "auditStatsLogTarget" "audit_log_target" + | replace "auditStatsLogLevel" "audit_log_level" + | replace "cleanerLogTarget" "cleaner_log_target" + | replace "cleanerLogLevel" "cleaner_log_level" + | replace "velocityLogLevel" "velocity_log_level" + | replace "velocityLogTarget" "velocity_log_target" + | replace "cacheRefreshLogLevel" "cache_refresh_log_level" + | replace "cacheRefreshLogTarget" "cache_refresh_log_target" + | replace "cacheRefreshPythonLogLevel" "cache_refresh_python_log_level" + | replace "cacheRefreshPythonLogTarget" "cache_refresh_python_log_target" + | replace "apachehcLogLevel" "apachehc_log_level" + | replace "apachehcLogTarget" "apachehc_log_target" + | squote + }} + GLUU_FIDO2_APP_LOGGERS: {{ .Values.global.fido2.appLoggers + | toJson + | replace "fido2LogTarget" "fido2_log_target" + | replace "fido2LogLevel" "fido2_log_level" + | replace "persistenceLogTarget" "persistence_log_target" + | replace "persistenceLogLevel" "persistence_log_level" + | squote + }} GLUU_SYNC_SHIB_MANIFESTS: {{ .Values.configmap.gluuSyncShibManifests | quote }} GLUU_OXTRUST_API_ENABLED: {{ .Values.configmap.gluuOxtrustApiEnabled | quote }} GLUU_OXTRUST_API_TEST_MODE: {{ .Values.configmap.gluuOxtrustApiTestMode | quote }} @@ -100,8 +162,28 @@ data: GLUU_PASSPORT_ENABLED: {{ .Values.configmap.gluuPassportEnabled | quote }} GLUU_SCIM_ENABLED: {{ .Values.global.scim.enabled | quote }} GLUU_SCIM_PROTECTION_MODE: {{ .Values.configmap.gluuScimProtectionMode | quote }} + GLUU_SCIM_APP_LOGGERS: {{ .Values.global.scim.appLoggers + | toJson + | replace "scimLogTarget" "scim_log_target" + | replace "scimLogLevel" "scim_log_level" + | replace "persistenceLogTarget" "persistence_log_target" + | replace "persistenceLogLevel" "persistence_log_level" + | replace "persistenceDurationLogTarget" "persistence_duration_log_target" + | replace "persistenceDurationLogLevel" "persistence_duration_log_level" + | replace "scriptLogTarget" "script_log_target" + | replace "scriptLogLevel" "script_log_level" + | squote + }} {{- if .Values.global.oxshibboleth.enabled }} GLUU_SAML_ENABLED: {{ .Values.configmap.gluuSamlEnabled | quote }} + GLUU_OXSHIBBOLETH_APP_LOGGERS: {{ .Values.global.oxshibboleth.appLoggers + | toJson + | replace "fido2LogTarget" "fido2_log_target" + | replace "fido2LogLevel" "fido2_log_level" + | replace "persistenceLogTarget" "persistence_log_target" + | replace "persistenceLogLevel" "persistence_log_level" + | squote + }} {{- end }} GLUU_OXD_APPLICATION_CERT_CN: {{ .Values.configmap.gluuOxdApplicationCertCn | quote }} GLUU_OXD_ADMIN_CERT_CN: {{ .Values.configmap.gluuOxdAdminCertCn | quote }} diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/config/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/config/values.yaml index 8c65aca29..757ea1130 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/config/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/config/values.yaml @@ -166,7 +166,7 @@ image: # -- Image to use for deploying. repository: gluufederation/config-init # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Configure any additional volumes that need to be attached to the pod diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/Chart.yaml index 1b38435bf..5f3c63b5e 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/Chart.yaml @@ -18,4 +18,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" \ No newline at end of file +appVersion: "4.3.1" \ No newline at end of file diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/README.md index 80c6d22f2..7caf00ea6 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/README.md @@ -1,6 +1,6 @@ # cr-rotate -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) CacheRefreshRotation is a special container to monitor cache refresh on oxTrust containers. This may become depreciated in 5.0. @@ -20,7 +20,7 @@ CacheRefreshRotation is a special container to monitor cache refresh on oxTrust ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -34,7 +34,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/cr-rotate"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | nameOverride | string | `""` | | | resources | object | `{"limits":{"cpu":"200m","memory":"200Mi"},"requests":{"cpu":"200m","memory":"200Mi"}}` | Resource specs. | | resources.limits.cpu | string | `"200m"` | CPU limit. | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/values.yaml index b04fe3821..75a519b0f 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/cr-rotate/values.yaml @@ -19,7 +19,7 @@ image: # -- Image to use for deploying. repository: gluufederation/cr-rotate # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Resource specs. diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/fido2/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/fido2/Chart.yaml index a4bb8a47b..25ac0cbe5 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/fido2/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/fido2/Chart.yaml @@ -19,4 +19,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/fido2/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/fido2/README.md index 4d7c9d9d0..ad74cb023 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/fido2/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/fido2/README.md @@ -1,6 +1,6 @@ # fido2 -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) FIDO 2.0 (FIDO2) is an open authentication standard that enables leveraging common devices to authenticate to online services in both mobile and desktop environments. @@ -20,7 +20,7 @@ FIDO 2.0 (FIDO2) is an open authentication standard that enables leveraging comm ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -36,7 +36,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/fido2"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | livenessProbe | object | `{"httpGet":{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the liveness healthcheck for the fido2 if needed. | | livenessProbe.httpGet | object | `{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"}` | http liveness probe endpoint | | readinessProbe | object | `{"httpGet":{"path":"/fido2/restv1/fido2/configuration","port":"http-fido2"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the readiness healthcheck for the fido2 if needed. | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/fido2/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/fido2/values.yaml index e1e880a06..f25e3de7b 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/fido2/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/fido2/values.yaml @@ -30,7 +30,7 @@ image: # -- Image to use for deploying. repository: gluufederation/fido2 # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/gluu-alb-ingress/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/gluu-alb-ingress/Chart.yaml index 6ceeec1ef..df3617acc 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/gluu-alb-ingress/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/gluu-alb-ingress/Chart.yaml @@ -19,4 +19,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/gluu-alb-ingress/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/gluu-alb-ingress/README.md index aaba1a72d..c93211922 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/gluu-alb-ingress/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/gluu-alb-ingress/README.md @@ -1,6 +1,6 @@ # gluu-alb-ingress -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Nginx ingress definitions chart @@ -20,7 +20,7 @@ Nginx ingress definitions chart ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/gluu-istio-ingress/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/gluu-istio-ingress/Chart.yaml index cc7a0129a..25ab315be 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/gluu-istio-ingress/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/gluu-istio-ingress/Chart.yaml @@ -18,4 +18,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" \ No newline at end of file +appVersion: "4.3.1" \ No newline at end of file diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/gluu-istio-ingress/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/gluu-istio-ingress/README.md index fb4df2365..fe7d71cd1 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/gluu-istio-ingress/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/gluu-istio-ingress/README.md @@ -1,6 +1,6 @@ # gluu-istio-ingress -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Istio Gateway @@ -19,7 +19,7 @@ Istio Gateway ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ---------------------------------------------- Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0) diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/Chart.yaml index 9937aa12f..73e13aef2 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/Chart.yaml @@ -20,4 +20,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" \ No newline at end of file +appVersion: "4.3.1" \ No newline at end of file diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/README.md index 8a333428f..8df90cf71 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/README.md @@ -1,6 +1,6 @@ # jackrabbit -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Jackrabbit Oak is a complementary implementation of the JCR specification. It is an effort to implement a scalable and performant hierarchical content repository for use as the foundation of modern world-class web sites and other demanding content applications. @@ -21,7 +21,7 @@ Jackrabbit Oak is a complementary implementation of the JCR specification. It is ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -42,7 +42,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/jackrabbit"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | jackrabbitVolumeMounts.repository.mountPath | string | `"/opt/jackrabbit/repository"` | | | jackrabbitVolumeMounts.repository.name | string | `"jackrabbit-volume"` | | | jackrabbitVolumeMounts.version.mountPath | string | `"/opt/jackrabbit/version"` | | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/values.yaml index 83880850a..9fabcabc7 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/jackrabbit/values.yaml @@ -31,7 +31,7 @@ image: # -- Image to use for deploying. repository: gluufederation/jackrabbit # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/nginx-ingress/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/nginx-ingress/Chart.yaml index eef4aa351..11579d6f2 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/nginx-ingress/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/nginx-ingress/Chart.yaml @@ -19,4 +19,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/nginx-ingress/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/nginx-ingress/README.md index c78a92422..d15394f71 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/nginx-ingress/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/nginx-ingress/README.md @@ -1,6 +1,6 @@ # nginx-ingress -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Nginx ingress definitions chart @@ -20,7 +20,7 @@ Nginx ingress definitions chart ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/opendj/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/opendj/Chart.yaml index bf258a4c9..7d6373808 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/opendj/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/opendj/Chart.yaml @@ -18,4 +18,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/opendj/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/opendj/README.md index 5a4189127..2adcebe2e 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/opendj/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/opendj/README.md @@ -1,6 +1,6 @@ # opendj -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) OpenDJ is a directory server which implements a wide range of Lightweight Directory Access Protocol and related standards, including full compliance with LDAPv3 but also support for Directory Service Markup Language (DSMLv2).Written in Java, OpenDJ offers multi-master replication, access control, and many extensions. @@ -19,7 +19,7 @@ OpenDJ is a directory server which implements a wide range of Lightweight Direct ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -49,7 +49,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/opendj"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | livenessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"failureThreshold":20,"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for OpenDJ if needed. https://github.com/GluuFederation/docker-opendj/blob/4.3/scripts/healthcheck.py | | livenessProbe.exec | object | `{"command":["python3","/app/scripts/healthcheck.py"]}` | Executes the python3 healthcheck. | | multiCluster.clusterId | string | `""` | This id needs to be unique to each kubernetes cluster in a multi cluster setup west, east, south, north, region ...etc If left empty it will be randomly generated. | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/opendj/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/opendj/values.yaml index b19f3a15f..d3121b2a1 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/opendj/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/opendj/values.yaml @@ -29,7 +29,7 @@ image: # -- Image to use for deploying. repository: gluufederation/opendj # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] multiCluster: diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/Chart.yaml index fc490f234..18a5c617c 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/Chart.yaml @@ -17,7 +17,7 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/README.md index 9af972ad3..acd6a2068 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/README.md @@ -1,6 +1,6 @@ # oxauth-key-rotation -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Responsible for regenerating auth-keys per x hours @@ -19,7 +19,7 @@ Responsible for regenerating auth-keys per x hours ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -33,7 +33,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/certmanager"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | keysLife | int | `48` | Auth server key rotation keys life in hours | | nodeSelector | object | `{}` | | | resources | object | `{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}}` | Resource specs. | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/values.yaml index 42ee24530..5da5e0c32 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth-key-rotation/values.yaml @@ -19,7 +19,7 @@ image: # -- Image to use for deploying. repository: gluufederation/certmanager # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Auth server key rotation keys life in hours diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/Chart.yaml index ce288825c..8c8422198 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/Chart.yaml @@ -18,5 +18,5 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/README.md index 15c4d78e1..6bf241c2f 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/README.md @@ -1,6 +1,6 @@ # oxauth -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) OAuth Authorization Server, the OpenID Connect Provider, the UMA Authorization Server--this is the main Internet facing component of Gluu. It's the service that returns tokens, JWT's and identity assertions. This service must be Internet facing. @@ -19,7 +19,7 @@ OAuth Authorization Server, the OpenID Connect Provider, the UMA Authorization S ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -38,7 +38,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/oxauth"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | livenessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the auth server if needed. | | livenessProbe.exec | object | `{"command":["python3","/app/scripts/healthcheck.py"]}` | Executes the python3 healthcheck. https://github.com/GluuFederation/docker-oxauth/blob/4.3/scripts/healthcheck.py | | readinessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the auth server if needed. https://github.com/GluuFederation/docker-oxauth/blob/4.3/scripts/healthcheck.py | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/values.yaml index 2b9e87622..fa1cf4ccf 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxauth/values.yaml @@ -29,7 +29,7 @@ image: # -- Image to use for deploying. repository: gluufederation/oxauth # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/Chart.yaml index e549be188..879e9d87f 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/Chart.yaml @@ -18,4 +18,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/README.md index 6557117f9..4d1e45d8f 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/README.md @@ -1,6 +1,6 @@ # oxd-server -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Middleware API to help application developers call an OAuth, OpenID or UMA server. You may wonder why this is necessary. It makes it easier for client developers to use OpenID signing and encryption features, without becoming crypto experts. This API provides some high level endpoints to do some of the heavy lifting. @@ -19,7 +19,7 @@ Middleware API to help application developers call an OAuth, OpenID or UMA serve ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -39,7 +39,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/oxd-server"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | livenessProbe | object | `{"exec":{"command":["curl","-k","https://localhost:8443/health-check"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the auth server if needed. | | livenessProbe.exec | object | `{"command":["curl","-k","https://localhost:8443/health-check"]}` | Executes the python3 healthcheck. | | nodeSelector | object | `{}` | | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/values.yaml index 121a0ff85..5778714dc 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxd-server/values.yaml @@ -29,7 +29,7 @@ image: # -- Image to use for deploying. repository: gluufederation/oxd-server # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/Chart.yaml index fd9a6eaf6..2b3e31396 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/Chart.yaml @@ -19,4 +19,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/README.md index 43ec61352..541f62699 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/README.md @@ -1,6 +1,6 @@ # oxpassport -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Gluu interface to Passport.js to support social login and inbound identity. @@ -19,7 +19,7 @@ Gluu interface to Passport.js to support social login and inbound identity. ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -40,7 +40,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/oxpassport"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | livenessProbe | object | `{"failureThreshold":20,"httpGet":{"path":"/passport/health-check","port":"http-passport"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for oxPassport if needed. | | livenessProbe.httpGet.path | string | `"/passport/health-check"` | http liveness probe endpoint | | nameOverride | string | `""` | | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/values.yaml index e423bb9d7..7e242a70f 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxpassport/values.yaml @@ -29,7 +29,7 @@ image: # -- Image to use for deploying. repository: gluufederation/oxpassport # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/Chart.yaml index 5e0ab8548..f68ca0d85 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/Chart.yaml @@ -18,4 +18,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/README.md index 5215c4f23..74ef504a9 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/README.md @@ -1,6 +1,6 @@ # oxshibboleth -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Shibboleth project for the Gluu Server's SAML IDP functionality. @@ -19,7 +19,7 @@ Shibboleth project for the Gluu Server's SAML IDP functionality. ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -40,7 +40,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/oxshibboleth"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | livenessProbe | object | `{"httpGet":{"path":"/idp","port":"http-oxshib"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the oxShibboleth if needed. | | livenessProbe.httpGet.path | string | `"/idp"` | http liveness probe endpoint | | nameOverride | string | `""` | | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/values.yaml index 72ea7ed7f..225345713 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxshibboleth/values.yaml @@ -29,7 +29,7 @@ image: # -- Image to use for deploying. repository: gluufederation/oxshibboleth # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/Chart.yaml index 4d706525f..1d5f9dae0 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/Chart.yaml @@ -18,4 +18,4 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/README.md index d5b46f4b3..747855a84 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/README.md @@ -1,6 +1,6 @@ # oxtrust -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Gluu Admin UI. This shouldn't be internet facing. @@ -19,7 +19,7 @@ Gluu Admin UI. This shouldn't be internet facing. ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -38,7 +38,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/oxtrust"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | livenessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the auth server if needed. | | livenessProbe.exec | object | `{"command":["python3","/app/scripts/healthcheck.py"]}` | Executes the python3 healthcheck. https://github.com/GluuFederation/docker-oxauth/blob/4.3/scripts/healthcheck.py | | readinessProbe | object | `{"exec":{"command":["python3","/app/scripts/healthcheck.py"]},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the auth server if needed. https://github.com/GluuFederation/docker-oxauth/blob/4.3/scripts/healthcheck.py | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/values.yaml index acdb213a4..4a3507c7f 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/oxtrust/values.yaml @@ -29,7 +29,7 @@ image: # -- Image to use for deploying. repository: gluufederation/oxtrust # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/persistence/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/persistence/Chart.yaml index a29a2d0f8..b32be4bec 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/persistence/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/persistence/Chart.yaml @@ -17,5 +17,5 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/persistence/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/persistence/README.md index dd5f2948c..268d0bf5a 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/persistence/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/persistence/README.md @@ -1,6 +1,6 @@ # persistence -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) Job to generate data and initial config for Gluu Server persistence layer. @@ -19,7 +19,7 @@ Job to generate data and initial config for Gluu Server persistence layer. ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -33,7 +33,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/persistence"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | imagePullSecrets | list | `[]` | | | nameOverride | string | `""` | | | resources | object | `{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}}` | Resource specs. | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/persistence/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/persistence/values.yaml index d4c84f4b6..dcc507d63 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/persistence/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/persistence/values.yaml @@ -19,7 +19,7 @@ image: # -- Image to use for deploying. repository: gluufederation/persistence # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Resource specs. diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/scim/Chart.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/scim/Chart.yaml index a1c8511b6..ed0f867a6 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/scim/Chart.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/scim/Chart.yaml @@ -19,5 +19,5 @@ maintainers: email: support@gluu.org url: https://github.com/moabu icon: https://gluu.org/docs/gluu-server/favicon.ico -appVersion: "4.3.0" +appVersion: "4.3.1" diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/scim/README.md b/pygluu/kubernetes/templates/helm/gluu/charts/scim/README.md index 1ada693c4..23faa692b 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/scim/README.md +++ b/pygluu/kubernetes/templates/helm/gluu/charts/scim/README.md @@ -1,6 +1,6 @@ # scim -![version: 1.6.15](https://img.shields.io/badge/Version-1.6.14-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.0](https://img.shields.io/badge/AppVersion-4.3.0-informational?style=flat-square) +![Version: 1.6.15](https://img.shields.io/badge/Version-1.6.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 4.3.1](https://img.shields.io/badge/AppVersion-4.3.1-informational?style=flat-square) System for Cross-domain Identity Management (SCIM) version 2.0 @@ -20,7 +20,7 @@ System for Cross-domain Identity Management (SCIM) version 2.0 ## Requirements -Kubernetes: `>=v1.18.0-0` +Kubernetes: `>=v1.21.0-0` ## Values @@ -39,7 +39,7 @@ Kubernetes: `>=v1.18.0-0` | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | image.pullSecrets | list | `[]` | Image Pull Secrets | | image.repository | string | `"gluufederation/scim"` | Image to use for deploying. | -| image.tag | string | `"4.3.0_01"` | Image tag to use for deploying. | +| image.tag | string | `"4.3.1_01"` | Image tag to use for deploying. | | livenessProbe | object | `{"httpGet":{"path":"/scim/restv1/scim/v2/ServiceProviderConfig","port":8080},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for SCIM if needed. | | livenessProbe.httpGet.path | string | `"/scim/restv1/scim/v2/ServiceProviderConfig"` | http liveness probe endpoint | | readinessProbe | object | `{"httpGet":{"path":"/scim/restv1/scim/v2/ServiceProviderConfig","port":8080},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the SCIM if needed. | diff --git a/pygluu/kubernetes/templates/helm/gluu/charts/scim/values.yaml b/pygluu/kubernetes/templates/helm/gluu/charts/scim/values.yaml index c997da73f..f00f3e116 100644 --- a/pygluu/kubernetes/templates/helm/gluu/charts/scim/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/charts/scim/values.yaml @@ -29,7 +29,7 @@ image: # -- Image to use for deploying. repository: gluufederation/scim # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. diff --git a/pygluu/kubernetes/templates/helm/gluu/values.yaml b/pygluu/kubernetes/templates/helm/gluu/values.yaml index 01488cad3..0a255edb5 100644 --- a/pygluu/kubernetes/templates/helm/gluu/values.yaml +++ b/pygluu/kubernetes/templates/helm/gluu/values.yaml @@ -70,7 +70,7 @@ global: # -- Image to use for deploying. repository: gluufederation/upgrade # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Source version currently running. This is normally one minor version down. # The step should only be one minor version per upgrade sourceVersion: "4.2" @@ -120,12 +120,80 @@ global: oxauth: # -- Boolean flag to enable/disable oxauth chart. You should never set this to false. enabled: true + # -- App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. + # log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" + # Targets are "STDOUT" and "FILE" + appLoggers: + # -- oxauth.log target + authLogTarget: "STDOUT" + # -- oxauth.log level + authLogLevel: "INFO" + # -- http_request_response.log target + httpLogTarget: "FILE" + # -- http_request_response.log level + httpLogLevel: "INFO" + # -- oxauth_persistence.log target + persistenceLogTarget: "FILE" + # -- oxauth_persistence.log level + persistenceLogLevel: "INFO" + # -- oxauth_persistence_duration.log target + persistenceDurationLogTarget: "FILE" + # -- oxauth_persistence_duration.log level + persistenceDurationLogLevel: "INFO" + # -- oxauth_persistence_ldap_statistics.log target + ldapStatsLogTarget: "FILE" + # -- oxauth_persistence_ldap_statistics.log level + ldapStatsLogLevel: "INFO" + # -- oxauth_script.log target + scriptLogTarget: "FILE" + # -- oxauth_script.log level + scriptLogLevel: "INFO" + # -- oxauth_script.log target + auditStatsLogTarget: "FILE" + # -- oxauth_audit.log level + auditStatsLogLevel: "INFO" + # -- cleaner log target + cleanerLogTarget: "FILE" + # -- cleaner log level + cleanerLogLevel: "INFO" fido2: # -- Boolean flag to enable/disable the fido2 chart. enabled: false + # -- App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. + # log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" + # Targets are "STDOUT" and "FILE" + appLoggers: + # -- fido2.log target + fido2LogTarget: "STDOUT" + # -- fido2.log level + fido2LogLevel: "INFO" + # -- fido2_persistence.log target + persistenceLogTarget: "FILE" + # -- fido2_persistence.log level + persistenceLogLevel: "INFO" scim: # -- Boolean flag to enable/disable the SCIM chart. enabled: false + # -- App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. + # log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" + # Targets are "STDOUT" and "FILE" + appLoggers: + # -- scim.log target + scimLogTarget: "STDOUT" + # -- scim.log level + scimLogLevel: "INFO" + # -- scim_persistence.log target + persistenceLogTarget: "FILE" + # -- scim_persistence.log level + persistenceLogLevel: "INFO" + # -- scim_persistence_duration.log target + persistenceDurationLogTarget: "FILE" + # -- scim_persistence_duration.log level + persistenceDurationLogLevel: "INFO" + # -- scim_script.log target + scriptLogTarget: "FILE" + # -- scim_script.log level + scriptLogLevel: "INFO" config: # -- Boolean flag to enable/disable the configuration chart. This normally should never be false enabled: true @@ -138,15 +206,96 @@ global: oxtrust: # -- Boolean flag to enable/disable the oxtrust chart. enabled: true + # -- App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. + # log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" + # Targets are "STDOUT" and "FILE" + appLoggers: + # -- oxtrust.log target + oxtrustLogTarget: "STDOUT" + # -- oxtrust.log level + oxtrustLogLevel: "INFO" + # -- http_request_response.log target + httpLogTarget: "FILE" + # -- http_request_response.log level + httpLogLevel: "INFO" + # -- oxtrust_persistence.log target + persistenceLogTarget: "FILE" + # -- oxtrust_persistence.log level + persistenceLogLevel: "INFO" + # -- oxtrust_persistence_duration.log target + persistenceDurationLogTarget: "FILE" + # -- oxtrust_persistence_duration.log level + persistenceDurationLogLevel: "INFO" + # -- oxtrust_persistence_ldap_statistics.log target + ldapStatsLogTarget: "FILE" + # -- oxtrust_persistence_ldap_statistics.log level + ldapStatsLogLevel: "INFO" + # -- oxtrust_script.log target + scriptLogTarget: "FILE" + # -- oxtrust_script.log level + scriptLogLevel: "INFO" + # -- oxtrust_script.log target + auditStatsLogTarget: "FILE" + # -- oxtrust_audit.log level + auditStatsLogLevel: "INFO" + # -- cleaner log target + cleanerLogTarget: "FILE" + # -- cleaner log target + cleanerLogLevel: "INFO" + # -- velocity log level + velocityLogLevel: "INFO" + # -- velocity log target + velocityLogTarget: "FILE" + # -- cache refresh log level + cacheRefreshLogLevel: "INFO" + # -- cache refresh log target + cacheRefreshLogTarget: "FILE" + # -- cleaner log level + cacheRefreshPythonLogLevel: "INFO" + # -- cache refresh python log target + cacheRefreshPythonLogTarget: "FILE" + # -- apachehc log level + apachehcLogLevel: "INFO" + # -- apachehc log target + apachehcLogTarget: "FILE" opendj: # -- Boolean flag to enable/disable the OpenDJ chart. enabled: true oxshibboleth: # -- Boolean flag to enable/disable the oxShibbboleth chart. enabled: false + # -- App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. + # log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" + # Targets are "STDOUT" and "FILE" + appLoggers: + # -- idp-process.log target + idpLogTarget: "STDOUT" + # -- idp-process.log level + idpLogLevel: "INFO" + # -- idp script.log target + scriptLogTarget: "FILE" + # -- idp script.log level + scriptLogLevel: "INFO" + # -- idp-audit.log target + auditStatsLogTarget: "FILE" + # -- idp-audit.log level + auditStatsLogLevel: "INFO" + # -- idp-consent-audit.log target + consentAuditLogTarget: "FILE" + # -- idp-consent-audit.log level + consentAuditLogLevel: "INFO" + oxd-server: # -- Boolean flag to enable/disable the oxd-server chart. enabled: false + # -- App loggers can be configured to define where the logs will be redirected to and the level of each in which it should be displayed. + # log levels are "OFF", "FATAL", "ERROR", "WARN", "INFO", "DEBUG", "TRACE" + # Targets are "STDOUT" and "FILE" + appLoggers: + # -- oxd-server.log target + oxdServerLogTarget: "STDOUT" + # -- oxd-server.log level + oxdServerLogLevel: "INFO" nginx-ingress: # -- Boolean flag to enable/disable the nginx-ingress definitions chart. enabled: true @@ -324,7 +473,7 @@ config: # -- Image to use for deploying. repository: gluufederation/config-init # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Configure any additional volumes that need to be attached to the pod @@ -502,7 +651,7 @@ jackrabbit: # -- Image to use for deploying. repository: gluufederation/jackrabbit # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. @@ -596,7 +745,7 @@ opendj: # -- Image to use for deploying. repository: gluufederation/opendj # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] multiCluster: @@ -719,7 +868,7 @@ persistence: # -- Image to use for deploying. repository: gluufederation/persistence # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Resource specs. @@ -773,7 +922,7 @@ oxauth: # -- Image to use for deploying. repository: gluufederation/oxauth # -- Image tag to use for deploying. - tag: 4.3.0_02 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. @@ -857,7 +1006,7 @@ oxtrust: # -- Image to use for deploying. repository: gluufederation/oxtrust # -- Image tag to use for deploying. - tag: 4.3.0_02 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. @@ -942,7 +1091,7 @@ fido2: # -- Image to use for deploying. repository: gluufederation/fido2 # -- Image tag to use for deploying. - tag: 4.3.0_02 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. @@ -1022,7 +1171,7 @@ scim: # -- Image to use for deploying. repository: gluufederation/scim # -- Image tag to use for deploying. - tag: 4.3.0_02 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. @@ -1102,7 +1251,7 @@ oxd-server: # -- Image to use for deploying. repository: gluufederation/oxd-server # -- Image tag to use for deploying. - tag: 4.3.0_02 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. @@ -1183,7 +1332,7 @@ casa: # -- Image to use for deploying. repository: gluufederation/casa # -- Image tag to use for deploying. - tag: 4.3.0_02 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. @@ -1264,7 +1413,7 @@ oxpassport: # -- Image to use for deploying. repository: gluufederation/oxpassport # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number @@ -1347,7 +1496,7 @@ oxshibboleth: # -- Image to use for deploying. repository: gluufederation/oxshibboleth # -- Image tag to use for deploying. - tag: 4.3.0_02 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Service replica number. @@ -1418,7 +1567,7 @@ cr-rotate: # -- Image to use for deploying. repository: gluufederation/cr-rotate # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Resource specs. @@ -1469,7 +1618,7 @@ oxauth-key-rotation: # -- Image to use for deploying. repository: gluufederation/certmanager # -- Image tag to use for deploying. - tag: 4.3.0_01 + tag: 4.3.1_01 # -- Image Pull Secrets pullSecrets: [ ] # -- Auth server key rotation keys life in hours