This repository has been archived by the owner on Mar 12, 2024. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 4
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #6 from catenax-ng/release1.7.3
Quality gate changes
- Loading branch information
Showing
19 changed files
with
136 additions
and
124 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,6 @@ | ||
| ### The following people have contributed to this repository | ||
|
|
||
| Aditya Kumar, doubleSlash Net-Business GmbH, https://github.com/adkumar1 <br /> | ||
| Dmitrii Vasiunin, doubleSlash Net-Business GmbH, https://github.com/dvasunin <br /> | ||
| Amol Dashwant, doubleSlash Net-Business GmbH, https://github.com/amoldashwant <br /> | ||
| Fedor Nazarov, doubleSlash Net-Business GmbH, https://github.com/Wulghash <br /> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,30 @@ | ||
| ## Installation Steps | ||
|
|
||
| Helm charts are provided inside https://github.com/eclipse-tractusx/daps-helm-chart | ||
|
|
||
| 1.) Using helm commands:- <br /> | ||
|
|
||
| How to install application using helm:- | ||
| helm install ReleaseName ChartName | ||
|
|
||
| a.) Add helm repository in tractusx:- | ||
| helm repo add daps-server https://eclipse-tractusx.github.io/charts/dev | ||
| b.) To search the specific repo in helm repositories | ||
| helm search repo tractusx-dev | ||
| c.) To install using helm command:- | ||
| helm install daps-server tractusx-dev/daps-server | ||
|
|
||
|
|
||
| 2.) Local installation: | ||
|
|
||
| a.) git clone https://github.com/eclipse-tractusx/daps-helm-chart.git <br /> | ||
| b.) Modify values file according to your requirement. <br /> | ||
| c.) Add the image.repository in the values file | ||
| c.) You need to define the secrets as well in values.yaml <br /> | ||
| secret: <br /> | ||
| clientId: -> Client id for DAPS. | ||
| clientSecret: -> Client Secret for DAPS <br /> | ||
|
|
||
| d.) These secrets should be defined in Hashicorp vault. <br /> | ||
| e.) Deploy in a kubernetes cluster <br /> | ||
| helm install daps-server charts/daps-server/ -n NameSpace <br /> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,63 +1,6 @@ | ||
| # Security Policy | ||
|
|
||
|
|
||
|
|
||
|
|
||
| ## Reporting a bug in Catena-X | ||
|
|
||
|
|
||
|
|
||
|
|
||
| Report security bugs in Catena-X to "[email protected]". | ||
|
|
||
| Your report will be acknowledged within 5 days, and you’ll receive a more detailed response to your report within 10 days indicating the next steps in handling your submission. | ||
|
|
||
| After the initial reply to your report, the security team will endeavor to keep you informed of the progress being made towards a fix and full announcement, and may ask for additional information or guidance surrounding the reported issue. | ||
|
|
||
| Please do not report security bugs through public GitHub issues. | ||
|
|
||
|
|
||
|
|
||
|
|
||
| Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue: | ||
|
|
||
| - Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.) | ||
|
|
||
| - Full paths of source file(s) related to the manifestation of the issue | ||
|
|
||
| - The location of the affected source code (tag/branch/commit or direct URL) | ||
|
|
||
| - Any special configuration required to reproduce the issue | ||
|
|
||
| - Step-by-step instructions to reproduce the issue | ||
|
|
||
| - Proof-of-concept or exploit code (if possible) | ||
|
|
||
| - Impact of the issue, including how an attacker might exploit the issue | ||
|
|
||
| This information will help us triage your report more quickly. | ||
|
|
||
|
|
||
|
|
||
|
|
||
| ## Reporting a bug in a third party module | ||
|
|
||
| Security bugs in third party modules should be reported to their respective maintainers. | ||
|
|
||
|
|
||
|
|
||
|
|
||
| ## Disclosure policy | ||
|
|
||
| Here is the security disclosure policy for Catena-X. | ||
|
|
||
| - The security report is received and is assigned a primary handler. | ||
|
|
||
| - This person will coordinate the fix and release process. | ||
|
|
||
| - Fixes are prepared for all releases which are still under maintenance. | ||
|
|
||
| - A suggested embargo date for this vulnerability is chosen. Typically the embargo date will be set to 72 hours. However, this may vary depending on the severity of the bug or difficulty in applying a fix. | ||
|
|
||
| This process can take some time, especially when coordination is required with maintainers of other projects. | ||
| Every effort will be made to handle the bug in as timely a manner as possible; however, it’s important that we follow the release process above to ensure that the disclosure is handled in a consistent manner. | ||
|
|
||
| ## Reporting a Vulnerability | ||
|
|
||
| Please report a found vulnerability here: | ||
| [https://www.eclipse.org/security/](https://www.eclipse.org/security/) |
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,9 @@ | ||
| # Patterns to ignore when building packages. | ||
| # This supports shell glob matching, relative path matching, and | ||
| # negation (prefixed with !). Only one pattern per line. | ||
| .DS_Store | ||
| # Common VCS dirs | ||
| .git/ | ||
| .gitignore | ||
| values?*.yaml | ||
| values?*.yml |
Binary file not shown.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,50 +1,56 @@ | ||
| # daps-server | ||
|
|
||
|    | ||
|    | ||
|
|
||
| DAPS server helm-chart | ||
|
|
||
| ## Source Code | ||
|
|
||
| * <https://github.com/eclipse-tractusx/daps-helm-chart> | ||
|
|
||
| ## Values | ||
|
|
||
| | Key | Type | Default | Description | | ||
| |-----|------|---------|-------------| | ||
| | affinity | object | `{}` | Pod affinity configuration | | ||
| | autoscaling | object | `{"enabled":false, "maxReplicas":100, "minReplicas":1, "targetCPUUtilizationPercentage":80}` | DAPS autoscaling configuration | | ||
| | autoscaling | object | `{"enabled":false,"maxReplicas":5,"minReplicas":1,"targetMemoryUtilizationPercentage":60}` | DAPS autoscaling configuration | | ||
| | daps.secret.clientId | string | `""` | | | ||
| | daps.secret.clientSecret | string | `""` | | | ||
| | env.config | object | `{}` | Additional env variables | | ||
| | env.secret | object | `{}` | Additional env variables that should be stored in encrypted way | | ||
| | fullnameOverride | string | `""` | | | ||
| | image.pullPolicy | string | `"IfNotPresent"` | Image pull policy | | ||
| | image.repository | string | `"nginx"` | DAPS docker image | | ||
| | image.repository | string | `nil` | DAPS docker image | | ||
| | image.tag | string | `""` | Image tag. Overrides the image tag whose default is the chart appVersion. | | ||
| | imagePullSecrets | list | `[]` | Secret which contains dockerconfig.json from private container registry with daps image | | ||
| | ingress.annotations | object | `{}` | Additional ingress annotations | | ||
| | ingress.enabled | bool | `false` | If set to `true`, DAPS will be exposed with ingress controller at http(s)://(ingress.host)/(ingress.pathPrefix) | | ||
| | ingress.host | string | `"chart-example.local"` | | | ||
| | ingress.host | string | `"daps-beta.int.demo.catena-x.net"` | Ingress host name | | ||
| | ingress.pathPrefix | string | `"/"` | Path prefix to be added to DAPS URI. Regex can be used | | ||
| | ingress.rootPath | string | `"/"` | Root prefix without regex rules that used to configure daps host name in configuration | | ||
| | ingress.tls.certMgr.enabled | bool | `false` | If `true` cert-manager will be used to issue a certificate with ingress.host CN name | | ||
| | ingress.tls.certMgr.issuer | string | `""` | Cert-manager issuer name | | ||
| | ingress.tls.certMgr.issuer | string | `"letsencrypt-prod"` | Cert-manager issuer name | | ||
| | ingress.tls.enabled | bool | `false` | If `true` daps will be exposed with https | | ||
| | nameOverride | string | `""` | | | ||
| | nodeSelector | object | `{}` | Node selection configuration | | ||
| | omejdn.createDefaultAdmin | bool | `false` | Default user and client will be created if set to `true`. User credentials set in `omejdn.defaultAdminUser` section | | ||
| | omejdn.createDefaultAdmin | bool | `true` | Default user and client will be created if set to `true`. User credentials set in `omejdn.defaultAdminUser` section | | ||
| | omejdn.defaultAdminUser | string | `"admin:admin"` | Default user credentials in format `user:password` | | ||
| | omejdn.serverKey | string | `""` | Server key content. DAPS will generate key if it's not provided at startup | | ||
| | omejdn.serverKeyFolderPath | string | `"/opt/server-key"` | Path to directory with private server key | | ||
| | omejdn.serverKeyFolderPath | string | `"/opt"` | Path to directory with private server key | | ||
| | persistence.enabled | bool | `true` | If `true` persistent volume will be used to store clients and users configuration | | ||
| | persistence.storageClass | string | `"azurefile"` | Storage class to claim a volume. | | ||
| | persistence.storageSize | string | `"1Gi"` | Volume size | | ||
| | podAnnotations | object | `{}` | | | ||
| | podSecurityContext | object | `{}` | Pod security context configuration | | ||
| | replicaCount | int | `1` | DAPS instances count | | ||
| | resources | object | `{}` | Pod resources requests and limits configuration | | ||
| | securityContext | object | `{}` | Pod security context configuration | | ||
| | resources | object | `{"limits":{"cpu":"200m","memory":"300Mi"},"requests":{"cpu":"200m","memory":"300Mi"}}` | Pod resources requests and limits configuration | | ||
| | securityContext | string | `nil` | Pod security context configuration | | ||
| | service.port | int | `4567` | Service port | | ||
| | service.type | string | `"ClusterIP"` | Service type | | ||
| | serviceAccount.annotations | object | `{}` | Annotations to add to the service account | | ||
| | serviceAccount.create | bool | `true` | Specifies whether a service account should be created | | ||
| | serviceAccount.name | string | `""` | The name of the service account to use. -- If not set and create is true, a name is generated using the fullname template | | ||
| | serviceAccount.name | string | `""` | If not set and create is true, a name is generated using the fullname template | | ||
| | tolerations | list | `[]` | Pod toleration settings | | ||
|
|
||
| ---------------------------------------------- | ||
| Autogenerated from chart metadata using [helm-docs v1.5.0](https://github.com/norwoodj/helm-docs/releases/v1.5.0) | ||
| Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,19 +1,8 @@ | ||
| apiVersion: v1 | ||
| kind: Secret | ||
| metadata: | ||
| name: avp-daps-secret | ||
| name: {{ include "daps-server.applicationSecret.name" . }} | ||
| type: Opaque | ||
| stringData: | ||
| ClientID: {{ .Values.daps.secret.clientId }} | ||
| ClientSecret: {{ .Values.daps.secret.clientSecret }} | ||
| #apiVersion: v1 | ||
| #kind: Secret | ||
| #metadata: | ||
| # name: avp-daps-secret | ||
| # annotations: | ||
| # avp.kubernetes.io/path: "essential-services/data/daps-beta" | ||
| #type: Opaque | ||
| #stringData: | ||
| # ClientID: <clientId> | ||
| # ClientSecret: <clientSecret> | ||
|
|
||
| ClientID: {{ .Values.daps.secret.clientId | default (randAlphaNum 16) }} | ||
| ClientSecret: {{ .Values.daps.secret.clientSecret | default (randAlphaNum 16) }} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.