chore: prepare for flex 5.5.0 release

.github/workflows/build-packages.yml

@@ -10,35 +10,48 @@ permissions:
 jobs:
   publish_binary_packages:
     if: github.repository == 'GluuFederation/flex'
-    runs-on: ubuntu-20.04
+    runs-on: ${{ matrix.os }}
+    permissions:
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
-        name: [ubuntu22, ubuntu20, el8, suse15]
-
+        name: [ubuntu24, ubuntu22, ubuntu20, el8, suse15]
         include:
+          - name: ubuntu24
+            os: ubuntu-latest
+            asset_suffix: ~ubuntu24.04_amd64.deb
+            build_files: deb/noble
+            asset_prefix: '_'
+            asset_path: flex
+            sign_cmd: cosign sign-blob --yes --output-certificate cert.pem --output-signature sig
+            python_version: 3.11
           - name: ubuntu22
+            os: ubuntu-20.04
             asset_suffix: ~ubuntu22.04_amd64.deb
             build_files: deb/jammy
             asset_prefix: '_'
             asset_path: flex
             sign_cmd: dpkg-sig -s builder -k DE92BEF14A1A4E542F678B64DC3C790386C73900
             python_version: "3.8"                
           - name: ubuntu20
+            os: ubuntu-20.04
             asset_suffix: ~ubuntu20.04_amd64.deb
             build_files: deb/focal
             asset_prefix: '_'
             asset_path: flex
             sign_cmd: dpkg-sig -s builder -k DE92BEF14A1A4E542F678B64DC3C790386C73900
             python_version: "3.8"
           - name: el8
+            os: ubuntu-20.04
             asset_suffix: .el8.x86_64.rpm
             build_files: rpm/el8
             asset_prefix: '-'
             asset_path: flex/rpmbuild/RPMS/x86_64
             sign_cmd: rpm --addsign
             python_version: "3.6"
           - name: suse15
+            os: ubuntu-20.04
             asset_suffix: .suse15.x86_64.rpm
             build_files: rpm/suse15
             asset_prefix: '-'
@@ -59,16 +72,17 @@ jobs:
 
     - name: Getting build dependencies
       id: get_dependencies
-      run: |  
+      run: |
          mkdir -p flex/flex-src/opt/
          cp -rp temp-flex/automation/packaging/${{ matrix.build_files }}/* flex/
          cp temp-flex/flex-linux-setup/flex_linux_setup/flex_setup.py flex/flex_setup.py
          sudo add-apt-repository ppa:deadsnakes/ppa
          sudo apt-get update
          sudo apt-get install -y python${{ matrix.python_version }}
-         sudo apt install -y build-essential devscripts debhelper rpm dpkg-sig python3-dev python3-requests python3-ruamel.yaml python3-pymysql python3-crypto python3-distutils python3-prompt-toolkit python${{ matrix.python_version }}-distutils libpq-dev python${{ matrix.python_version }}-dev apache2 rsyslog python3-urllib3 python3-certifi postgresql postgresql-contrib 
+         sudo apt install -y build-essential devscripts debhelper rpm python3-dev python3-requests python3-ruamel.yaml python3-pymysql python3-prompt-toolkit python${{ matrix.python_version }}-distutils libpq-dev python${{ matrix.python_version }}-dev apache2 rsyslog python3-urllib3 python3-certifi postgresql postgresql-contrib
+         sudo apt install -y dpkg-sig python3-crypto python3-distutils ||  sudo apt install -y python3-distutils-extra python3-cryptography
          sudo cp -r /usr/lib/python3/dist-packages /usr/lib/python${{ matrix.python_version }}/
-         sudo python${{ matrix.python_version }} -m pip install psycopg2-binary psycopg2
+         sudo python${{ matrix.python_version }} -m pip install psycopg2-binary psycopg2 || echo "failed to install psycopg2"
     - name: Import GPG key
       id: import_gpg
       continue-on-error: true
@@ -100,7 +114,7 @@ jobs:
       id: run_build
       run: |
          cd flex/
-         sudo python${{ matrix.python_version }} flex_setup.py --jans-branch="main" --jans-setup-branch="main" -download-exit -yes --keep-downloads --keep-setup -force-download
+         sudo python${{ matrix.python_version }} flex_setup.py --jans-branch="v1.5.0" --jans-setup-branch="v1.5.0" -download-exit -yes --keep-downloads --keep-setup -force-download
          cp -r /opt/dist flex-src/opt/
          cp -r /opt/jans flex-src/opt/
          touch flex-src/opt/jans/jans-setup/package
@@ -110,6 +124,10 @@ jobs:
          sed -i "s/%VERSION%/${{ steps.previoustag.outputs.version }}/g" run-build.sh
          cat run-build.sh
          sudo ./run-build.sh
+
+    - name: Install Cosign
+      uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
+
     - name: Sign package
       id: sign_package
       run : |

admin-ui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gluu-admin-ui",
-  "version": "0.0.0",
+  "version": "5.5.0",
   "description": "UI to administer the jans-sever features",
   "keywords": [
     "jans-server",

automation/packaging/deb/focal/debian/control

@@ -10,4 +10,4 @@ Package: flex
 Architecture: any
 Multi-Arch: foreign
 Depends: ${misc:Depends}, ${shlibs:Depends}, apache2, rsyslog, python3-urllib3, python3-certifi, postgresql, postgresql-contrib, python3-requests, python3-ruamel.yaml, python3-crypto, python3-psycopg2, curl, wget, xz-utils, unzip, rsyslog, bzip2
-Description: Janssen enables organizations to build a scalable centralized authentication and authorization service using free open source software.
+Description: Gluu enables organizations to build a scalable centralized authentication and authorization service using free open source software.

automation/packaging/deb/jammy/debian/control

@@ -10,4 +10,4 @@ Package: flex
 Architecture: any
 Multi-Arch: foreign
 Depends: ${misc:Depends}, ${shlibs:Depends}, apache2, curl, wget, xz-utils, unzip, rsyslog, bzip2, python3-urllib3, python3-certifi, python3-requests, python3-ruamel.yaml, python3-pymysql, python3-cryptography, python3-distutils, python3-psycopg2, postgresql-contrib, postgresql
-Description: Janssen enables organizations to build a scalable centralized authentication and authorization service using free open source software.
+Description: Gluu enables organizations to build a scalable centralized authentication and authorization service using free open source software.

automation/packaging/deb/noble/checksum.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+VERSION=%VERSION%
+sha256sum flex_%VERSION%~ubuntu24.04_amd64.deb > flex_%VERSION%~ubuntu24.04_amd64.deb.sha256sum
+sed -i 's/~/./g' flex_%VERSION%~ubuntu24.04_amd64.deb.sha256sum

automation/packaging/deb/noble/debian/changelog

@@ -0,0 +1,5 @@
+flex (%VER%~ubuntu24.04) unstable; urgency=low
+
+  * Release Notes.
+
+ -- https://github.com/GluuFederation/flex/releases

automation/packaging/deb/noble/debian/compat

@@ -0,0 +1 @@
+11

automation/packaging/deb/noble/debian/control

@@ -0,0 +1,13 @@
+Source: flex
+Section: java
+Priority: optional
+Maintainer: The Packaging Team <packaging@gluu.org>
+Build-Depends: debhelper (>=11~)
+Standards-Version: 4.1.4
+Homepage: https://gluu.org
+
+Package: flex
+Architecture: any
+Multi-Arch: foreign
+Depends: ${misc:Depends}, ${shlibs:Depends}, apache2, rsyslog, python3-urllib3, python3-certifi, postgresql, postgresql-contrib, python3-requests, python3-ruamel.yaml, python3-psycopg2, python3-cryptography, curl, wget, xz-utils, unzip, rsyslog, bzip2
+Description: Gluu enables organizations to build a scalable centralized authentication and authorization service using free open source software.

automation/packaging/deb/noble/debian/copyright

@@ -0,0 +1,7 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: flex
+Source: https://gluu.org
+
+Files:     *
+Copyright: 2025 Gluu Inc. support@gluu.org
+License:   Apache-2.0

automation/packaging/deb/noble/debian/install

@@ -0,0 +1,2 @@
+opt/dist/*              /opt/dist/
+opt/jans/*              /opt/jans/

automation/packaging/deb/noble/debian/postrm

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+if [ "$1" = "remove" ] ; then
+    rm -rf /etc/systemd/system/jans-*.service    
+    rm -rf /etc/systemd/system/opendj.service    
+    rm -rf /etc/jans
+    rm -rf /etc/certs
+    rm -rf /etc/default/jans-*
+    rm -rf /var/lib/dpkg/info/jans.*
+    rm -rf /opt/jans
+    rm -rf /opt/dist
+    rm -rf /opt/opendj
+    rm -rf /opt/amazon-corretto-*
+    rm -rf /opt/jython*
+    rm -rf /opt/jetty* 
+    rm -rf /opt/jre
+fi
+exit 0

automation/packaging/deb/noble/debian/prerm

@@ -0,0 +1,73 @@
+#!/bin/bash
+
+set -e
+
+echo "Checking to make sure service is down..."
+
+case $1 in
+    remove)
+        if [ -f /etc/systemd/system/jans-auth.service ]; then
+	    systemctl stop jans-auth.service
+        fi
+	if [ -f /etc/systemd/system/jans-config-api.service ]; then
+            systemctl stop jans-config-api.service
+        fi
+        if [ -f /etc/systemd/system/jans-fido2.service ]; then
+            systemctl stop jans-fido2.service
+        fi
+        if [ -f /etc/systemd/system/jans-scim.service ]; then
+            systemctl stop jans-scim.service
+        fi
+
+	if [ -d /opt/jans.saved ]; then
+            rm -rf /opt/jans.saved
+        fi
+        if [ -d /opt/jans ]; then
+	    echo "Your changes will be saved into /opt/jans.saved"
+	    mkdir /opt/jans.saved
+            cp -rp /opt/jans /opt/jans.saved/
+	    if [ -d /opt/dist ]; then
+	        cp -rp /opt/dist /opt/jans.saved/
+	    fi
+	    if [ -e /opt/jetty-* ]; then
+                cp -rp /opt/jetty-* /opt/jans.saved/
+	    fi
+	    if [ -e /opt/jython-* ]; then
+	        cp -rp /opt/jython-* /opt/jans.saved/
+	    fi
+	    if [ -e /opt/opendj ]; then
+  	        cp -rp /opt/opendj /opt/jans.saved/
+	    fi
+            if [ -e /opt/amazon-corretto-* ]; then
+    	        cp -rp /opt/amazon-corretto-* /opt/jans.saved/ 
+	    fi
+        fi
+        exit 0
+        ;;
+    deconfigure|upgrade)
+        if [ -f /etc/systemd/system/jans-auth.service ]; then
+            systemctl stop jans-auth.service
+        fi
+        if [ -f /etc/systemd/system/jans-config-api.service ]; then
+            systemctl stop jans-config-api.service
+        fi
+        if [ -f /etc/systemd/system/jans-fido2.service ]; then
+            systemctl stop jans-fido2.service
+        fi
+        if [ -f /etc/systemd/system/jans-scim.service ]; then
+            systemctl stop jans-scim.service
+        fi
+        if [ -f /etc/systemd/system/opendj.service ]; then
+            systemctl stop opendj.service
+        fi
+	exit 0
+        ;;
+    failed-upgrade)
+        exit 2
+        ;;
+    *)
+        echo "Prerm called with unknown argument '$1'" >&2
+        exit 0
+        ;;
+esac
+exit $?

automation/packaging/deb/noble/debian/rules

@@ -0,0 +1,11 @@
+#!/usr/bin/make -f
+# You must remove unused comment lines for the released package.
+#export DH_VERBOSE = 1
+#export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+#export DEB_CFLAGS_MAINT_APPEND  = -Wall -pedantic
+#export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
+
+%:
+	dh $@
+
+override_dh_strip_nondeterminism:

automation/packaging/deb/noble/run-build.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+VERSION=%VERSION%
+sed -i "s/%VER%/$VERSION/g" debian/changelog
+cd flex-src
+tar cvfz ../flex_%VERSION%.tar.gz *
+cp -a ../debian .
+tar cvfz ../flex_%VERSION%.orig.tar.gz *
+debuild -us -uc
+cd ..
+chmod a+w flex_%VERSION%~ubuntu24.04_amd64.deb

automation/packaging/rpm/el8/flex.spec

@@ -7,7 +7,7 @@ URL:            https://www.gluu.org/
 Source0:        flex-%VER%.tar.gz
 Requires:       httpd, mod_ssl, mod_auth_openidc, curl, wget, tar, xz, unzip, rsyslog, bzip2, python3-requests, python3-ruamel-yaml, python3-certifi, python3-PyMySQL, python3-cryptography, python3-psycopg2
 %description
-Janssen enables organizations to build a scalable centralized authentication and authorization service using free open source software.
+Gluu enables organizations to build a scalable centralized authentication and authorization service using free open source software.
 
 %global _python_bytecompile_extra 0
 %global _python_bytecompile_errors_terminate_build 0

automation/packaging/rpm/suse15/flex.spec

@@ -8,7 +8,7 @@ Source0:        flex-%VER%.tar.gz
 Requires:       apache2, apache2-mod_auth_openidc, curl, wget, tar, xz, unzip, rsyslog, bzip2, python3-requests, python3-ruamel.yaml, python3-certifi, python3-PyMySQL, python3-cryptography, python3-psycopg2
 AutoReqProv:    no
 %description
-Janssen enables organizations to build a scalable centralized authentication and authorization service using free open source software.
+Gluu enables organizations to build a scalable centralized authentication and authorization service using free open source software.
 
 %global _python_bytecompile_extra 0
 %global _python_bytecompile_errors_terminate_build 0

automation/rancher-partner-charts/questions.yaml

@@ -703,7 +703,7 @@ questions:
 - variable: auth-server.image.tag
   required: true
   type: string
-  default: "0.0.0-nightly"
+  default: "5.5.0-1"
   description: "The Auth Server Image tag"
   label: Auth Server image tag
   group: "Images"
@@ -732,7 +732,7 @@ questions:
 - variable: admin-ui.image.tag
   required: true
   type: string
-  default: "0.0.0-nightly"
+  default: "5.5.0-1"
   description: "The AdminUI Image tag"
   label: AdminUI image tag
   group: "Images"
@@ -761,7 +761,7 @@ questions:
 - variable: auth-server-key-rotation.image.tag
   required: true
   type: string
-  default: "0.0.0-nightly"
+  default: "5.5.0-1"
   description: "The Auth Server Image tag"
   label: Auth Server KeyRotation image tag
   group: "Images"
@@ -790,7 +790,7 @@ questions:
 - variable: casa.image.tag
   required: true
   type: string
-  default: "0.0.0-nightly"
+  default: "5.5.0-1"
   description: "The Casa Image tag"
   label: Casa image tag
   group: "Images"
@@ -819,7 +819,7 @@ questions:
 - variable: config.image.tag
   required: true
   type: string
-  default: "0.0.0-nightly"
+  default: "5.5.0-1"
   description: "The Configurator Image tag"
   label: Configurator image tag
   group: "Images"
@@ -848,7 +848,7 @@ questions:
 - variable: config-api.image.tag
   required: true
   type: string
-  default: "0.0.0-nightly"
+  default: "5.5.0-1"
   description: "The ConfigAPI Image tag"
   label: ConfigAPI image tag
   group: "Images"
@@ -877,7 +877,7 @@ questions:
 - variable: fido2.image.tag
   required: true
   type: string
-  default: "0.0.0-nightly"
+  default: "5.5.0-1"
   description: "The Fido2 Image tag"
   label: Fido2 image tag
   group: "Images"
@@ -906,7 +906,7 @@ questions:
 - variable: persistence.image.tag
   required: true
   type: string
-  default: "0.0.0-nightly"
+  default: "5.5.0-1"
   description: "The Persistence Image tag"
   label: Persistence image tag
   group: "Images"
@@ -935,7 +935,7 @@ questions:
 - variable: scim.image.tag
   required: true
   type: string
-  default: "0.0.0-nightly"
+  default: "5.5.0-1"
   description: "The SCIM Image tag"
   label: SCIM image tag
   group: "Images"

automation/startflexdemo.sh

@@ -22,7 +22,7 @@ if [[ $GLUU_PERSISTENCE != "MYSQL" ]] && [[ $GLUU_PERSISTENCE != "PGSQL" ]]; the
   exit 1
 fi
 if [[ -z $GLUU_VERSION ]]; then
-  GLUU_VERSION="0.0.0-nightly"
+  GLUU_VERSION="5.5.0"
 fi
 LOG_TARGET="FILE"
 LOG_LEVEL="TRACE"

charts/gluu-all-in-one/Chart.yaml

@@ -3,13 +3,13 @@ annotations:
   artifacthub.io/containsSecurityUpdates: 'true'
   artifacthub.io/images: |
     - name: all-in-one
-      image: ghcr.io/gluufederation/flex/flex-all-in-one:0.0.0-nightly
+      image: ghcr.io/gluufederation/flex/flex-all-in-one:5.5.0-1
   artifacthub.io/license: Apache-2.0
   catalog.cattle.io/certified: partner
   catalog.cattle.io/release-name: gluu-all-in-one
   catalog.cattle.io/display-name: Gluu Flex Cloud Identity and Access Management All-in-One
 apiVersion: v2
-appVersion: "0.0.0-nightly"
+appVersion: "5.5.0"
 icon: >-
   https://gluu.org/docs/gluu-server/favicon.ico
 home: https://docs.gluu.org
@@ -21,4 +21,4 @@ maintainers:
     email: team@gluu.org
 description: Gluu Access and Identity Management All-in-One Chart. This chart deploys the selected janssen microservice all in one deployment.
 name: gluu-all-in-one
-version: 0.0.0-nightly
+version: 5.5.0