feat: add jans-link support in CN

.github/workflows/docker_build_image.yml

@@ -23,9 +23,9 @@ on:
   workflow_dispatch:
     inputs:
       services:
-        description: 'One or set of the docker images. Format as following: "docker-jans-auth-server docker-jans-certmanager docker-jans-config-api docker-jans-configurator docker-jans-fido2 docker-jans-persistence-loader docker-jans-scim docker-jans-monolith docker-jans-loadtesting-jmeter"'
+        description: 'One or set of the docker images. Format as following: "docker-jans-auth-server docker-jans-certmanager docker-jans-config-api docker-jans-configurator docker-jans-fido2 docker-jans-persistence-loader docker-jans-scim docker-jans-monolith docker-jans-loadtesting-jmeter docker-jans-link"'
         required: true
-        default: 'docker-jans-auth-server docker-jans-certmanager docker-jans-config-api docker-jans-configurator docker-jans-fido2 docker-jans-persistence-loader docker-jans-scim docker-jans-monolith docker-jans-loadtesting-jmeter'
+        default: 'docker-jans-auth-server docker-jans-certmanager docker-jans-config-api docker-jans-configurator docker-jans-fido2 docker-jans-persistence-loader docker-jans-scim docker-jans-monolith docker-jans-loadtesting-jmeter docker-jans-link'
       cn_version:
         description: 'The war version to build the image off'
         required: false
@@ -44,7 +44,7 @@ jobs:
     strategy:
       max-parallel: 8
       matrix:
-        docker-images: ["auth-server", "certmanager", "config-api", "configurator", "fido2", "persistence-loader", "scim", "monolith", "loadtesting-jmeter"]
+        docker-images: ["auth-server", "certmanager", "config-api", "configurator", "fido2", "persistence-loader", "scim", "monolith", "loadtesting-jmeter", "link"]
     steps:
       - name: Checkout
         uses: actions/checkout@v3
@@ -58,7 +58,7 @@ jobs:
           DEFAULT_ALL=${{ github.event.inputs.services }}
           if [ -z "$DEFAULT_ALL" ]
           then
-            DEFAULT_ALL="docker-jans-auth-server docker-jans-certmanager docker-jans-config-api docker-jans-configurator docker-jans-fido2 docker-jans-persistence-loader docker-jans-scim docker-jans-monolith docker-jans-loadtesting-jmeter"
+            DEFAULT_ALL="docker-jans-auth-server docker-jans-certmanager docker-jans-config-api docker-jans-configurator docker-jans-fido2 docker-jans-persistence-loader docker-jans-scim docker-jans-monolith docker-jans-loadtesting-jmeter docker-jans-link"
           else
             echo "$DEFAULT_ALL"
           fi

.github/workflows/docker_imagescan.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        docker-images: ["auth-server", "certmanager", "config-api", "configurator", "fido2", "persistence-loader", "scim", "monolith"]
+        docker-images: ["auth-server", "certmanager", "config-api", "configurator", "fido2", "persistence-loader", "scim", "monolith", "link"]
     steps:
     - uses: actions/checkout@v3
     - name: Build the Container image

.github/workflows/jans_pycloud_build_package.yml

@@ -40,7 +40,7 @@ jobs:
       - name: Update stable requirements in docker images
         id: build_stable_reqs
         run: |
-          dockerimages="auth-server certmanager config-api configurator fido2 persistence-loader scim"
+          dockerimages="auth-server certmanager config-api configurator fido2 persistence-loader scim link"
           for image in $dockerimages; do
             sed -i '/git+https/c\git+https://github.com/${{ github.repository }}@${{ github.sha }}#egg=jans-pycloudlib&subdirectory=jans-pycloudlib' ./docker-jans-$image/requirements.txt
           done

.github/workflows/release.yaml

@@ -105,7 +105,7 @@ jobs:
       #max-parallel: 1
       fail-fast: false
       matrix:
-        simple: [ "docker-jans-auth-server", "docker-jans-certmanager", "docker-jans-config-api", "docker-jans-configurator", "docker-jans-fido2", "docker-jans-persistence-loader", "docker-jans-scim", "docker-jans-monolith" ]
+        simple: [ "docker-jans-auth-server", "docker-jans-certmanager", "docker-jans-config-api", "docker-jans-configurator", "docker-jans-fido2", "docker-jans-persistence-loader", "docker-jans-scim", "docker-jans-monolith", "docker-jans-link" ]
     steps:
     - name: Checkout
       uses: actions/checkout@v3

charts/janssen/Chart.yaml

@@ -75,3 +75,7 @@ dependencies:
     - name: persistence
       condition: global.persistence.enabled
       version: 1.0.16-dev
+
+    - name: link
+      condition: global.link.enabled
+      version: 1.0.16-dev

charts/janssen/charts/link/Chart.yaml

@@ -0,0 +1,18 @@
+apiVersion: v2
+name: link
+version: 1.0.16-dev
+kubeVersion: ">=v1.21.0-0"
+description: Jans Link
+type: application
+keywords:
+  - link
+home: https://jans.io
+sources:
+  - https://github.com/JanssenProject/jans/jans-link
+  - https://github.com/JanssenProject/jans/docker-jans-link
+maintainers:
+  - name: Mohammad Abudayyeh
+    email: support@jans.io
+    url: https://github.com/moabu
+icon: https://github.com/JanssenProject/jans/raw/main/docs/assets/logo/janssen_project_favicon_transparent_50px_50px.png
+appVersion: "1.0.16-dev"

charts/janssen/charts/link/README.md

@@ -0,0 +1,64 @@
+# link
+
+![Version: 1.0.15-dev](https://img.shields.io/badge/Version-1.0.15--dev-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.0.16-dev](https://img.shields.io/badge/AppVersion-1.0.16--dev-informational?style=flat-square)
+
+Jans Link
+
+**Homepage:** <https://jans.io>
+
+## Maintainers
+
+| Name | Email | Url |
+| ---- | ------ | --- |
+| Mohammad Abudayyeh | <support@jans.io> | <https://github.com/moabu> |
+
+## Source Code
+
+* <https://github.com/JanssenProject/jans/jans-link>
+* <https://github.com/JanssenProject/jans/docker-jans-link>
+
+## Requirements
+
+Kubernetes: `>=v1.21.0-0`
+
+## Values
+
+| Key | Type | Default | Description |
+|-----|------|---------|-------------|
+| additionalAnnotations | object | `{}` | Additional annotations that will be added across all resources  in the format of {cert-manager.io/issuer: "letsencrypt-prod"}. key app is taken |
+| additionalLabels | object | `{}` | Additional labels that will be added across all resources definitions in the format of {mylabel: "myapp"} |
+| affinity | object | `{}` |  |
+| dnsConfig | object | `{}` | Add custom dns config |
+| dnsPolicy | string | `""` | Add custom dns policy |
+| fullnameOverride | string | `""` |  |
+| hpa | object | `{"behavior":{},"enabled":true,"maxReplicas":10,"metrics":[],"minReplicas":1,"targetCPUUtilizationPercentage":50}` | Configure the HorizontalPodAutoscaler |
+| hpa.behavior | object | `{}` | Scaling Policies |
+| hpa.metrics | list | `[]` | metrics if targetCPUUtilizationPercentage is not set |
+| image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
+| image.pullSecrets | list | `[]` | Image Pull Secrets |
+| image.repository | string | `"ghcr.io/janssenproject/jans/link"` | Image  to use for deploying. |
+| image.tag | string | `"1.0.16_dev"` | Image  tag to use for deploying. |
+| lifecycle | object | `{}` |  |
+| livenessProbe | object | `{"httpGet":{"path":"/jans-link/api/v1/health/live","port":8074},"initialDelaySeconds":30,"periodSeconds":30,"timeoutSeconds":5}` | Configure the liveness healthcheck for the auth server if needed. |
+| livenessProbe.httpGet | object | `{"path":"/jans-link/api/v1/health/live","port":8074}` | Executes the python3 healthcheck. |
+| nameOverride | string | `""` |  |
+| nodeSelector | object | `{}` |  |
+| readinessProbe | object | `{"httpGet":{"path":"/jans-link/api/v1/health/ready","port":8074},"initialDelaySeconds":25,"periodSeconds":25,"timeoutSeconds":5}` | Configure the readiness healthcheck for the auth server if needed. |
+| replicas | int | `1` | Service replica number. |
+| resources | object | `{"limits":{"cpu":"500m","memory":"1000Mi"},"requests":{"cpu":"500m","memory":"1000Mi"}}` | Resource specs. |
+| resources.limits.cpu | string | `"500m"` | CPU limit. |
+| resources.limits.memory | string | `"1000Mi"` | Memory limit. |
+| resources.requests.cpu | string | `"500m"` | CPU request. |
+| resources.requests.memory | string | `"1000Mi"` | Memory request. |
+| service.name | string | `"http-link"` | The name of the link port within the link service. Please keep it as default. |
+| service.sessionAffinity | string | `"None"` | Default set to None If you want to make sure that connections from a particular client are passed to the same Pod each time, you can select the session affinity based on the client's IP addresses by setting this to ClientIP |
+| service.sessionAffinityConfig | object | `{"clientIP":{"timeoutSeconds":10800}}` | the maximum session sticky time if sessionAffinity is ClientIP |
+| tolerations | list | `[]` |  |
+| usrEnvs | object | `{"normal":{},"secret":{}}` | Add custom normal and secret envs to the service |
+| usrEnvs.normal | object | `{}` | Add custom normal envs to the service variable1: value1 |
+| usrEnvs.secret | object | `{}` | Add custom secret envs to the service variable1: value1 |
+| volumeMounts | list | `[]` | Configure any additional volumesMounts that need to be attached to the containers |
+| volumes | list | `[]` | Configure any additional volumes that need to be attached to the pod |
+
+----------------------------------------------
+Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)

charts/janssen/charts/link/templates/_helpers.tpl

@@ -0,0 +1,98 @@
+{{/* vim: set filetype=mustache: */}}
+{{/*
+Expand the name of the chart.
+*/}}
+{{- define "link.name" -}}
+{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+Create a default fully qualified app name.
+We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec).
+If release name contains chart name it will be used as a full name.
+*/}}
+{{- define "link.fullname" -}}
+{{- if .Values.fullnameOverride -}}
+{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- $name := default .Chart.Name .Values.nameOverride -}}
+{{- if contains $name .Release.Name -}}
+{{- .Release.Name | trunc 63 | trimSuffix "-" -}}
+{{- else -}}
+{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Create chart name and version as used by the chart label.
+*/}}
+{{- define "link.chart" -}}
+{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" -}}
+{{- end -}}
+
+{{/*
+    Common labels
+*/}}
+{{- define "link.labels" -}}
+app: {{ .Release.Name }}-{{ include "link.name" . }}
+helm.sh/chart: {{ include "link.chart" . }}
+app.kubernetes.io/instance: {{ .Release.Name }}
+{{- if .Chart.AppVersion }}
+app.kubernetes.io/version: {{ .Chart.AppVersion | quote }}
+{{- end }}
+app.kubernetes.io/managed-by: {{ .Release.Service }}
+{{- end -}}
+
+{{/*
+Create user custom defined  envs
+*/}}
+{{- define "link.usr-envs"}}
+{{- range $key, $val := .Values.usrEnvs.normal }}
+- name: {{ $key }}
+  value: {{ $val | quote }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create user custom defined secret envs
+*/}}
+{{- define "link.usr-secret-envs"}}
+{{- range $key, $val := .Values.usrEnvs.secret }}
+- name: {{ $key }}
+  valueFrom:
+    secretKeyRef:
+      name: {{ $.Release.Name }}-{{ $.Chart.Name }}-user-custom-envs
+      key: {{ $key | quote }}
+{{- end }}
+{{- end }}
+
+{{/*
+Create topologySpreadConstraints lists
+*/}}
+{{- define "link.topology-spread-constraints"}}
+{{- range $key, $val := .Values.topologySpreadConstraints }}
+- maxSkew: {{ $val.maxSkew }}
+  {{- if $val.minDomains }}
+  minDomains: {{ $val.minDomains }} # optional; beta since v1.25
+  {{- end}}
+  {{- if $val.topologyKey }}
+  topologyKey: {{ $val.topologyKey }}
+  {{- end}}
+  {{- if $val.whenUnsatisfiable }}
+  whenUnsatisfiable: {{ $val.whenUnsatisfiable }}
+  {{- end}}
+  labelSelector:
+    matchLabels:
+      app: {{ $.Release.Name }}-{{ include "link.name" $ }}
+  {{- if $val.matchLabelKeys }}
+  matchLabelKeys: {{ $val.matchLabelKeys }} # optional; alpha since v1.25
+  {{- end}}
+  {{- if $val.nodeAffinityPolicy }}
+  nodeAffinityPolicy: {{ $val.nodeAffinityPolicy }} # optional; alpha since v1.25
+  {{- end}}
+  {{- if $val.nodeTaintsPolicy }}
+  nodeTaintsPolicy: {{ $val.nodeTaintsPolicy }} # optional; alpha since v1.25
+  {{- end}}
+{{- end }}
+{{- end }}