WIP: add values for OJT builds with SSO redirects

tylervz · tylervz · commit e8823c5e4a28 · 2025-08-20T14:48:48.000-04:00
diff --git a/charts/thub/Chart.yaml b/charts/thub/Chart.yaml
@@ -6,7 +6,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.9.0
+version: 1.10.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
@@ -21,11 +21,11 @@ dependencies:
   - name: item-service
     version: 1.4.0
   - name: keycloak-config
-    version: 0.1.1
+    version: 0.1.2
   - name: lms-data-service
-    version: 1.7.0
+    version: 1.8.0
   - name: ojt
-    version: 1.6.0
+    version: 1.7.0
   - name: user-service
     version: 1.4.0
 
diff --git a/charts/thub/charts/keycloak-config/Chart.yaml b/charts/thub/charts/keycloak-config/Chart.yaml
@@ -7,7 +7,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.1
+version: 0.1.2
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/thub/charts/keycloak-config/templates/keycloak-configmap.yaml b/charts/thub/charts/keycloak-config/templates/keycloak-configmap.yaml
@@ -33,4 +33,6 @@ data:
   grails.plugin.springsecurity.rest.keycloak.key: {{ .Values.clientId | quote }}
   # Username for an admin of this realm. Password is defined in keycloak-realm-secret
   grails.plugin.springsecurity.rest.keycloak.realmAdminUsername: {{ required "realmAdminUsername cannot be emtpy" .Values.realmAdminUsername | quote }}
+  # The desired scopes when requesting an access token. This is a space seperated list.
+  grails.plugin.springsecurity.rest.keycloak.scopes: {{ .Values.scopes | quote }}
 {{- end }}
diff --git a/charts/thub/charts/keycloak-config/values.yaml b/charts/thub/charts/keycloak-config/values.yaml
@@ -15,6 +15,8 @@ databasePassword: ""
 realmName: ""
 clientId: "ojt"
 clientSecret: ""
+# The desired scopes when requesting an access token. This is a space seperated list.
+scopes: "email profile"
 # Credentials for the admin of the Keycloak server (master realm)
 masterAdminUsername: ""
 masterAdminPassword: ""
diff --git a/charts/thub/charts/lms-data-service/Chart.yaml b/charts/thub/charts/lms-data-service/Chart.yaml
@@ -7,7 +7,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.7.0
+version: 1.8.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/thub/charts/lms-data-service/templates/lms-data-service-configmap.yaml b/charts/thub/charts/lms-data-service/templates/lms-data-service-configmap.yaml
@@ -15,3 +15,4 @@ data:
   {{ $key }}: {{ $value | quote }}
   {{- end }}
   {{- end }}
+  hclabs.lmsDataService.loginUsingSso: {{ .Values.loginUsingSso | quote }}
diff --git a/charts/thub/charts/lms-data-service/values.yaml b/charts/thub/charts/lms-data-service/values.yaml
@@ -112,6 +112,10 @@ affinity: {}
 # For example, custom.property.one: "value1"
 additionalConfig: {}
 
+# Boolean that when true, users will login to LMS Data Service using a SSO authentication provider
+# with a redirect URL rather than entering their their credentials on the LMS Data Service web app login page.
+loginUsingSso: true
+
 # Encryption key for storing sensitive values in the database
 encryptionPassword: ""
 
diff --git a/charts/thub/charts/ojt/Chart.yaml b/charts/thub/charts/ojt/Chart.yaml
@@ -7,7 +7,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.6.0
+version: 1.7.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/thub/charts/ojt/templates/ojt-configmap.yaml b/charts/thub/charts/ojt/templates/ojt-configmap.yaml
@@ -18,3 +18,4 @@ data:
   {{- if .Values.mail.password }}
   grails.mail.password: {{ .Values.mail.password | quote }}
   {{- end }}
+  hclabs.ojt.loginUsingSso: {{ .Values.loginUsingSso | quote }}
diff --git a/charts/thub/charts/ojt/values.yaml b/charts/thub/charts/ojt/values.yaml
@@ -117,6 +117,10 @@ mail:
 # For example, custom.property.one: "value1"
 additionalConfig: {}
 
+# Boolean that when true, users will login to OJT using a SSO authentication provider
+# with a redirect URL rather than entering their their credentials on the OJT web app login page.
+loginUsingSso: true
+
 learningHistorySchedulerJob:
   enabled: true
   # Run every 30 minutes
diff --git a/charts/thub/templates/shared-settings-configmap.yaml b/charts/thub/templates/shared-settings-configmap.yaml
@@ -22,6 +22,8 @@ data:
   hclabs.enableOjtLearnerComments: {{ .Values.enableOjtLearnerComments | quote }}
   hclabs.enableOjtObserverComments: {{ .Values.enableOjtObserverComments | quote }}
   hclabs.enableSelfAssessmentRatings: {{ .Values.enableSelfAssessmentRatings | quote }}
+  hclabs.environmentIsProduction: {{ .Values.environmentIsProduction | quote }}
+  hclabs.envName: {{ .Values.envName | quote }}
   hclabs.eSignatureMeaningCode: {{ .Values.eSignatureMeaningCode | quote }}
   hclabs.lmsType: {{ .Values.global.lmsType | quote }}
   hclabs.ojt.allowedTiles: {{ .Values.ojtAllowedTiles | quote }}
diff --git a/charts/thub/values.yaml b/charts/thub/values.yaml
@@ -37,6 +37,10 @@ enableOjtLearnerComments: false
 enableOjtObserverComments: false
 # Allow learners to give themselves a SelfAssessmentRating on steps in their own OJTs.
 enableSelfAssessmentRatings: true
+# Boolean indicating if the environment is production.
+environmentIsProduction: true
+# A human readable description of the environment, such as "Coca Cola Staging" or "Coca Cola Production"
+envName: "HCLabs Development"
 # This value is used to populate the ESIG_MEANING_CODE_ID field in lines of the SuccessFactors learning history file
 # for which the completion status requires an eSignature.
 eSignatureMeaningCode: "RECORD"
@@ -325,6 +329,8 @@ keycloak-config:
   realmName: ""
   clientId: "ojt"
   clientSecret: ""
+  # The desired scopes when requesting an access token. This is a space seperated list.
+  scopes: "email profile"
   # Credentials for the admin of the Keycloak server (master realm)
   masterAdminUsername: ""
   masterAdminPassword: ""
