Feature/initial setup (#2)

* feat: initial setup

* feat: initial impl

.github/changelog.yaml

@@ -0,0 +1,13 @@
+sections:
+  - title: Major changes
+    labels:
+      - "release/super-feature"
+  - title: Complete changelog
+    labels:
+      - "bug"
+      - "enhancement"
+      - "dependencies"
+template: |
+  {{ range $section := .Sections }}{{ if $section.Items }}### {{ $section.GetTitle }}{{ range $item := $section.Items }}
+  * [#{{ $item.GetID }}]({{ $item.GetURL }}) - {{ $item.GetTitle }}{{ end }}{{ end }}
+  {{ end }}

.github/dependabot.yml

@@ -0,0 +1,14 @@
+version: 2
+updates:
+  - package-ecosystem: maven
+    directory: "/"
+    schedule:
+      interval: daily
+    labels:
+      - dependencies
+  - package-ecosystem: "docker"
+    directory: "/src/main/docker"
+    schedule:
+      interval: daily
+    labels:
+      - docker-image

.github/workflows/build-branch.yml

@@ -0,0 +1,15 @@
+name: Build Feature Branch
+
+on:
+  push:
+    branches:
+      - '**'
+      - '!main'
+      - '!fix/[0-9]+.[0-9]+.x'
+
+jobs:
+  branch:
+    uses: onecx/ci-quarkus/.github/workflows/build-branch.yml@v1
+    secrets: inherit
+    with:
+      native: true

.github/workflows/build-pr.yml

@@ -0,0 +1,11 @@
+name: Build Pull Request
+
+on:
+  pull_request:
+
+jobs:
+  pr:
+    uses: onecx/ci-quarkus/.github/workflows/build-pr.yml@v1
+    secrets: inherit
+    with:
+      native: true

.github/workflows/build-release.yml

@@ -0,0 +1,11 @@
+name: Build Release
+on:
+  push:
+    tags:
+      - '**'
+jobs:
+  release:
+    uses: onecx/ci-quarkus/.github/workflows/build-release.yml@v1
+    secrets: inherit
+    with:
+      native: true

.github/workflows/build.yml

@@ -0,0 +1,16 @@
+name: Build
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'main'
+      - 'fix/[0-9]+.[0-9]+.x'
+
+jobs:
+  build:
+    uses: onecx/ci-quarkus/.github/workflows/build.yml@v1
+    secrets: inherit
+    with:
+      native: true
+      helmEventTargetRepository: onecx/onecx-data-orchestrator

.github/workflows/create-fix-branch.yml

@@ -0,0 +1,7 @@
+name: Create Fix Branch
+on:
+  workflow_dispatch:
+jobs:
+  fix:
+    uses: onecx/ci-common/.github/workflows/create-fix-branch.yml@v1
+    secrets: inherit

.github/workflows/create-new-build.yml

@@ -0,0 +1,9 @@
+name: Create new build
+
+on:
+  workflow_dispatch:
+
+jobs:
+  build:
+    uses: onecx/ci-common/.github/workflows/create-new-build.yml@v1
+    secrets: inherit

.github/workflows/create-release.yml

@@ -0,0 +1,7 @@
+name: Create Release Version
+on:
+  workflow_dispatch:
+jobs:
+  release:
+    uses: onecx/ci-common/.github/workflows/create-release.yml@v1
+    secrets: inherit

.github/workflows/documentation.yml

@@ -0,0 +1,10 @@
+name: Update documentation
+on:
+  push:
+    branches: [ main ]
+    paths:
+      - 'docs/**'
+jobs:
+  release:
+    uses: onecx/ci-common/.github/workflows/documentation.yml@v1
+    secrets: inherit

.github/workflows/sonar-pr.yml

@@ -0,0 +1,12 @@
+name: Sonar Pull Request
+
+on:
+  workflow_run:
+    workflows: ["Build Pull Request"]
+    types:
+      - completed
+
+jobs:
+  pr:
+    uses: onecx/ci-quarkus/.github/workflows/quarkus-pr-sonar.yml@v1
+    secrets: inherit

.gitignore

@@ -0,0 +1,44 @@
+#Maven
+target/
+pom.xml.tag
+pom.xml.releaseBackup
+pom.xml.versionsBackup
+release.properties
+.flattened-pom.xml
+
+# Eclipse
+.project
+.classpath
+.settings/
+bin/
+
+# IntelliJ
+.idea
+*.ipr
+*.iml
+*.iws
+
+# NetBeans
+nb-configuration.xml
+
+# Visual Studio Code
+.vscode
+.factorypath
+
+# OSX
+.DS_Store
+
+# Vim
+*.swp
+*.swo
+
+# patch
+*.orig
+*.rej
+
+# Local environment
+.env
+src/main/helm/local.yaml
+
+# Plugin directory
+/.quarkus/cli/plugins/

docs/antora.yml

@@ -0,0 +1,3 @@
+name: onecx-data-orchestrator
+title: Data Orchestrator
+version: latest

docs/modules/onecx-data-orchestrator-bff/nav.adoc

@@ -0,0 +1 @@
+* xref:onecx-data-orchestrator-bff:index.adoc[Data Orchestrator Bff]

docs/modules/onecx-data-orchestrator-bff/pages/index.adoc

@@ -0,0 +1,8 @@
+include::onecx-data-orchestrator-bff-attributes.adoc[opts=optional]
+
+== onecx-data-orchestrator-bff
+
+include::docs.adoc[opts=optional]
+
+
+include::onecx-data-orchestrator-bff-docs.adoc[opts=optional]

docs/modules/onecx-data-orchestrator-bff/pages/onecx-data-orchestrator-bff-attributes.adoc

@@ -0,0 +1,5 @@
+
+:docker-registry: https://github.com/onecx/onecx-data-orchestrator-bff/pkgs/container/onecx-data-orchestrator-bff
+:helm-registry: https://github.com/onecx/onecx-data-orchestrator-bff/pkgs/container/charts%2Fonecx-data-orchestrator-bff
+:properties-file: src/main/resources/application.properties
+:helm-file: src/main/helm/values.yamls.yaml

docs/modules/onecx-data-orchestrator-bff/pages/onecx-data-orchestrator-bff-docs.adoc

@@ -0,0 +1,170 @@
+
+include::onecx-data-orchestrator-bff-attributes.adoc[opts=optional]
+
+=== Default properties
+
+.{properties-file}
+[%collapsible%open]
+====
+[source,properties,subs=attributes+]
+----
+quarkus.http.auth.permission.health.paths=/q/*
+quarkus.http.auth.permission.health.policy=permit
+quarkus.http.auth.permission.default.paths=/*
+quarkus.http.auth.permission.default.policy=authenticated
+onecx.permissions.application-id=${quarkus.application.name}
+org.eclipse.microprofile.rest.client.propagateHeaders=apm-principal-token
+quarkus.kubernetes-client.trust-certs=true
+%prod.quarkus.oidc-client.client-id=${quarkus.application.name}
+----
+====
+
+=== Extensions
+
+include::onecx-data-orchestrator-bff-extensions.adoc[opts=optional]
+
+=== Container
+
+{docker-registry}[Docker registry]
+
+
+=== Helm
+
+{helm-registry}[Helm registry]
+
+Default values
+
+.{helm-file}
+[source,yaml]
+----
+app:
+  serviceAccount:
+    enabled: true
+  name: bff
+  image:
+    repository: "onecx/onecx-data-orchestrator-bff"
+  envCustom:
+    - name: QUARKUS_KUBERNETES_CLIENT_NAMESPACE
+      valueFrom:
+        fieldRef:
+          fieldPath: metadata.namespace
+  operator:
+    # Permission
+    permission:
+      enabled: true
+      spec:
+        permissions:
+          crd:
+            read: permission on all GET requests and POST search
+            write: permission on PUT, POST, PATCH requests, where objects are saved or updated
+    keycloak:
+      client:
+        enabled: true
+        spec:
+          kcConfig:
+            defaultClientScopes: [ ocx-pm:read ]
+----
+
+sion on all DELETE requests
+    keycloak:
+      client:
+        enabled: true
+        spec:
+          kcConfig:
+            defaultClientScopes: [ ocx-pm:read ]
+----
+
+ecx_welcome_internal_yaml.enable-security-generation=false
+%prod.quarkus.rest-client.onecx_welcome_internal.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
+%prod.quarkus.oidc-client.client-id=${quarkus.application.name}
+----
+====
+
+=== Extensions
+
+include::onecx-welcome-bff-extensions.adoc[opts=optional]
+
+=== Container
+
+{docker-registry}[Docker registry]
+
+
+=== Helm
+
+{helm-registry}[Helm registry]
+
+Default values
+
+.{helm-file}
+[source,yaml]
+----
+app:
+  name: bff
+  image:
+    repository: "onecx/onecx-welcome-bff"
+  operator:
+    # Permission
+    permission:
+      enabled: true
+      spec:
+        permissions:
+          image:
+            read: permission on all GET requests and POST search
+            write: permission on PUT, POST, PATCH requests, where objects are saved or updated
+            delete: permission on all DELETE requests
+    keycloak:
+      client:
+        enabled: true
+        spec:
+          kcConfig:
+            defaultClientScopes: [ ocx-wc:all, ocx-pm:read, ocx-an:read ]
+----
+
+.rest-client.onecx_welcome_internal.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
+%prod.quarkus.rest-client.onecx_announcement_v1.providers=io.quarkus.oidc.client.reactive.filter.OidcClientRequestReactiveFilter
+%prod.quarkus.oidc-client.client-id=${quarkus.application.name}
+----
+====
+
+=== Extensions
+
+include::onecx-welcome-bff-extensions.adoc[opts=optional]
+
+=== Container
+
+{docker-registry}[Docker registry]
+
+
+=== Helm
+
+{helm-registry}[Helm registry]
+
+Default values
+
+.{helm-file}
+[source,yaml]
+----
+app:
+  name: bff
+  image:
+    repository: "onecx/onecx-welcome-bff"
+  operator:
+    # Permission
+    permission:
+      enabled: true
+      spec:
+        permissions:
+          image:
+            read: permission on all GET requests and POST search
+            write: permission on PUT, POST, PATCH requests, where objects are saved or updated
+            delete: permission on all DELETE requests
+          announcement:
+            read: permission on all GET requests and POST search
+    keycloak:
+      client:
+        enabled: true
+        spec:
+          kcConfig:
+            defaultClientScopes: [ ocx-wc:all, ocx-pm:read, ocx-an:read ]
+----
+