From 8073d226db1d6ade6e9373821c39b2a219054b34 Mon Sep 17 00:00:00 2001 From: jpdorsch Date: Mon, 10 Jan 2022 17:06:07 +0100 Subject: [PATCH 01/14] changed base image to use python slim --- deploy/docker/base/Dockerfile | 9 +++++---- deploy/docker/certificator/Dockerfile | 12 ++++++++++-- deploy/docker/storage/requirements.txt | 2 +- 3 files changed, 16 insertions(+), 7 deletions(-) diff --git a/deploy/docker/base/Dockerfile b/deploy/docker/base/Dockerfile index f48ad575..a67548b9 100644 --- a/deploy/docker/base/Dockerfile +++ b/deploy/docker/base/Dockerfile @@ -4,12 +4,13 @@ ## Please, refer to the LICENSE file in the root directory. ## SPDX-License-Identifier: BSD-3-Clause ## -from centos:7 as f7t-base +# from centos:7 as f7t-base +FROM python:3.8.5-slim # install epel repo for python-pip package -RUN yum install -y epel-release -RUN yum -y update -RUN yum install -y python3-pip +# RUN yum install -y epel-release +# RUN yum -y update +# RUN yum install -y python3-pip RUN pip3 install --upgrade pip diff --git a/deploy/docker/certificator/Dockerfile b/deploy/docker/certificator/Dockerfile index 62ea565f..977264bd 100644 --- a/deploy/docker/certificator/Dockerfile +++ b/deploy/docker/certificator/Dockerfile @@ -4,14 +4,22 @@ ## Please, refer to the LICENSE file in the root directory. ## SPDX-License-Identifier: BSD-3-Clause ## -ARG BASE_IMAGE=f7t-base +ARG BASE_IMAGE=centos:7 from $BASE_IMAGE -RUN yum install -y openssh-7.4p1 +RUN yum install -y epel-release +RUN yum -y update +RUN yum install -y python3-pip + +RUN pip3 install --upgrade pip +ADD deploy/docker/base/requirements.txt base/requirements.txt ADD deploy/docker/certificator/requirements.txt deps/requirements.txt +RUN pip3 install -r base/requirements.txt RUN pip3 install -r deps/requirements.txt +RUN yum install -y openssh-7.4p1 + ADD src/certificator/certificator.py certificator.py ENTRYPOINT ["python3"] diff --git a/deploy/docker/storage/requirements.txt b/deploy/docker/storage/requirements.txt index fdc29479..84fc749c 100644 --- a/deploy/docker/storage/requirements.txt +++ b/deploy/docker/storage/requirements.txt @@ -1,5 +1,5 @@ -r ../base/requirements.txt keystoneauth1==4.3.0 -lxml==4.6.2 +lxml==4.6.5 paramiko==2.6.0 python-keystoneclient==4.2.0 From 8d5041998cdc8d982be47e7d35180b835b7ee0c1 Mon Sep 17 00:00:00 2001 From: jpdorsch Date: Tue, 11 Jan 2022 11:20:07 +0100 Subject: [PATCH 02/14] deleted comments --- deploy/docker/base/Dockerfile | 6 ------ 1 file changed, 6 deletions(-) diff --git a/deploy/docker/base/Dockerfile b/deploy/docker/base/Dockerfile index a67548b9..a571ae05 100644 --- a/deploy/docker/base/Dockerfile +++ b/deploy/docker/base/Dockerfile @@ -4,14 +4,8 @@ ## Please, refer to the LICENSE file in the root directory. ## SPDX-License-Identifier: BSD-3-Clause ## -# from centos:7 as f7t-base FROM python:3.8.5-slim -# install epel repo for python-pip package -# RUN yum install -y epel-release -# RUN yum -y update -# RUN yum install -y python3-pip - RUN pip3 install --upgrade pip ADD deploy/docker/base/requirements.txt base/requirements.txt From 24e9592a07f88935b28742327d68bb52d1e6b499 Mon Sep 17 00:00:00 2001 From: jpdorsch Date: Fri, 25 Feb 2022 11:37:52 +0100 Subject: [PATCH 03/14] separated certificator from base image --- ci/k8s/Jenkinsfile | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/ci/k8s/Jenkinsfile b/ci/k8s/Jenkinsfile index 8b90ac04..d3e50380 100644 --- a/ci/k8s/Jenkinsfile +++ b/ci/k8s/Jenkinsfile @@ -68,7 +68,12 @@ spec: ls -la # build microservices - for ms in certificator compute reservations status storage tasks utilities; do + # Certificator separated since its base image is different (centos:7) + /kaniko/executor --build-arg --registry-mirror $REGISTRY \ + --context ./ --dockerfile deploy/docker/certificator/Dockerfile --destination $REPO_PREFIX/certificator:$GIT_COMMIT_SHORT --cleanup + + # Rest of the microservices + for ms in compute reservations status storage tasks utilities; do /kaniko/executor --build-arg BASE_IMAGE=$REPO_PREFIX/f7t-base:latest --registry-mirror $REGISTRY \ --context ./ --dockerfile deploy/docker/$ms/Dockerfile --destination $REPO_PREFIX/$ms:$GIT_COMMIT_SHORT --cleanup done @@ -102,8 +107,8 @@ spec: echo "registry: $REPO_PREFIX\ntag: '$GIT_COMMIT_SHORT'\nnamespace: "$DEPLOY_NAMESPACE"\nregistry_secret_creds: registry-credentials\n" > values-dev.yaml for app in config certificator client compute jaeger keycloak kong minio openapi reservations status storage tasks utilities; do - helm uninstall "$app-env-dev" -n "$DEPLOY_NAMESPACE" || true - helm install --wait --wait-for-jobs --timeout 60s "$app-env-dev" $app -n "$DEPLOY_NAMESPACE" -f values-dev.yaml + helm uninstall "$app-env-dev" -n "$DEPLOY_NAMESPACE" || true + helm install --wait --wait-for-jobs --timeout 60s "$app-env-dev" $app -n "$DEPLOY_NAMESPACE" -f values-dev.yaml done helm ls -n "$DEPLOY_NAMESPACE" ''' From 1b462db137549fba09e5b052be6d79de177aa270 Mon Sep 17 00:00:00 2001 From: jpdorsch Date: Fri, 25 Feb 2022 11:48:23 +0100 Subject: [PATCH 04/14] separated certificator from base image --- ci/k8s/Jenkinsfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ci/k8s/Jenkinsfile b/ci/k8s/Jenkinsfile index d3e50380..84e033c4 100644 --- a/ci/k8s/Jenkinsfile +++ b/ci/k8s/Jenkinsfile @@ -69,8 +69,8 @@ spec: # build microservices # Certificator separated since its base image is different (centos:7) - /kaniko/executor --build-arg --registry-mirror $REGISTRY \ - --context ./ --dockerfile deploy/docker/certificator/Dockerfile --destination $REPO_PREFIX/certificator:$GIT_COMMIT_SHORT --cleanup + /kaniko/executor --context ./ --dockerfile deploy/docker/certificator/Dockerfile \ + --destination $REPO_PREFIX/certificator:$GIT_COMMIT_SHORT --cleanup # Rest of the microservices for ms in compute reservations status storage tasks utilities; do From a487c12cfd8f303957a56d39b42fa46669caa009 Mon Sep 17 00:00:00 2001 From: adabin Date: Thu, 10 Mar 2022 16:12:11 +0100 Subject: [PATCH 05/14] set python packages version --- deploy/docker/base/Dockerfile | 2 +- deploy/docker/base/requirements.txt | 3 ++- src/tests/template_client/Dockerfile | 4 ++-- 3 files changed, 5 insertions(+), 4 deletions(-) diff --git a/deploy/docker/base/Dockerfile b/deploy/docker/base/Dockerfile index a571ae05..17bf2523 100644 --- a/deploy/docker/base/Dockerfile +++ b/deploy/docker/base/Dockerfile @@ -4,7 +4,7 @@ ## Please, refer to the LICENSE file in the root directory. ## SPDX-License-Identifier: BSD-3-Clause ## -FROM python:3.8.5-slim +FROM python:3.8.12-slim RUN pip3 install --upgrade pip diff --git a/deploy/docker/base/requirements.txt b/deploy/docker/base/requirements.txt index d7d3fe6e..62f0a6a9 100644 --- a/deploy/docker/base/requirements.txt +++ b/deploy/docker/base/requirements.txt @@ -1,5 +1,6 @@ cryptography==3.4.6 -Flask==1.1.2 +markupsafe==2.0.1 +Flask==1.1.4 PyJWT==1.7.1 requests==2.22.0 jaeger_client==4.5.0 diff --git a/src/tests/template_client/Dockerfile b/src/tests/template_client/Dockerfile index e57b2d54..001277e2 100644 --- a/src/tests/template_client/Dockerfile +++ b/src/tests/template_client/Dockerfile @@ -4,9 +4,9 @@ ## Please, refer to the LICENSE file in the root directory. ## SPDX-License-Identifier: BSD-3-Clause ## -FROM python:3.7-alpine +FROM python:3.8.12-slim -RUN pip install flask flask-WTF flask-bootstrap flask-oidc flask_sslify requests +RUN pip install markupsafe==2.0.1 Flask==1.1.4 flask-WTF flask-bootstrap flask-oidc flask_sslify requests==2.22.0 ADD ./ app From eb2d5c18f4e6bd29a52d5f31dd6b58c6455dc9c4 Mon Sep 17 00:00:00 2001 From: adabin Date: Fri, 11 Mar 2022 11:55:04 +0100 Subject: [PATCH 06/14] tests: fix marker --- src/tests/automated_tests/integration/markers.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/tests/automated_tests/integration/markers.py b/src/tests/automated_tests/integration/markers.py index a430a13f..ad22e08c 100644 --- a/src/tests/automated_tests/integration/markers.py +++ b/src/tests/automated_tests/integration/markers.py @@ -7,4 +7,5 @@ import os import pytest -skipif_not_uses_gateway = pytest.mark.skipif(os.environ.get("USE_GATEWAY", "").lower() == "false", reason="This test uses the gateway to test microservice") \ No newline at end of file +skipif_uses_gateway = pytest.mark.skipif(os.environ.get("USE_GATEWAY", "").lower() == "true", reason="This test does not use the gateway to test microservice") +skipif_not_uses_gateway = pytest.mark.skipif(os.environ.get("USE_GATEWAY", "").lower() == "false", reason="This test uses the gateway to test microservice") From c99afa2529468fa6434aa9e0c31ef5df5a7c253e Mon Sep 17 00:00:00 2001 From: Eirini Koutsaniti Date: Fri, 11 Mar 2022 16:18:58 +0100 Subject: [PATCH 07/14] Fix integration tests for mac --- src/tests/automated_tests/integration/test_storage.py | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/src/tests/automated_tests/integration/test_storage.py b/src/tests/automated_tests/integration/test_storage.py index 2b055aa3..da90e9b1 100644 --- a/src/tests/automated_tests/integration/test_storage.py +++ b/src/tests/automated_tests/integration/test_storage.py @@ -5,6 +5,7 @@ # SPDX-License-Identifier: BSD-3-Clause # import pytest +import platform import requests import os import time @@ -70,9 +71,10 @@ def test_post_upload_request(headers): msg = resp.json()["task"]["data"]["msg"] url = msg["parameters"]["url"] # "http://svc-minio:9000/service-account-firecrest-sample" - #ix = url.index("//") - #jx = url.index(":",ix) - #url=url.replace(url[ix+2:jx],"127.0.0.1") + if platform.system() == 'Darwin': + ix = url.index("//") + jx = url.index(":",ix) + url=url.replace(url[ix+2:jx],"127.0.0.1") From 7ca73854bb86cbdf5e5a95502015876c77dfbe82 Mon Sep 17 00:00:00 2001 From: adabin Date: Tue, 15 Mar 2022 11:28:49 +0100 Subject: [PATCH 08/14] k8s deploy: fix permission --- .../k8s/certificator/templates/deploy.certificator.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/deploy/k8s/certificator/templates/deploy.certificator.yaml b/deploy/k8s/certificator/templates/deploy.certificator.yaml index 1770c761..864ce939 100644 --- a/deploy/k8s/certificator/templates/deploy.certificator.yaml +++ b/deploy/k8s/certificator/templates/deploy.certificator.yaml @@ -48,6 +48,14 @@ items: port: 5010 initialDelaySeconds: 5 failureThreshold: 1 + initContainers: + - name: permission-fix + image: busybox + command: ["/bin/chmod", "400", "/ca-key"] + volumeMounts: + - mountPath: /ca-key + name: f7t-cert-vol + subPath: ca-key {{ if .Values.registry_secret_creds }} imagePullSecrets: - name: "{{ .Values.registry_secret_creds }}" From 9de8ecd98a3bbe4db3ec286c12264c9e2dbd2284 Mon Sep 17 00:00:00 2001 From: adabin Date: Tue, 15 Mar 2022 11:35:53 +0100 Subject: [PATCH 09/14] k8s deploy: fix sintax --- deploy/k8s/certificator/templates/deploy.certificator.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deploy/k8s/certificator/templates/deploy.certificator.yaml b/deploy/k8s/certificator/templates/deploy.certificator.yaml index 864ce939..89c7af51 100644 --- a/deploy/k8s/certificator/templates/deploy.certificator.yaml +++ b/deploy/k8s/certificator/templates/deploy.certificator.yaml @@ -52,7 +52,7 @@ items: - name: permission-fix image: busybox command: ["/bin/chmod", "400", "/ca-key"] - volumeMounts: + volumeMounts: - mountPath: /ca-key name: f7t-cert-vol subPath: ca-key From 9e72fcab2dbf8a79c1857c092526cb14c5eec04f Mon Sep 17 00:00:00 2001 From: adabin Date: Tue, 15 Mar 2022 17:30:24 +0100 Subject: [PATCH 10/14] k8s deploy: change ca-key permissions --- deploy/k8s/certificator/templates/deploy.certificator.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/deploy/k8s/certificator/templates/deploy.certificator.yaml b/deploy/k8s/certificator/templates/deploy.certificator.yaml index 89c7af51..e34d99cd 100644 --- a/deploy/k8s/certificator/templates/deploy.certificator.yaml +++ b/deploy/k8s/certificator/templates/deploy.certificator.yaml @@ -51,9 +51,9 @@ items: initContainers: - name: permission-fix image: busybox - command: ["/bin/chmod", "400", "/ca-key"] + command: ['sh', '-c', "cp /tmp/ca-key /ca-key; chmod 400 /ca-key; ls -l /"] volumeMounts: - - mountPath: /ca-key + - mountPath: /tmp/ca-key name: f7t-cert-vol subPath: ca-key {{ if .Values.registry_secret_creds }} From 8ccb45534a1bc59512f801f649c0b986699bfa60 Mon Sep 17 00:00:00 2001 From: adabin Date: Wed, 16 Mar 2022 10:36:49 +0100 Subject: [PATCH 11/14] k8s deploy: change certificator start command --- .../certificator/templates/deploy.certificator.yaml | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/deploy/k8s/certificator/templates/deploy.certificator.yaml b/deploy/k8s/certificator/templates/deploy.certificator.yaml index e34d99cd..d390184c 100644 --- a/deploy/k8s/certificator/templates/deploy.certificator.yaml +++ b/deploy/k8s/certificator/templates/deploy.certificator.yaml @@ -36,8 +36,10 @@ items: envFrom: - configMapRef: name: common-env-file + command: ["sh"] + args: ["-c", "cp /tmp/ca-key /ca-key; chmod 400 /ca-key; ls -l /; python3 certificator.py"] volumeMounts: - - mountPath: /ca-key #since ConfiMap mount + - mountPath: /tmp/ca-key #since ConfiMap mount name: f7t-cert-vol subPath: ca-key - mountPath: /user-key.pub @@ -48,14 +50,6 @@ items: port: 5010 initialDelaySeconds: 5 failureThreshold: 1 - initContainers: - - name: permission-fix - image: busybox - command: ['sh', '-c', "cp /tmp/ca-key /ca-key; chmod 400 /ca-key; ls -l /"] - volumeMounts: - - mountPath: /tmp/ca-key - name: f7t-cert-vol - subPath: ca-key {{ if .Values.registry_secret_creds }} imagePullSecrets: - name: "{{ .Values.registry_secret_creds }}" From 5e0aa209a4f37df0e3d6a14272a5176b4d68a140 Mon Sep 17 00:00:00 2001 From: adabin Date: Wed, 16 Mar 2022 11:43:50 +0100 Subject: [PATCH 12/14] demo, k8s: update Keycloak to 15.0.2 --- deploy/demo/docker-compose.yml | 2 +- deploy/k8s/keycloak/templates/deploy.keycloak.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/deploy/demo/docker-compose.yml b/deploy/demo/docker-compose.yml index fa47baf6..e0a6e2d2 100644 --- a/deploy/demo/docker-compose.yml +++ b/deploy/demo/docker-compose.yml @@ -196,7 +196,7 @@ services: # complementary 3rd party services keycloak: - image: "jboss/keycloak:9.0.2" + image: "jboss/keycloak:15.0.2" container_name: fckeycloak env_file: keycloak/keycloak.env environment: diff --git a/deploy/k8s/keycloak/templates/deploy.keycloak.yaml b/deploy/k8s/keycloak/templates/deploy.keycloak.yaml index 9869242b..fab2e5a0 100644 --- a/deploy/k8s/keycloak/templates/deploy.keycloak.yaml +++ b/deploy/k8s/keycloak/templates/deploy.keycloak.yaml @@ -17,7 +17,7 @@ items: app: keycloak spec: containers: - - image: jboss/keycloak:9.0.2 + - image: jboss/keycloak:15.0.2 env: - name: DB_VENDOR value: H2 From 71aa044f07525aa05b38f3356857f8d105e7cab8 Mon Sep 17 00:00:00 2001 From: adabin Date: Fri, 25 Mar 2022 15:42:58 +0100 Subject: [PATCH 13/14] ci: fix Jenkinsfile --- ci/k8s/Jenkinsfile | 40 ++++++++++++++++++++------------- deploy/docker/tester/Dockerfile | 2 +- 2 files changed, 26 insertions(+), 16 deletions(-) diff --git a/ci/k8s/Jenkinsfile b/ci/k8s/Jenkinsfile index 84e033c4..8ffd503a 100644 --- a/ci/k8s/Jenkinsfile +++ b/ci/k8s/Jenkinsfile @@ -6,7 +6,7 @@ def vault_secrets = [ [envVar: 'REGISTRY_USER', vaultKey: 'REGISTRY_USER'], [envVar: 'REPO_PREFIX', vaultKey: 'REPO_PREFIX'], [envVar: 'K8S_CLUSTER_URL', vaultKey: 'K8S_CLUSTER_URL'], - [envVar: 'firecrestci_github_access_token', vaultKey: 'firecrestci_github_access_token'], + [envVar: 'firecrestci_github_access_token', vaultKey: 'firecrestci_github_access_token'], ] ], ] @@ -47,12 +47,12 @@ spec: steps { container(name: 'kaniko') { withVault([vaultSecrets: vault_secrets, configuration: vault_config]) { - + sh ''' mkdir -p /kaniko/.docker echo '{"auths":{"'$REGISTRY'":{"username":"'$REGISTRY_USER'","password":"'$JFROG_API_KEY'"}}}' > /kaniko/.docker/config.json ''' - } + } } } } @@ -101,7 +101,7 @@ spec: export PATH=$PATH:$(pwd)/linux-amd64 helm list -n "$DEPLOY_NAMESPACE" - + cd deploy/k8s ls -la echo "registry: $REPO_PREFIX\ntag: '$GIT_COMMIT_SHORT'\nnamespace: "$DEPLOY_NAMESPACE"\nregistry_secret_creds: registry-credentials\n" > values-dev.yaml @@ -121,13 +121,13 @@ spec: steps { withVault([vaultSecrets: vault_secrets, configuration: vault_config]) { withKubeConfig([credentialsId: 'firecrest-cicd-secret', serverUrl: K8S_CLUSTER_URL]) { - + sh ''' curl -s -O https://get.helm.sh/helm-v3.7.1-linux-amd64.tar.gz tar -xvf helm-v3.7.1-linux-amd64.tar.gz export PATH=$PATH:$(pwd)/linux-amd64 helm list -n "$DEPLOY_NAMESPACE" - + cd deploy/k8s ls -la @@ -163,15 +163,13 @@ spec: helm list -n "$DEPLOY_NAMESPACE" kubectl get pods -n "$DEPLOY_NAMESPACE" - #cd ${BUILD_NUMBER}/firecrest - cd deploy/k8s ls -la echo "registry: $REPO_PREFIX\ntag: '$GIT_COMMIT_SHORT'\nnamespace: "$DEPLOY_NAMESPACE"\nregistry_secret_creds: registry-credentials\n" > values-dev.yaml for use_gateway in True False; do - helm uninstall tester-env-dev -n "$DEPLOY_NAMESPACE" || true + helm uninstall tester-env-dev -n "$DEPLOY_NAMESPACE" && sleep 15s || true echo "Test using gateway: $use_gateway" helm install --wait --timeout 120s tester-env-dev tester -n "$DEPLOY_NAMESPACE" -f values-dev.yaml --set tag=$GIT_COMMIT_SHORT \ @@ -179,6 +177,8 @@ spec: --set use_gateway="$use_gateway" \ --set pytest_config_file="firecrest-dev.ini" + cont_exitcode=0 + while : do sleep 20s @@ -187,12 +187,22 @@ spec: echo "Tester pod is: $tester_pod" pdstatus=$(kubectl get pods -n "$DEPLOY_NAMESPACE" $tester_pod -o jsonpath="{.status.phase}") - if [ "$pdstatus" = "Running" ]; then echo "$tester_pod is still $pdstatus"; continue; fi + if [ "$pdstatus" = "Running" ] || [ "$pdstatus" = "Pending" ]; then + cont_exitcode=$(kubectl get pods -n "$DEPLOY_NAMESPACE" --selector=app=tester -o jsonpath="{.items[*].status.containerStatuses[1].state.terminated.exitCode}") + + if [ "$cont_exitcode" = "" ]; then echo "$tester_pod is still $pdstatus"; continue; fi + + cont_reason=$(kubectl get pods -n "$DEPLOY_NAMESPACE" --selector=app=tester -o jsonpath="{.items[*].status.containerStatuses[1].state.terminated.reason}") + echo "Container tester exit code $cont_exitcode (reason: $cont_reason)"; + fi + kubectl logs $tester_pod -n firecrest-dev - if [ "$pdstatus" = "Failed" ]; then echo "$tester_pod has $pdstatus"; exit 1; fi - if [ "$pdstatus" = "Succeeded" ]; then echo "$tester_pod has $pdstatus"; break; fi + if [ "$cont_exitcode" = "0" ]; then + echo "$tester_pod success."; break; + else + echo "$tester_pod failed: $cont_exitcode"; exit 1; + fi done - done ''' } @@ -233,7 +243,7 @@ spec: # create new openapi cd deploy/k8s ls -la - + echo "registry: $REPO_PREFIX\ntag: tds\nnamespace: "$TDS_NAMESPACE"\nregistry_secret_creds: registry-credentials\n" > values-tds.yaml helm install --wait --timeout 60s openapi-env-tds openapi -n "$TDS_NAMESPACE" -f values-tds.yaml @@ -282,7 +292,7 @@ spec: ./jfrog rt del --recursive --quiet --url="https://$REGISTRY/artifactory" --user="$REGISTRY_USER" --password="$JFROG_API_KEY" "$REGISTRY_GROUP/$ms/$GIT_COMMIT_SHORT/" done ''' - } + } } } success { diff --git a/deploy/docker/tester/Dockerfile b/deploy/docker/tester/Dockerfile index 7eb6625f..47111b1c 100644 --- a/deploy/docker/tester/Dockerfile +++ b/deploy/docker/tester/Dockerfile @@ -11,7 +11,7 @@ ## docker run -ti --rm -v $PWD:/firecrest f7t-tester ## # (now inside the container run pytest as you want) ## See scripts in ci folder. -from python:3.8.5-slim +from python:3.8.12-slim ENV PYTHONDONTWRITEBYTECODE 1 ENV PYTHONUNBUFFERED 1 From 5981f05b62ad8919dc91e0793cb1a10844ea9fb8 Mon Sep 17 00:00:00 2001 From: adabin Date: Fri, 25 Mar 2022 16:25:57 +0100 Subject: [PATCH 14/14] k8s: fix keycloak chart --- deploy/k8s/keycloak/templates/deploy.keycloak.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/deploy/k8s/keycloak/templates/deploy.keycloak.yaml b/deploy/k8s/keycloak/templates/deploy.keycloak.yaml index fab2e5a0..41014ab5 100644 --- a/deploy/k8s/keycloak/templates/deploy.keycloak.yaml +++ b/deploy/k8s/keycloak/templates/deploy.keycloak.yaml @@ -38,6 +38,8 @@ items: key: KEYCLOAK_PASSWORD - name: KEYCLOAK_USER value: admin + - name: JAVA_OPTS + value: " -Djboss.bind.address=0.0.0.0 -Djboss.bind.address.management=0.0.0.0 " name: f7t-keycloak ports: - containerPort: 8080