Skip to content

Commit b56b31a

Browse files
[DSD-8457] zero automation failure release (#1526)
* Updated chart versions, image and tag for release changes Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * [DSD-8457] automation zero failure release Signed-off-by: Prafulrakhade <prafulrakhade02@gmail.com> * [DSD-8457] automation zero failure release Signed-off-by: Prafulrakhade <prafulrakhade02@gmail.com> --------- Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Signed-off-by: Prafulrakhade <prafulrakhade02@gmail.com> Co-authored-by: Prafulrakhade <99539100+Prafulrakhade@users.noreply.github.com> Co-authored-by: Prafulrakhade <prafulrakhade@users.noreply.github.com>
1 parent 6074b6e commit b56b31a

File tree

8 files changed

+15
-178
lines changed

8 files changed

+15
-178
lines changed

deploy/apitest-auth/values.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,6 @@ modules:
22
auth:
33
enabled: true
44
image:
5-
repository: mosipqa/apitest-auth
6-
tag: 1.2.1.x
5+
repository: mosipid/apitest-auth
6+
tag: 1.2.1.1-beta.1
77
pullPolicy: Always

deploy/ida/install.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ if [ $# -ge 1 ] ; then
77
fi
88

99
NS=ida
10-
CHART_VERSION=0.0.1-develop
10+
CHART_VERSION=12.1.1-beta.1
1111
COPY_UTIL=../copy_cm_func.sh
1212

1313
echo Create $NS namespace

helm/ida-auth/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
name: ida-auth
33
description: A Helm chart for MOSIP IDA module
44
type: application
5-
version: 0.0.1-develop
5+
version: 12.1.1-beta.1
66
appVersion: ""
77
dependencies:
88
- name: common

helm/ida-auth/values.yaml

Lines changed: 3 additions & 58 deletions
Original file line numberDiff line numberDiff line change
@@ -12,23 +12,18 @@
1212
##
1313
commonLabels:
1414
app.kubernetes.io/component: mosip
15-
1615
## Add annotations to all the deployed resources
1716
##
1817
commonAnnotations: {}
19-
2018
## Kubernetes Cluster Domain
2119
##
2220
clusterDomain: cluster.local
23-
2421
## Extra objects to deploy (value evaluated as a template)
2522
##
2623
extraDeploy: []
27-
2824
## Number of nodes
2925
##
3026
replicaCount: 1
31-
3227
service:
3328
type: ClusterIP
3429
port: 80
@@ -49,11 +44,10 @@ service:
4944
## ref http://kubernetes.io/docs/tasks/access-application-cluster/create-external-load-balancer/#preserving-the-client-source-ip
5045
##
5146
externalTrafficPolicy: Cluster
52-
5347
image:
5448
registry: docker.io
55-
repository: mosipqa/authentication-service
56-
tag: develop
49+
repository: mosipid/authentication-service
50+
tag: 1.2.1.1-beta.1
5751
## Specify a imagePullPolicy
5852
## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
5953
## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images
@@ -65,10 +59,8 @@ image:
6559
##
6660
# pullSecrets:
6761
# - myRegistryKeySecretName
68-
6962
## Port on which this particular spring service module is running.
7063
springServicePort: 8090
71-
7264
## Configure extra options for liveness and readiness probes
7365
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/#configure-probes
7466
##
@@ -82,7 +74,6 @@ startupProbe:
8274
timeoutSeconds: 5
8375
failureThreshold: 30
8476
successThreshold: 1
85-
8677
livenessProbe:
8778
enabled: true
8879
httpGet:
@@ -93,7 +84,6 @@ livenessProbe:
9384
timeoutSeconds: 5
9485
failureThreshold: 6
9586
successThreshold: 1
96-
9787
readinessProbe:
9888
enabled: true
9989
httpGet:
@@ -104,20 +94,17 @@ readinessProbe:
10494
timeoutSeconds: 5
10595
failureThreshold: 6
10696
successThreshold: 1
107-
10897
##
10998
# existingConfigmap:
11099

111100
## Command and args for running the container (set to default if not set). Use array form
112101
##
113102
command: []
114103
args: []
115-
116104
## Deployment pod host aliases
117105
## https://kubernetes.io/docs/concepts/services-networking/add-entries-to-pod-etc-hosts-with-host-aliases/
118106
##
119107
hostAliases: []
120-
121108
## ref: http://kubernetes.io/docs/user-guide/compute-resources/
122109
##
123110
resources:
@@ -131,37 +118,31 @@ resources:
131118
requests:
132119
cpu: 100m
133120
memory: 1000Mi
134-
135121
additionalResources:
136122
## Specify any JAVA_OPTS string here. These typically will be specified in conjunction with above resources
137123
## Example: java_opts: "-Xms500M -Xmx500M"
138124
javaOpts: "-Xms2000M -Xmx2000M"
139-
140125
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
141126
## Clamav container already runs as 'mosip' user, so we may not need to enable this
142127
containerSecurityContext:
143128
enabled: false
144129
runAsUser: mosip
145130
runAsNonRoot: true
146-
147131
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
148132
##
149133
podSecurityContext:
150134
enabled: false
151135
fsGroup: 1001
152-
153136
## Pod affinity preset
154137
## ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
155138
## Allowed values: soft, hard
156139
##
157140
podAffinityPreset: ""
158-
159141
## Pod anti-affinity preset
160142
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity
161143
## Allowed values: soft, hard
162144
##
163145
podAntiAffinityPreset: soft
164-
165146
## Node affinity preset
166147
## Ref: https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#node-affinity
167148
## Allowed values: soft, hard
@@ -183,32 +164,26 @@ nodeAffinityPreset:
183164
## - e2e-az2
184165
##
185166
values: []
186-
187167
## Affinity for pod assignment. Evaluated as a template.
188168
## Ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/#affinity-and-anti-affinity
189169
##
190170
affinity: {}
191-
192171
## Node labels for pod assignment. Evaluated as a template.
193172
## ref: https://kubernetes.io/docs/user-guide/node-selection/
194173
##
195174
nodeSelector: {}
196-
197175
## Tolerations for pod assignment. Evaluated as a template.
198176
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
199177
##
200178
tolerations: []
201-
202179
## Pod extra labels
203180
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/
204181
##
205182
podLabels: {}
206-
207183
## Annotations for server pods.
208184
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
209185
##
210186
podAnnotations: {}
211-
212187
## pods' priority.
213188
## ref: https://kubernetes.io/docs/concepts/configuration/pod-priority-preemption/
214189
##
@@ -217,51 +192,42 @@ podAnnotations: {}
217192
## lifecycleHooks for the container to automate configuration before or after startup.
218193
##
219194
lifecycleHooks: {}
220-
221195
## Custom Liveness probes for
222196
##
223197
customLivenessProbe: {}
224-
225198
## Custom Rediness probes
226199
##
227200
customReadinessProbe: {}
228-
229201
## Update strategy - only really applicable for deployments with RWO PVs attached
230202
## If replicas = 1, an update can get "stuck", as the previous pod remains attached to the
231203
## PV, and the "incoming" pod can never start. Changing the strategy to "Recreate" will
232204
## terminate the single previous pod, so that the new, incoming pod can attach to the PV
233205
##
234206
updateStrategy:
235207
type: RollingUpdate
236-
237208
## Additional environment variables to set
238209
## Example:
239210
## extraEnvVars:
240211
## - name: FOO
241212
## value: "bar"
242213
##
243214
extraEnvVars: []
244-
245215
## ConfigMap with extra environment variables that used
246216
##
247217
extraEnvVarsCM:
248218
- global
249219
- config-server-share
250220
- artifactory-share
251221
- softhsm-ida-share
252-
253222
## Secret with extra environment variables
254223
##
255224
extraEnvVarsSecret: []
256-
257225
## Extra volumes to add to the deployment
258226
##
259227
extraVolumes: []
260-
261228
## Extra volume mounts to add to the container
262229
##
263230
extraVolumeMounts: []
264-
265231
## Add init containers to the pods.
266232
## Example:
267233
## initContainers:
@@ -276,17 +242,7 @@ initContainers:
276242
- command:
277243
- /bin/bash
278244
- -c
279-
- if [ "$ENABLE_INSECURE" = "true" ]; then HOST=$( env | grep "mosip-api-internal-host"
280-
|sed "s/mosip-api-internal-host=//g"); if [ -z "$HOST" ]; then echo "HOST
281-
$HOST is empty; EXITING"; exit 1; fi; openssl s_client -servername "$HOST"
282-
-connect "$HOST":443 > "$HOST.cer" 2>/dev/null & sleep 2 ; sed -i -ne '/-BEGIN
283-
CERTIFICATE-/,/-END CERTIFICATE-/p' "$HOST.cer"; cat "$HOST.cer"; /usr/local/openjdk-11/bin/keytool
284-
-delete -alias "$HOST" -keystore $JAVA_HOME/lib/security/cacerts -storepass
285-
changeit; /usr/local/openjdk-11/bin/keytool -trustcacerts -keystore "$JAVA_HOME/lib/security/cacerts"
286-
-storepass changeit -noprompt -importcert -alias "$HOST" -file "$HOST.cer"
287-
; if [ $? -gt 0 ]; then echo "Failed to add SSL certificate for host $host;
288-
EXITING"; exit 1; fi; cp /usr/local/openjdk-11/lib/security/cacerts /cacerts;
289-
fi
245+
- if [ "$ENABLE_INSECURE" = "true" ]; then HOST=$( env | grep "mosip-api-internal-host" |sed "s/mosip-api-internal-host=//g"); if [ -z "$HOST" ]; then echo "HOST $HOST is empty; EXITING"; exit 1; fi; openssl s_client -servername "$HOST" -connect "$HOST":443 > "$HOST.cer" 2>/dev/null & sleep 2 ; sed -i -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' "$HOST.cer"; cat "$HOST.cer"; /usr/local/openjdk-11/bin/keytool -delete -alias "$HOST" -keystore $JAVA_HOME/lib/security/cacerts -storepass changeit; /usr/local/openjdk-11/bin/keytool -trustcacerts -keystore "$JAVA_HOME/lib/security/cacerts" -storepass changeit -noprompt -importcert -alias "$HOST" -file "$HOST.cer" ; if [ $? -gt 0 ]; then echo "Failed to add SSL certificate for host $host; EXITING"; exit 1; fi; cp /usr/local/openjdk-11/lib/security/cacerts /cacerts; fi
290246
env:
291247
- name: ENABLE_INSECURE
292248
value: "true"
@@ -304,7 +260,6 @@ initContainers:
304260
volumeMounts:
305261
- mountPath: /cacerts
306262
name: cacerts
307-
308263
## Add sidecars to the pods.
309264
## Example:
310265
## sidecars:
@@ -316,7 +271,6 @@ initContainers:
316271
## containerPort: 1234
317272
##
318273
sidecars: {}
319-
320274
persistence:
321275
enabled: false
322276
## If defined, storageClassName: <storageClass>
@@ -341,7 +295,6 @@ persistence:
341295
mountDir: /home/mosip/config/
342296
volume_name: config
343297
# pvc_claim_name: pkcs12-keys.p12
344-
345298
## Init containers parameters:
346299
## volumePermissions: Change the owner and group of the persistent volume mountpoint to runAsUser:fsGroup values from the securityContext section.
347300
##
@@ -375,12 +328,10 @@ volumePermissions:
375328
## cpu: 100m
376329
## memory: 128Mi
377330
##
378-
379331
## Specifies whether RBAC resources should be created
380332
##
381333
rbac:
382334
create: true
383-
384335
## Specifies whether a ServiceAccount should be created
385336
##
386337
serviceAccount:
@@ -389,7 +340,6 @@ serviceAccount:
389340
## If not set and create is true, a name is generated using the fullname template
390341
##
391342
name:
392-
393343
## Prometheus Metrics
394344
##
395345
metrics:
@@ -399,7 +349,6 @@ metrics:
399349
##
400350
podAnnotations:
401351
prometheus.io/scrape: "true"
402-
403352
endpointPath: /idauthentication/v1/actuator/prometheus
404353
## Prometheus Service Monitor
405354
## ref: https://github.com/coreos/prometheus-operator
@@ -427,7 +376,6 @@ metrics:
427376
## ref: https://github.com/coreos/prometheus-operator/blob/master/Documentation/api.md#prometheusspec
428377
##
429378
additionalLabels: {}
430-
431379
## Custom PrometheusRule to be defined
432380
## The value is evaluated as a template, so, for example, the value can depend on .Release or .Chart
433381
## ref: https://github.com/coreos/prometheus-operator#customresourcedefinitions
@@ -445,7 +393,6 @@ metrics:
445393
# labels:
446394
# severity: error
447395
rules: []
448-
449396
## IDA Auth needs both internal & external access.
450397
istio:
451398
enabled: true
@@ -467,8 +414,6 @@ istio:
467414
prefix: /idauthentication/v1/identity-key-binding
468415
- uri:
469416
prefix: /idauthentication/v1/vci-exchange
470-
471417
enable_insecure: false
472-
473418
springConfigNameEnv:
474419
activeProfileEnv:

helm/ida-internal/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ apiVersion: v2
22
name: ida-internal
33
description: A Helm chart for MOSIP IDA module
44
type: application
5-
version: 0.0.1-develop
5+
version: 12.1.1-beta.1
66
appVersion: ""
77
dependencies:
88
- name: common

0 commit comments

Comments
 (0)