From 78f0e8cca10a3b70c6235610127752e641cfc8a8 Mon Sep 17 00:00:00 2001 From: RenkuBot <53332360+RenkuBot@users.noreply.github.com> Date: Thu, 13 Jun 2024 11:44:38 +0200 Subject: [PATCH] release 0.53.1 (#3673) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * chore: create release 0.53.1 * fix: Allow to configure jwt issuer urls for search-api (#3672) * fix: Allow to configure jwt issuer urls for search-api * Update search services to 0.3.0 This release for renku-search makes it mandatory to specify a list of allowed jwt issuer url patterns. * chore: Update CHANGELOG.rst wording Co-authored-by: Flora Thiebaut * Set default value for jwt.allowedIssuerUrls (#3677) Use the existing `renku.keycloakUrl` as the allowed issuer url for renku-search * Update changelog wording due to reflect new changes (#3678) --------- Co-authored-by: eikek <701128+eikek@users.noreply.github.com> Co-authored-by: Rok Roškar Co-authored-by: Flora Thiebaut --- CHANGELOG.rst | 18 ++++++++++++++++++ .../search/search-api-deployment.yaml | 2 ++ helm-chart/renku/values.yaml | 4 ++-- 3 files changed, 22 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.rst b/CHANGELOG.rst index da5d5d53f..1ed753c97 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -1,5 +1,23 @@ .. _changelog: +0.53.1 +------ + +Internal Changes +~~~~~~~~~~~~~~~~ + +**🐞 Bug Fixes** + +- **Search Services**: Set keycloak url into the allow list of JWT + issuer urls. This setting is now mandatory to the search-api + service. + +Individual Components +~~~~~~~~~~~~~~~~~~~~~ + +- `renku-search 0.3.0 `_ + + 0.53.0 ------ diff --git a/helm-chart/renku/templates/search/search-api-deployment.yaml b/helm-chart/renku/templates/search/search-api-deployment.yaml index 2fcb35ecc..7d4e156e9 100644 --- a/helm-chart/renku/templates/search/search-api-deployment.yaml +++ b/helm-chart/renku/templates/search/search-api-deployment.yaml @@ -46,6 +46,8 @@ spec: value: "500ms" - name: RS_SOLR_LOG_MESSAGE_BODIES value: "false" + - name: "RS_JWT_ALLOWED_ISSUER_URL_PATTERNS" + value: "{{ include "renku.keycloakUrl" . }}*/*" - name: JAVA_OPTS value: "-Xmx{{ .Values.search.searchApi.jvmXmx }} -XX:+UseZGC -XX:+ZGenerational" ports: diff --git a/helm-chart/renku/values.yaml b/helm-chart/renku/values.yaml index a3149739e..2b33dbb33 100644 --- a/helm-chart/renku/values.yaml +++ b/helm-chart/renku/values.yaml @@ -1391,7 +1391,7 @@ search: replicas: 1 image: repository: renku/search-api - tag: "0.2.0" + tag: "0.3.0" pullPolicy: IfNotPresent service: type: ClusterIP @@ -1404,7 +1404,7 @@ search: replicas: 1 image: repository: renku/search-provision - tag: "0.2.0" + tag: "0.3.0" pullPolicy: IfNotPresent service: type: ClusterIP