-
Notifications
You must be signed in to change notification settings - Fork 78
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore: migration from Flex casa (#6172)
* chore: migration from Flex casa #6165 * feat(jans-linux-setup): casa to jans-casa migration * docs(casa): add casa to the navigation Co-authored-by: jgomer2001 <bonustrack310@gmail.com> Signed-off-by: ossdhaval <343411+ossdhaval@users.noreply.github.com> * docs(casa): add Casa document files to Janssen docs Co-authored-by: jgomer2001 <bonustrack310@gmail.com> Signed-off-by: ossdhaval <343411+ossdhaval@users.noreply.github.com> * docs(casa): nav fixes Co-authored-by: jgomer2001 <bonustrack310@gmail.com> Signed-off-by: ossdhaval <343411+ossdhaval@users.noreply.github.com> * ci: add casa operations Signed-off-by: moabu <47318409+moabu@users.noreply.github.com> * docs(casa): align admin guide with Jans - replace `Gluu Flex` with `Janssen Server` - Replace `Casa` with `Jans Casa` Signed-off-by: ossdhaval <343411+ossdhaval@users.noreply.github.com> * docs(casa): migrate Jans Casa assets from Flex Signed-off-by: ossdhaval <343411+ossdhaval@users.noreply.github.com> * fix(jans-linux-setup): casa auth script * fix(jans-linux-setup): casa download urls * fix: add casa chart to janssen parent chart Signed-off-by: moabu <47318409+moabu@users.noreply.github.com> --------- Signed-off-by: ossdhaval <343411+ossdhaval@users.noreply.github.com> Signed-off-by: moabu <47318409+moabu@users.noreply.github.com> Co-authored-by: Mustafa Baser <mbaser@mail.com> Co-authored-by: ossdhaval <343411+ossdhaval@users.noreply.github.com> Co-authored-by: moabu <47318409+moabu@users.noreply.github.com>
- Loading branch information
4 people
authored
Oct 5, 2023
1 parent
b4711cd
commit eb4e84a
Showing
520 changed files
with
100,992 additions
and
59 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,22 @@ | ||
| # Patterns to ignore when building packages. | ||
| # This supports shell glob matching, relative path matching, and | ||
| # negation (prefixed with !). Only one pattern per line. | ||
| .DS_Store | ||
| # Common VCS dirs | ||
| .git/ | ||
| .gitignore | ||
| .bzr/ | ||
| .bzrignore | ||
| .hg/ | ||
| .hgignore | ||
| .svn/ | ||
| # Common backup files | ||
| *.swp | ||
| *.bak | ||
| *.tmp | ||
| *~ | ||
| # Various IDEs | ||
| .project | ||
| .idea/ | ||
| *.tmproj | ||
| .vscode/ |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| apiVersion: v2 | ||
| name: casa | ||
| version: 1.0.19-dev | ||
| kubeVersion: ">=v1.21.0-0" | ||
| description: Jans Casa ("Casa") is a self-service web portal for end-users to manage authentication and authorization preferences for their account in a Jans Server. | ||
| type: application | ||
| keywords: | ||
| - casa | ||
| - 2FA | ||
| - passwordless | ||
| home: https://gluu.org/docs/casa/ | ||
| sources: | ||
| - https://gluu.org/casa/ | ||
| - https://github.com/JanssenProject/jans/docker-jans-casa | ||
| maintainers: | ||
| - name: Mohammad Abudayyeh | ||
| email: support@jans.io | ||
| url: https://github.com/moabu | ||
| icon: https://github.com/JanssenProject/jans/raw/main/docs/assets/logo/janssen_project_favicon_transparent_50px_50px.png | ||
| appVersion: "1.0.19-dev" |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,65 @@ | ||
| # casa | ||
|
|
||
|    | ||
|
|
||
| Jans Casa ("Casa") is a self-service web portal for end-users to manage authentication and authorization preferences for their account in a Jans Server. | ||
|
|
||
| **Homepage:** <https://gluu.org/docs/casa/> | ||
|
|
||
| ## Maintainers | ||
|
|
||
| | Name | Email | Url | | ||
| | ---- | ------ | --- | | ||
| | Mohammad Abudayyeh | <support@jans.io> | <https://github.com/moabu> | | ||
|
|
||
| ## Source Code | ||
|
|
||
| * <https://gluu.org/casa/> | ||
| * <https://github.com/JanssenProject/jans/docker-jans-casa> | ||
|
|
||
| ## Requirements | ||
|
|
||
| Kubernetes: `>=v1.21.0-0` | ||
|
|
||
| ## Values | ||
|
|
||
| | Key | Type | Default | Description | | ||
| |-----|------|---------|-------------| | ||
| | additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | ||
| | additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | ||
| | dnsConfig | object | `{}` | Add custom dns config | | ||
| | dnsPolicy | string | `""` | Add custom dns policy | | ||
| | fullnameOverride | string | `""` | | | ||
| | hpa | object | `{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50}` | Configure the HorizontalPodAutoscaler | | ||
| | hpa.behavior | object | `{}` | Scaling Policies | | ||
| | hpa.metrics | list | `[]` | metrics if targetCPUUtilizationPercentage is not set | | ||
| | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | ||
| | image.pullSecrets | list | `[]` | Image Pull Secrets | | ||
| | image.repository | string | `"janssenproject/casa"` | Image to use for deploying. | | ||
| | image.tag | string | `"1.0.19_dev"` | Image tag to use for deploying. | | ||
| | lifecycle | object | `{}` | | | ||
| | livenessProbe | object | `{"httpGet":{"path":"/casa/health-check","port":"http-casa"},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the liveness healthcheck for casa if needed. | | ||
| | livenessProbe.httpGet.path | string | `"/casa/health-check"` | http liveness probe endpoint | | ||
| | nameOverride | string | `""` | | | ||
| | podSecurityContext | object | `{}` | | | ||
| | readinessProbe | object | `{"httpGet":{"path":"/casa/health-check","port":"http-casa"},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the readiness healthcheck for the casa if needed. | | ||
| | readinessProbe.httpGet.path | string | `"/casa/health-check"` | http readiness probe endpoint | | ||
| | replicas | int | `1` | Service replica number. | | ||
| | resources | object | `{"limits":{"cpu":"500m","memory":"500Mi"},"requests":{"cpu":"500m","memory":"500Mi"}}` | Resource specs. | | ||
| | resources.limits.cpu | string | `"500m"` | CPU limit. | | ||
| | resources.limits.memory | string | `"500Mi"` | Memory limit. | | ||
| | resources.requests.cpu | string | `"500m"` | CPU request. | | ||
| | resources.requests.memory | string | `"500Mi"` | Memory request. | | ||
| | securityContext | object | `{}` | | | ||
| | service.name | string | `"http-casa"` | The name of the casa port within the casa service. Please keep it as default. | | ||
| | service.port | int | `8080` | Port of the casa service. Please keep it as default. | | ||
| | service.sessionAffinity | string | `"None"` | Default set to None If you want to make sure that connections from a particular client are passed to the same Pod each time, you can select the session affinity based on the client's IP addresses by setting this to ClientIP | | ||
| | service.sessionAffinityConfig | object | `{"clientIP":{"timeoutSeconds":10800}}` | the maximum session sticky time if sessionAffinity is ClientIP | | ||
| | usrEnvs | object | `{"normal":{},"secret":{}}` | Add custom normal and secret envs to the service | | ||
| | usrEnvs.normal | object | `{}` | Add custom normal envs to the service variable1: value1 | | ||
| | usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | ||
| | volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | ||
| | volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod | | ||
|
|
||
| ---------------------------------------------- | ||
| Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,109 @@ | ||
| {{/* vim: set filetype=mustache: */}} | ||
| {{/* | ||
| Expand the name of the chart. | ||
| */}} | ||
| {{- define "casa.name" -}} | ||
| {{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} | ||
| {{- end -}} | ||
|
|
||
| {{/* | ||
| Create a default fully qualified app name. | ||
| We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). | ||
| If release name contains chart name it will be used as a full name. | ||
| */}} | ||
| {{- define "casa.fullname" -}} | ||
| {{- if .Values.fullnameOverride -}} | ||
| {{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} | ||
| {{- else -}} | ||
| {{- $name := default .Chart.Name .Values.nameOverride -}} | ||
| {{- if contains $name .Release.Name -}} | ||
| {{- .Release.Name | trunc 63 | trimSuffix "-" -}} | ||
| {{- else -}} | ||
| {{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} | ||
| {{- end -}} | ||
| {{- end -}} | ||
| {{- end -}} | ||
|
|
||
| {{/* | ||
| Create chart name and version as used by the chart label. | ||
| */}} | ||
| {{- define "casa.chart" -}} | ||
| {{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}} | ||
| {{- end -}} | ||
|
|
||
| {{/* | ||
| Common labels | ||
| */}} | ||
| {{- define "casa.labels" -}} | ||
| app: {{ .Release.Name }}-{{ include "casa.name" . }} | ||
| helm.sh/chart: {{ include "casa.chart" . }} | ||
| app.kubernetes.io/instance: {{ .Release.Name }} | ||
| {{- if .Chart.AppVersion }} | ||
| app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} | ||
| {{- end }} | ||
| app.kubernetes.io/managed-by: {{ .Release.Service }} | ||
| {{- end -}} | ||
|
|
||
| {{/* | ||
| Create the name of the service account to use | ||
| */}} | ||
| {{- define "casa.serviceAccountName" -}} | ||
| {{- if .Values.serviceAccount.create -}} | ||
| {{ default (include "casa.fullname" .) .Values.serviceAccount.name }} | ||
| {{- else -}} | ||
| {{ default "default" .Values.serviceAccount.name }} | ||
| {{- end -}} | ||
| {{- end -}} | ||
|
|
||
| {{/* | ||
| Create user custom defined envs | ||
| */}} | ||
| {{- define "casa.usr-envs"}} | ||
| {{- range $key, $val := .Values.usrEnvs.normal }} | ||
| - name: {{ $key }} | ||
| value: {{ $val | quote }} | ||
| {{- end }} | ||
| {{- end }} | ||
|
|
||
| {{/* | ||
| Create user custom defined secret envs | ||
| */}} | ||
| {{- define "casa.usr-secret-envs"}} | ||
| {{- range $key, $val := .Values.usrEnvs.secret }} | ||
| - name: {{ $key }} | ||
| valueFrom: | ||
| secretKeyRef: | ||
| name: {{ $.Release.Name }}-{{ $.Chart.Name }}-user-custom-envs | ||
| key: {{ $key | quote }} | ||
| {{- end }} | ||
| {{- end }} | ||
|
|
||
| {{/* | ||
| Create topologySpreadConstraints lists | ||
| */}} | ||
| {{- define "casa.topology-spread-constraints"}} | ||
| {{- range $key, $val := .Values.topologySpreadConstraints }} | ||
| - maxSkew: {{ $val.maxSkew }} | ||
| {{- if $val.minDomains }} | ||
| minDomains: {{ $val.minDomains }} # optional; beta since v1.25 | ||
| {{- end}} | ||
| {{- if $val.topologyKey }} | ||
| topologyKey: {{ $val.topologyKey }} | ||
| {{- end}} | ||
| {{- if $val.whenUnsatisfiable }} | ||
| whenUnsatisfiable: {{ $val.whenUnsatisfiable }} | ||
| {{- end}} | ||
| labelSelector: | ||
| matchLabels: | ||
| app: {{ $.Release.Name }}-{{ include "casa.name" $ }} | ||
| {{- if $val.matchLabelKeys }} | ||
| matchLabelKeys: {{ $val.matchLabelKeys }} # optional; alpha since v1.25 | ||
| {{- end}} | ||
| {{- if $val.nodeAffinityPolicy }} | ||
| nodeAffinityPolicy: {{ $val.nodeAffinityPolicy }} # optional; alpha since v1.25 | ||
| {{- end}} | ||
| {{- if $val.nodeTaintsPolicy }} | ||
| nodeTaintsPolicy: {{ $val.nodeTaintsPolicy }} # optional; alpha since v1.25 | ||
| {{- end}} | ||
| {{- end }} | ||
| {{- end }} |
22 changes: 22 additions & 0 deletions
22
charts/janssen/charts/casa/templates/casa-destination-rules.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,22 @@ | ||
| {{- if .Values.global.istio.enabled }} | ||
| apiVersion: networking.istio.io/v1alpha3 | ||
| kind: DestinationRule | ||
| metadata: | ||
| name: {{ .Release.Name }}-casa-mtls | ||
| namespace: {{.Release.Namespace}} | ||
| labels: | ||
| APP_NAME: casa | ||
| {{ include "casa.labels" . | indent 4 }} | ||
| {{- if .Values.additionalLabels }} | ||
| {{ toYaml .Values.additionalLabels | indent 4 }} | ||
| {{- end }} | ||
| {{- if .Values.additionalAnnotations }} | ||
| annotations: | ||
| {{ toYaml .Values.additionalAnnotations | indent 4 }} | ||
| {{- end }} | ||
| spec: | ||
| host: {{ .Values.global.casa.casaServiceName }}.{{ .Release.Namespace }}.svc.cluster.local | ||
| trafficPolicy: | ||
| tls: | ||
| mode: ISTIO_MUTUAL | ||
| {{- end }} |
Oops, something went wrong.