-
Notifications
You must be signed in to change notification settings - Fork 175
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Showing
158 changed files
with
17,160 additions
and
1 deletion.
There are no files selected for viewing
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,102 @@ | ||
annotations: | ||
artifacthub.io/containsSecurityUpdates: "true" | ||
artifacthub.io/images: | | ||
- name: auth-server | ||
image: ghcr.io/janssenproject/jans/auth-server:1.2.0-1 | ||
- name: auth-server-key-rotation | ||
image: ghcr.io/janssenproject/jans/certmanager:1.2.0-1 | ||
- name: configuration-manager | ||
image: ghcr.io/janssenproject/jans/configurator:1.2.0-1 | ||
- name: config-api | ||
image: ghcr.io/janssenproject/jans/config-api:1.2.0-1 | ||
- name: fido2 | ||
image: ghcr.io/janssenproject/jans/fido2:1.2.0-1 | ||
- name: persistence | ||
image: ghcr.io/janssenproject/jans/persistence-loader:1.2.0-1 | ||
- name: scim | ||
image: ghcr.io/janssenproject/jans/scim:1.2.0-1 | ||
- name: casa | ||
image: ghcr.io/janssenproject/jans/casa:1.2.0-1 | ||
- name: admin-ui | ||
image: ghcr.io/gluufederation/flex/admin-ui:5.2.0-1 | ||
- name: link | ||
image: ghcr.io/janssenproject/jans/link:1.2.0-1 | ||
- name: saml | ||
image: ghcr.io/janssenproject/jans/saml:1.2.0-1 | ||
- name: kc-scheduler | ||
image: ghcr.io/janssenproject/jans/kc-scheduler:1.2.0-1 | ||
artifacthub.io/license: Apache-2.0 | ||
catalog.cattle.io/certified: partner | ||
catalog.cattle.io/display-name: Gluu Cloud Identity and Access Management | ||
catalog.cattle.io/kube-version: '>=v1.21.0-0' | ||
catalog.cattle.io/release-name: gluu | ||
apiVersion: v2 | ||
appVersion: 5.2.0 | ||
dependencies: | ||
- condition: global.config.enabled | ||
name: config | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.config-api.enabled | ||
name: config-api | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.auth-server.enabled | ||
name: auth-server | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.admin-ui.enabled | ||
name: admin-ui | ||
repository: "" | ||
version: 5.2.0 | ||
- condition: global.fido2.enabled | ||
name: fido2 | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.scim.enabled | ||
name: scim | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.nginx-ingress.enabled | ||
name: nginx-ingress | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.casa.enabled | ||
name: casa | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.auth-server-key-rotation.enabled | ||
name: auth-server-key-rotation | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.persistence.enabled | ||
name: persistence | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.istio.ingress | ||
name: cn-istio-ingress | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.link.enabled | ||
name: link | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.saml.enabled | ||
name: saml | ||
repository: "" | ||
version: 1.2.0 | ||
- condition: global.kc-scheduler.enabled | ||
name: kc-scheduler | ||
repository: "" | ||
version: 1.2.0 | ||
description: Gluu Access and Identity Management | ||
home: https://www.gluu.org | ||
icon: file://assets/icons/gluu.ico | ||
kubeVersion: '>=v1.21.0-0' | ||
maintainers: | ||
- email: [email protected] | ||
name: moabu | ||
name: gluu | ||
sources: | ||
- https://docs.gluu.org | ||
version: 5.2.0 |
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,38 @@ | ||
## Tutorial | ||
|
||
For a full walkthrough of the Gluu Flex Server on Rancher, please see the [Gluu Server on Rancher Tutorial](https://docs.gluu.org/stable/admin/recipes/getting-started-rancher/). | ||
|
||
## Introduction | ||
The Gluu Server is a container distribution of free open source software (FOSS) for identity and access management (IAM). SaaS, custom, open source and commercial web and mobile applications can leverage a Gluu Server for user authentication, identity information, and policy decisions. | ||
|
||
Common use cases include: | ||
|
||
- Single sign-on (SSO) | ||
- Mobile authentication | ||
- API access management | ||
- Two-factor authentication (2FA) | ||
- Customer identity and access management (CIAM) | ||
- Identity federation | ||
|
||
### Free Open Source Software | ||
The Gluu Server is a FOSS platform for IAM. | ||
|
||
### Open Web Standards | ||
The Gluu Server can be deployed to support the following open standards for authentication, authorization, federated identity, and identity management: | ||
|
||
- OAuth 2.0 | ||
- OpenID Connect | ||
- User Managed Access 2.0 (UMA) | ||
- System for Cross-domain Identity Management (SCIM) | ||
- FIDO Universal 2nd Factor (U2F) | ||
- FIDO 2.0 / WebAuthn | ||
- Lightweight Directory Access Protocol (LDAP) | ||
- Remote Authentication Dial-In User Service (RADIUS) | ||
|
||
### Important notes for installation: | ||
- Make sure to enable `Customize Helm options before install` after clicking the initial `Install` on the top right. When you view your helm options, please uncheck the wait parameter as that conflicts with the post-install hook for the persistence image. | ||
|
||
### Quick install on Rancher UI with Docker single node | ||
- Install the nginx-ingress-controller chart. | ||
- Install the OpenEBS chart. | ||
- Install Gluu chart and specify your persistence as ldap. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,21 @@ | ||
# Patterns to ignore when building packages. | ||
# This supports shell glob matching, relative path matching, and | ||
# negation (prefixed with !). Only one pattern per line. | ||
.DS_Store | ||
# Common VCS dirs | ||
.git/ | ||
.gitignore | ||
.bzr/ | ||
.bzrignore | ||
.hg/ | ||
.hgignore | ||
.svn/ | ||
# Common backup files | ||
*.swp | ||
*.bak | ||
*.tmp | ||
*~ | ||
# Various IDEs | ||
.project | ||
.idea/ | ||
*.tmproj |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,20 @@ | ||
apiVersion: v2 | ||
appVersion: 5.2.0 | ||
description: Admin GUI. Requires license. | ||
home: https://docs.gluu.org | ||
icon: https://gluu.org/docs/gluu-server/favicon.ico | ||
keywords: | ||
- Authorization | ||
- OpenID | ||
- GUI | ||
kubeVersion: '>=v1.21.0-0' | ||
maintainers: | ||
- email: [email protected] | ||
name: Mohammad Abudayyeh | ||
url: https://github.com/moabu | ||
name: admin-ui | ||
sources: | ||
- https://github.com/GluuFederation/docker-gluu-admin-ui | ||
- https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/admin-ui | ||
type: application | ||
version: 5.2.0 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,58 @@ | ||
# admin-ui | ||
|
||
![Version: 5.2.0](https://img.shields.io/badge/Version-5.2.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 5.2.0](https://img.shields.io/badge/AppVersion-5.2.0-informational?style=flat-square) | ||
|
||
Admin GUI. Requires license. | ||
|
||
**Homepage:** <https://docs.gluu.org> | ||
|
||
## Maintainers | ||
|
||
| Name | Email | Url | | ||
| ---- | ------ | --- | | ||
| Mohammad Abudayyeh | <[email protected]> | <https://github.com/moabu> | | ||
|
||
## Source Code | ||
|
||
* <https://github.com/GluuFederation/docker-gluu-admin-ui> | ||
* <https://github.com/GluuFederation/flex/tree/main/charts/gluu/charts/admin-ui> | ||
|
||
## Requirements | ||
|
||
Kubernetes: `>=v1.21.0-0` | ||
|
||
## Values | ||
|
||
| Key | Type | Default | Description | | ||
|-----|------|---------|-------------| | ||
| additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken | | ||
| additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} | | ||
| customCommand | list | `[]` | Add custom pod's command. If passed, it will override the default conditional command. | | ||
| customScripts | list | `[]` | Add custom scripts that have been mounted to run before the entrypoint. - /tmp/custom.sh - /tmp/custom2.sh | | ||
| dnsConfig | object | `{}` | Add custom dns config | | ||
| dnsPolicy | string | `""` | Add custom dns policy | | ||
| hpa | object | `{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50}` | Configure the HorizontalPodAutoscaler | | ||
| hpa.behavior | object | `{}` | Scaling Policies | | ||
| hpa.metrics | list | `[]` | metrics if targetCPUUtilizationPercentage is not set | | ||
| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. | | ||
| image.pullSecrets | list | `[]` | Image Pull Secrets | | ||
| image.repository | string | `"gluufederation/admin-ui"` | Image to use for deploying. | | ||
| image.tag | string | `"5.2.0-1"` | Image tag to use for deploying. | | ||
| lifecycle | object | `{}` | | | ||
| livenessProbe | object | `{"failureThreshold":20,"initialDelaySeconds":60,"periodSeconds":25,"tcpSocket":{"port":8080},"timeoutSeconds":5}` | Configure the liveness healthcheck for the admin ui if needed. | | ||
| readinessProbe | object | `{"failureThreshold":20,"initialDelaySeconds":60,"periodSeconds":25,"tcpSocket":{"port":8080},"timeoutSeconds":5}` | Configure the readiness healthcheck for the admin ui if needed. | | ||
| replicas | int | `1` | Service replica number. | | ||
| resources | object | `{"limits":{"cpu":"2500m","memory":"2500Mi"},"requests":{"cpu":"2500m","memory":"2500Mi"}}` | Resource specs. | | ||
| resources.limits.cpu | string | `"2500m"` | CPU limit. | | ||
| resources.limits.memory | string | `"2500Mi"` | Memory limit. | | ||
| resources.requests.cpu | string | `"2500m"` | CPU request. | | ||
| resources.requests.memory | string | `"2500Mi"` | Memory request. | | ||
| service.name | string | `"http-admin-ui"` | The name of the admin ui port within the admin service. Please keep it as default. | | ||
| service.port | int | `8080` | Port of the admin ui service. Please keep it as default. | | ||
| service.sessionAffinity | string | `"None"` | Default set to None If you want to make sure that connections from a particular client are passed to the same Pod each time, you can select the session affinity based on the client's IP addresses by setting this to ClientIP | | ||
| service.sessionAffinityConfig | object | `{"clientIP":{"timeoutSeconds":10800}}` | the maximum session sticky time if sessionAffinity is ClientIP | | ||
| usrEnvs | object | `{"normal":{},"secret":{}}` | Add custom normal and secret envs to the service | | ||
| usrEnvs.normal | object | `{}` | Add custom normal envs to the service variable1: value1 | | ||
| usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 | | ||
| volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers | | ||
| volumes | list | `[]` | | |
98 changes: 98 additions & 0 deletions
98
charts/gluu/gluu/5.2.0/charts/admin-ui/templates/_helpers.tpl
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,98 @@ | ||
{{/* vim: set filetype=mustache: */}} | ||
{{/* | ||
Expand the name of the chart. | ||
*/}} | ||
{{- define "admin-ui.name" -}} | ||
{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} | ||
{{- end -}} | ||
|
||
{{/* | ||
Create a default fully qualified app name. | ||
We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). | ||
If release name contains chart name it will be used as a full name. | ||
*/}} | ||
{{- define "admin-ui.fullname" -}} | ||
{{- if .Values.fullnameOverride -}} | ||
{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} | ||
{{- else -}} | ||
{{- $name := default .Chart.Name .Values.nameOverride -}} | ||
{{- if contains $name .Release.Name -}} | ||
{{- .Release.Name | trunc 63 | trimSuffix "-" -}} | ||
{{- else -}} | ||
{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} | ||
{{- end -}} | ||
{{- end -}} | ||
{{- end -}} | ||
|
||
{{/* | ||
Create chart name and version as used by the chart label. | ||
*/}} | ||
{{- define "admin-ui.chart" -}} | ||
{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}} | ||
{{- end -}} | ||
|
||
{{/* | ||
Common labels | ||
*/}} | ||
{{- define "admin-ui.labels" -}} | ||
app: {{ .Release.Name }}-{{ include "admin-ui.name" . }} | ||
helm.sh/chart: {{ include "admin-ui.chart" . }} | ||
app.kubernetes.io/instance: {{ .Release.Name }} | ||
{{- if .Chart.AppVersion }} | ||
app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} | ||
{{- end }} | ||
app.kubernetes.io/managed-by: {{ .Release.Service }} | ||
{{- end -}} | ||
|
||
{{/* | ||
Create user custom defined envs | ||
*/}} | ||
{{- define "admin-ui.usr-envs"}} | ||
{{- range $key, $val := .Values.usrEnvs.normal }} | ||
- name: {{ $key }} | ||
value: {{ $val | quote }} | ||
{{- end }} | ||
{{- end }} | ||
|
||
{{/* | ||
Create user custom defined secret envs | ||
*/}} | ||
{{- define "admin-ui.usr-secret-envs"}} | ||
{{- range $key, $val := .Values.usrEnvs.secret }} | ||
- name: {{ $key }} | ||
valueFrom: | ||
secretKeyRef: | ||
name: {{ $.Release.Name }}-{{ $.Chart.Name }}-user-custom-envs | ||
key: {{ $key | quote }} | ||
{{- end }} | ||
{{- end }} | ||
|
||
{{/* | ||
Create topologySpreadConstraints lists | ||
*/}} | ||
{{- define "admin-ui.topology-spread-constraints"}} | ||
{{- range $key, $val := .Values.topologySpreadConstraints }} | ||
- maxSkew: {{ $val.maxSkew }} | ||
{{- if $val.minDomains }} | ||
minDomains: {{ $val.minDomains }} # optional; beta since v1.25 | ||
{{- end}} | ||
{{- if $val.topologyKey }} | ||
topologyKey: {{ $val.topologyKey }} | ||
{{- end}} | ||
{{- if $val.whenUnsatisfiable }} | ||
whenUnsatisfiable: {{ $val.whenUnsatisfiable }} | ||
{{- end}} | ||
labelSelector: | ||
matchLabels: | ||
app: {{ $.Release.Name }}-{{ include "admin-ui.name" $ }} | ||
{{- if $val.matchLabelKeys }} | ||
matchLabelKeys: {{ $val.matchLabelKeys }} # optional; alpha since v1.25 | ||
{{- end}} | ||
{{- if $val.nodeAffinityPolicy }} | ||
nodeAffinityPolicy: {{ $val.nodeAffinityPolicy }} # optional; alpha since v1.25 | ||
{{- end}} | ||
{{- if $val.nodeTaintsPolicy }} | ||
nodeTaintsPolicy: {{ $val.nodeTaintsPolicy }} # optional; alpha since v1.25 | ||
{{- end}} | ||
{{- end }} | ||
{{- end }} |
27 changes: 27 additions & 0 deletions
27
charts/gluu/gluu/5.2.0/charts/admin-ui/templates/admin-ui-destination-rules.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,27 @@ | ||
{{- if .Values.global.istio.enabled }} | ||
apiVersion: networking.istio.io/v1alpha3 | ||
kind: DestinationRule | ||
metadata: | ||
name: {{ .Release.Name }}-admin-ui-mtls | ||
namespace: {{ .Release.Namespace }} | ||
labels: | ||
APP_NAME: admin-ui | ||
{{ include "admin-ui.labels" . | indent 4 }} | ||
{{- if .Values.additionalLabels }} | ||
{{ toYaml .Values.additionalLabels | indent 4 }} | ||
{{- end }} | ||
{{- if or (.Values.additionalAnnotations) (index .Values.global "admin-ui" "customAnnotations" "destinationRule") }} | ||
annotations: | ||
{{- if .Values.additionalAnnotations }} | ||
{{ toYaml .Values.additionalAnnotations | indent 4 }} | ||
{{- end }} | ||
{{- if index .Values.global "admin-ui" "customAnnotations" "destinationRule" }} | ||
{{ toYaml (index .Values.global "admin-ui" "customAnnotations" "destinationRule") | indent 4 }} | ||
{{- end }} | ||
{{- end }} | ||
spec: | ||
host: {{ index .Values "global" "admin-ui" "adminUiServiceName" }}.{{ .Release.Namespace }}.svc.cluster.local | ||
trafficPolicy: | ||
tls: | ||
mode: ISTIO_MUTUAL | ||
{{- end }} |
Oops, something went wrong.