Merge pull request #5 from linuxfoundation/jme/LFXV2-436

New NATS subject & helm chart fixes

Author: jordane

charts/lfx-v2-access-check/Chart.yaml

@@ -5,5 +5,5 @@ apiVersion: v2
 name: lfx-v2-access-check
 description: LFX Platform V2 Access Check Service chart
 type: application
-version: 0.2.1
+version: 0.2.2
 appVersion: "0.1.0"

charts/lfx-v2-access-check/templates/deployment.yaml

@@ -37,7 +37,7 @@ spec:
             - name: NATS_URL
               value: "{{ .Values.nats.url }}"
             - name: JWKS_URL
-              value: "{{ .Values.heimdall.url }}"
+              value: "{{ .Values.heimdall.jwks_url }}"
           livenessProbe:
             httpGet:
               path: /livez

charts/lfx-v2-access-check/templates/ruleset.yaml

@@ -16,7 +16,7 @@ spec:
         routes:
           - path: /access-check
       execute:
-        - authenticator: anonymous_authenticator
+        - authenticator: oidc
         - authorizer: allow_all
         - finalizer: create_jwt
           config:

charts/lfx-v2-access-check/values.yaml

@@ -40,3 +40,4 @@ nats:
 heimdall:
   enabled: true
   url: http://lfx-platform-heimdall.lfx.svc.cluster.local:4456
+  jwks_url: http://lfx-platform-heimdall:4457/.well-known/jwks

internal/service/access_service_test.go

@@ -143,8 +143,8 @@ func TestCheckAccess_Success(t *testing.T) {
 	authRepo := &mockAuthRepository{}
 	messagingRepo := &mockMessagingRepository{
 		requestFunc: func(_ context.Context, subject string, _ []byte, _ time.Duration) ([]byte, error) {
-			if subject != "dev.lfx.access_check.request" {
-				t.Errorf("Expected subject 'dev.lfx.access_check.request', got '%s'", subject)
+			if subject != "lfx.access_check.request" {
+				t.Errorf("Expected subject 'lfx.access_check.request', got '%s'", subject)
 			}
 			return []byte("allow"), nil
 		},

pkg/constants/service.go

@@ -17,7 +17,7 @@ const (
 	ServiceRequestIDKey ContextKey = RequestIDHeader
 
 	// NATS subjects for messaging
-	AccessCheckSubject = "dev.lfx.access_check.request"
+	AccessCheckSubject = "lfx.access_check.request"
 
 	// API version constants
 	SupportedAPIVersion = "1"