chore(release): release 1.1.6 (#10201)

* chore(release): release 1.1.6 * ci: adjust workflow runs
JanssenProject · Nov 20, 2024 · 4157f10 · 4157f10
1 parent 833c24a
commit 4157f10
Show file tree

Hide file tree

Showing 193 changed files with 350 additions and 338 deletions.
diff --git a/.github/workflows/build-docker-image.yml b/.github/workflows/build-docker-image.yml
@@ -7,17 +7,13 @@ on:
     tags:
       - "*"
     branches:
-      # below branch is triggered by jenkins which triggers dev image
-      - update-source-build-date
       - main
     paths:
       - "docker-jans-**/**"
       - "!**.md"
   pull_request:
     branches:
       - main
-      # below branch is triggered by jenkins which triggers dev image
-      - update-source-build-dates
     paths:
       - "docker-jans-**/**"
       - "!docker-jans-**/CHANGELOG.md"

diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml
@@ -4,11 +4,17 @@ on:
   push:
     branches:
       - main
+    paths:
+      - "jans-**"
+      - "agama"
   schedule:
     - cron: '0 8 * * *'
   pull_request:
     branches:
       - main
+    paths:
+      - "jans-**"
+      - "agama"
   workflow_dispatch:
     inputs:
       project:
@@ -48,8 +54,19 @@ jobs:
             if [ -z "$projects" ]; then
               projects="jans-bom jans-orm jans-core jans-lock/lock-server agama jans-auth-server jans-link jans-fido2 jans-scim jans-keycloak-link jans-config-api jans-keycloak-integration jans-casa"
             fi
+            pull_number=$(jq --raw-output .pull_request.number "$GITHUB_EVENT_PATH")
+            DIRECTORIES_CHANGED=$(gh pr view $pull_number --json files --jq '.files.[].path' | cut -d/ -f1 | sort -u | grep "jans-" || echo "$projects")
+            changed_projects=""
+            for dir in $DIRECTORIES_CHANGED; do
+              for project in $projects; do
+                if [[ "$dir" == "$project" ]]; then
+                  changed_projects="$changed_projects $project"
+                fi
+              done
+            done
+            echo "Changed projects: $changed_projects"          
             matrix="{\"include\":["
-            for project in $projects; do
+            for project in $changed_projects; do
               matrix="$matrix{\"service\":\"$project\",\"maven_skip_tests\":true},"
             done
             matrix="${matrix%,}]}"

diff --git a/.github/workflows/test-microk8s.yml b/.github/workflows/test-microk8s.yml
@@ -24,7 +24,6 @@ jobs:
       max-parallel: 6
       matrix:
         istio: ["true", "false"]
-        #TODO: add '"pgsql"
         persistence-backends: ["MYSQL"]
       fail-fast: false
     runs-on: ubuntu-latest

diff --git a/agama/pom.xml b/agama/pom.xml
@@ -5,7 +5,7 @@
 	<groupId>io.jans</groupId>
 	<artifactId>agama</artifactId>
 	<packaging>pom</packaging>
-	<version>1.1.6-SNAPSHOT</version>
+	<version>1.1.6</version>
 	<name>agama parent</name>
 
     <prerequisites>

diff --git a/agama/transpiler/pom.xml b/agama/transpiler/pom.xml
@@ -9,7 +9,7 @@
     <parent>
         <groupId>io.jans</groupId>
         <artifactId>agama</artifactId>
-        <version>1.1.6-SNAPSHOT</version>
+        <version>1.1.6</version>
     </parent>
 
     <properties>

diff --git a/charts/janssen-all-in-one/Chart.yaml b/charts/janssen-all-in-one/Chart.yaml
@@ -3,14 +3,14 @@ annotations:
   artifacthub.io/containsSecurityUpdates: 'true'
   artifacthub.io/images: |
     - name: all-in-one
-      image: ghcr.io/janssenproject/jans/all-in-one:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/all-in-one:1.1.6-1
   artifacthub.io/license: Apache-2.0
   artifacthub.io/prerelease: 'false'
   catalog.cattle.io/certified: partner
   catalog.cattle.io/release-name: janssen-all-in-one
   catalog.cattle.io/display-name: Janssen Cloud Identity and Access Management All-in-One
 apiVersion: v2
-appVersion: "1.1.6-dev"
+appVersion: "1.1.6"
 icon: >-
   https://raw.githubusercontent.com/JanssenProject/jans/main/docs/assets/logo/janssen_project_favicon_transparent_50px_50px.png
 home: https://jans.io
@@ -22,4 +22,4 @@ maintainers:
     email: [email protected]
 description: Janssen Access and Identity Management All-in-One Chart. This chart deploys the selected janssen microservice all in one deployment.
 name: janssen-all-in-one
-version: 1.1.6-dev
+version: 1.1.6
diff --git a/charts/janssen-all-in-one/README.md b/charts/janssen-all-in-one/README.md
@@ -1,6 +1,6 @@
 # janssen-all-in-one
 
-![Version: 1.1.6-dev](https://img.shields.io/badge/Version-1.1.6--dev-informational?style=flat-square) ![AppVersion: 1.1.6-dev](https://img.shields.io/badge/AppVersion-1.1.6--dev-informational?style=flat-square)
+![Version: 1.1.6](https://img.shields.io/badge/Version-1.1.6-informational?style=flat-square) ![AppVersion: 1.1.6](https://img.shields.io/badge/AppVersion-1.1.6-informational?style=flat-square)
 
 Janssen Access and Identity Management All-in-One Chart. This chart deploys the selected janssen microservice all in one deployment.
 
@@ -30,7 +30,7 @@ Kubernetes: `>=v1.22.0-0`
 | adminPassword | string | `"Test1234#"` | Admin password to log in to the UI. |
 | alb.ingress | bool | `false` | switches the service to Nodeport for ALB ingress |
 | auth-server | object | `{"appLoggers":{"auditStatsLogLevel":"INFO","auditStatsLogTarget":"FILE","authLogLevel":"INFO","authLogTarget":"STDOUT","enableStdoutLogPrefix":"true","httpLogLevel":"INFO","httpLogTarget":"FILE","persistenceDurationLogLevel":"INFO","persistenceDurationLogTarget":"FILE","persistenceLogLevel":"INFO","persistenceLogTarget":"FILE","scriptLogLevel":"INFO","scriptLogTarget":"FILE"},"authEncKeys":"RSA1_5 RSA-OAEP","authSigKeys":"RS256 RS384 RS512 ES256 ES384 ES512 PS256 PS384 PS512","enabled":true,"ingress":{"authServerAdditionalAnnotations":{},"authServerEnabled":true,"authServerLabels":{},"deviceCodeAdditionalAnnotations":{},"deviceCodeEnabled":true,"deviceCodeLabels":{},"firebaseMessagingAdditionalAnnotations":{},"firebaseMessagingEnabled":true,"firebaseMessagingLabels":{},"lockAdditionalAnnotations":{},"lockConfigAdditionalAnnotations":{},"lockConfigEnabled":false,"lockConfigLabels":{},"lockEnabled":false,"lockLabels":{},"openidAdditionalAnnotations":{},"openidConfigEnabled":true,"openidConfigLabels":{},"u2fAdditionalAnnotations":{},"u2fConfigEnabled":true,"u2fConfigLabels":{},"uma2AdditionalAnnotations":{},"uma2ConfigEnabled":true,"uma2ConfigLabels":{},"webdiscoveryAdditionalAnnotations":{},"webdiscoveryEnabled":true,"webdiscoveryLabels":{},"webfingerAdditionalAnnotations":{},"webfingerEnabled":true,"webfingerLabels":{}},"lockEnabled":false}` | Parameters used globally across all services helm charts. |
-| auth-server-key-rotation | object | `{"additionalAnnotations":{},"additionalLabels":{},"customCommand":[],"customScripts":[],"dnsConfig":{},"dnsPolicy":"","enabled":true,"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"ghcr.io/janssenproject/jans/certmanager","tag":"1.1.6_dev"},"initKeysLife":48,"keysLife":48,"keysPushDelay":0,"keysPushStrategy":"NEWER","keysStrategy":"NEWER","lifecycle":{},"resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Responsible for regenerating auth-keys per x hours |
+| auth-server-key-rotation | object | `{"additionalAnnotations":{},"additionalLabels":{},"customCommand":[],"customScripts":[],"dnsConfig":{},"dnsPolicy":"","enabled":true,"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"ghcr.io/janssenproject/jans/certmanager","tag":"1.1.6-1"},"initKeysLife":48,"keysLife":48,"keysPushDelay":0,"keysPushStrategy":"NEWER","keysStrategy":"NEWER","lifecycle":{},"resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Responsible for regenerating auth-keys per x hours |
 | auth-server-key-rotation.additionalAnnotations | object | `{}` | Additional annotations that will be added across the gateway in the format of {cert-manager.io/issuer: "letsencrypt-prod"} |
 | auth-server-key-rotation.additionalLabels | object | `{}` | Additional labels that will be added across the gateway in the format of {mylabel: "myapp"} |
 | auth-server-key-rotation.customCommand | list | `[]` | Add custom jobs's command. If passed, it will override the default conditional command. |
@@ -41,7 +41,7 @@ Kubernetes: `>=v1.22.0-0`
 | auth-server-key-rotation.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
 | auth-server-key-rotation.image.pullSecrets | list | `[]` | Image Pull Secrets |
 | auth-server-key-rotation.image.repository | string | `"ghcr.io/janssenproject/jans/certmanager"` | Image  to use for deploying. |
-| auth-server-key-rotation.image.tag | string | `"1.1.6_dev"` | Image  tag to use for deploying. |
+| auth-server-key-rotation.image.tag | string | `"1.1.6-1"` | Image  tag to use for deploying. |
 | auth-server-key-rotation.initKeysLife | int | `48` | The initial auth server key rotation keys life in hours |
 | auth-server-key-rotation.keysLife | int | `48` | Auth server key rotation keys life in hours |
 | auth-server-key-rotation.keysPushDelay | int | `0` | Delay (in seconds) before pushing private keys to Auth server |
@@ -256,7 +256,7 @@ Kubernetes: `>=v1.22.0-0`
 | image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
 | image.pullSecrets | list | `[]` | Image Pull Secrets |
 | image.repository | string | `"ghcr.io/janssenproject/jans/all-in-one"` | Image  to use for deploying. |
-| image.tag | string | `"1.1.6_dev"` | Image  tag to use for deploying. |
+| image.tag | string | `"1.1.6-1"` | Image  tag to use for deploying. |
 | isFqdnRegistered | bool | `false` | Boolean flag to enable mapping lbIp  to fqdn inside pods on clouds that provide static ip for load balancers. On cloud that provide only addresses to the LB this flag will enable a script to actively scan config.configmap.lbAddr and update the hosts file inside the pods automatically. |
 | istio.additionalAnnotations | object | `{}` | Additional annotations that will be added across the gateway in the format of {cert-manager.io/issuer: "letsencrypt-prod"} |
 | istio.additionalLabels | object | `{}` | Additional labels that will be added across the gateway in the format of {mylabel: "myapp"} |
@@ -265,7 +265,7 @@ Kubernetes: `>=v1.22.0-0`
 | istio.ingress | bool | `false` | Boolean flag that enables using istio gateway for Janssen. This assumes istio ingress is installed and hence the LB is available. |
 | istio.namespace | string | `"istio-system"` | The namespace istio is deployed in. The is normally istio-system. |
 | istio.tlsSecretName | string | `"istio-tls-certificate"` |  |
-| kc-scheduler | object | `{"additionalAnnotations":{},"additionalLabels":{},"customCommand":[],"customScripts":[],"dnsConfig":{},"dnsPolicy":"","enabled":false,"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"ghcr.io/janssenproject/jans/kc-scheduler","tag":"1.1.6_dev"},"interval":10,"lifecycle":{},"resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Responsible for synchronizing Keycloak SAML clients |
+| kc-scheduler | object | `{"additionalAnnotations":{},"additionalLabels":{},"customCommand":[],"customScripts":[],"dnsConfig":{},"dnsPolicy":"","enabled":false,"image":{"pullPolicy":"IfNotPresent","pullSecrets":[],"repository":"ghcr.io/janssenproject/jans/kc-scheduler","tag":"1.1.6-1"},"interval":10,"lifecycle":{},"resources":{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}},"usrEnvs":{"normal":{},"secret":{}},"volumeMounts":[],"volumes":[]}` | Responsible for synchronizing Keycloak SAML clients |
 | kc-scheduler.additionalAnnotations | object | `{}` | Additional annotations that will be added across the gateway in the format of {cert-manager.io/issuer: "letsencrypt-prod"} |
 | kc-scheduler.additionalLabels | object | `{}` | Additional labels that will be added across the gateway in the format of {mylabel: "myapp"} |
 | kc-scheduler.customCommand | list | `[]` | Add custom job's command. If passed, it will override the default conditional command. |
@@ -276,7 +276,7 @@ Kubernetes: `>=v1.22.0-0`
 | kc-scheduler.image.pullPolicy | string | `"IfNotPresent"` | Image pullPolicy to use for deploying. |
 | kc-scheduler.image.pullSecrets | list | `[]` | Image Pull Secrets |
 | kc-scheduler.image.repository | string | `"ghcr.io/janssenproject/jans/kc-scheduler"` | Image  to use for deploying. |
-| kc-scheduler.image.tag | string | `"1.1.6_dev"` | Image  tag to use for deploying. |
+| kc-scheduler.image.tag | string | `"1.1.6-1"` | Image  tag to use for deploying. |
 | kc-scheduler.interval | int | `10` | Interval of running the scheduler (in minutes) |
 | kc-scheduler.resources | object | `{"limits":{"cpu":"300m","memory":"300Mi"},"requests":{"cpu":"300m","memory":"300Mi"}}` | Resource specs. |
 | kc-scheduler.resources.limits.cpu | string | `"300m"` | CPU limit. |

diff --git a/charts/janssen-all-in-one/values.yaml b/charts/janssen-all-in-one/values.yaml
@@ -294,7 +294,7 @@ auth-server-key-rotation:
     # -- Image  to use for deploying.
     repository: ghcr.io/janssenproject/jans/certmanager
     # -- Image  tag to use for deploying.
-    tag: 1.1.6_dev
+    tag: 1.1.6-1
     # -- Image Pull Secrets
     pullSecrets: [ ]
   # -- Auth server key rotation keys life in hours
@@ -665,7 +665,7 @@ image:
   # -- Image  to use for deploying.
   repository: ghcr.io/janssenproject/jans/all-in-one
   # -- Image  tag to use for deploying.
-  tag: 1.1.6_dev
+  tag: 1.1.6-1
   # -- Image Pull Secrets
   pullSecrets: [ ]
 # -- Service replica number.
@@ -745,7 +745,7 @@ kc-scheduler:
     # -- Image  to use for deploying.
     repository: ghcr.io/janssenproject/jans/kc-scheduler
     # -- Image  tag to use for deploying.
-    tag: 1.1.6_dev
+    tag: 1.1.6-1
     # -- Image Pull Secrets
     pullSecrets: [ ]
   # -- Resource specs.

diff --git a/charts/janssen/Chart.yaml b/charts/janssen/Chart.yaml
@@ -3,34 +3,34 @@ annotations:
   artifacthub.io/containsSecurityUpdates: 'true'
   artifacthub.io/images: |
     - name: auth-server
-      image: ghcr.io/janssenproject/jans/auth-server:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/auth-server:1.1.6-1
     - name: auth-server-key-rotation
-      image: ghcr.io/janssenproject/jans/certmanager:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/certmanager:1.1.6-1
     - name: configuration-manager
-      image: ghcr.io/janssenproject/jans/configurator:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/configurator:1.1.6-1
     - name:  config-api
-      image: ghcr.io/janssenproject/jans/config-api:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/config-api:1.1.6-1
     - name: fido2
-      image: ghcr.io/janssenproject/jans/fido2:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/fido2:1.1.6-1
     - name: persistence
-      image: ghcr.io/janssenproject/jans/persistence-loader:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/persistence-loader:1.1.6-1
     - name: casa
-      image: ghcr.io/janssenproject/jans/casa:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/casa:1.1.6-1
     - name: scim
-      image: ghcr.io/janssenproject/jans/scim:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/scim:1.1.6-1
     - name: link
-      image: ghcr.io/janssenproject/jans/link:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/link:1.1.6-1
     - name: saml
-      image: ghcr.io/janssenproject/jans/saml:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/saml:1.1.6-1
     - name: kc-scheduler
-      image: ghcr.io/janssenproject/jans/kc-scheduler:1.1.6_dev
+      image: ghcr.io/janssenproject/jans/kc-scheduler:1.1.6-1
   artifacthub.io/license: Apache-2.0
   artifacthub.io/prerelease: 'false'
   catalog.cattle.io/certified: partner
   catalog.cattle.io/release-name: janssen
   catalog.cattle.io/display-name: Janssen Cloud Identity and Access Management Microservices
 apiVersion: v2
-appVersion: "1.1.6-dev"
+appVersion: "1.1.6"
 icon: >-
   https://raw.githubusercontent.com/JanssenProject/jans/main/docs/assets/logo/janssen_project_favicon_transparent_50px_50px.png
 home: https://jans.io
@@ -42,56 +42,56 @@ maintainers:
     email: [email protected]
 description: Janssen Access and Identity Management Microservices Chart. This chart deploys each janssen microservice as a separate deployment.
 name: janssen
-version: 1.1.6-dev
+version: 1.1.6
 dependencies:
     - name: casa
-      version: 1.1.6-dev
+      version: 1.1.6
       condition: global.casa.enabled
 
     - name: config
       condition: global.config.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: config-api
       condition: global.config-api.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: auth-server
       condition: global.auth-server.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: fido2
       condition: global.fido2.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: scim
       condition: global.scim.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: nginx-ingress
       condition: global.nginx-ingress.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: auth-server-key-rotation
       condition: global.auth-server-key-rotation.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: persistence
       condition: global.persistence.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: link
       condition: global.link.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: saml
       condition: global.saml.enabled
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: cn-istio-ingress
       condition: global.istio.ingress
-      version: 1.1.6-dev
+      version: 1.1.6
 
     - name: kc-scheduler
       condition: global.kc-scheduler.enabled
-      version: 1.1.6-dev
+      version: 1.1.6