From e4a4a6336f65fa3b26bd20a4a99fbf621a07653f Mon Sep 17 00:00:00 2001 From: Joao Victor Portal Date: Tue, 31 Oct 2023 17:10:01 -0300 Subject: [PATCH] Update dex, secret-observer and stx-oidc-client The dex img version was updated to v2.37.0 and the chart version was updated to 0.15.3. The secret-observer chart version was updated to 0.1.1. The stx-oidc-client img version was updated to stx.9.0-v1.0.7 and the chart version was updated to 0.1.1. Test Plan: PASS - On an IPv6 AIO-SX deploy, execute the following tests: -- Initial app install: apply the app that is present in the deployed system (the ISO used have the updated app). Test that the new app is working with a functional test. -- Abort app test: apply the new OIDC app and then abort and remove its installation. No error should occur. -- Delete app test: delete the app. No error should occur. -- Reinstall app test: with no app present in the system, upload and apply the new OIDC app again. Test that the new app is working with a functional test. -- Update app test: with a previous version of the app applied on the system and working, update to new version using command "system application-update". Test that the new app is working with a functional test. -- Secret observer test: with the new OIDC app running and working, 1) edit secret oidc-auth-apps-certificate in the field "data: tls.crt" and check that oidc-dex-*** and stx-oidc-client-*** pods are restarted within 15 minutes; 2) edit secret dex-ca-cert in the field "data:dex-ca-cert.crt" and check that stx-oidc-client-*** pods are restarted within 15 minutes. PASS - On an IPv4 AIO-DX + 1 worker deploy, repeat the tests above. Story: 2010703 Task: 49086 Depends-On: https://review.opendev.org/c/starlingx/helm-charts/+/899747 Change-Id: I0a1f0e2b4f89fa9021edd4fbf83eb27606584c68 Signed-off-by: Joao Victor Portal --- stx-oidc-auth-helm/debian/deb_folder/rules | 2 +- stx-oidc-auth-helm/debian/meta_data.yaml | 6 +++--- .../fluxcd-manifests/dex/dex-static-overrides.yaml | 4 ++-- .../fluxcd-manifests/dex/helmrelease.yaml | 4 ++-- .../fluxcd-manifests/oidc-client/helmrelease.yaml | 4 ++-- .../fluxcd-manifests/secret-observer/helmrelease.yaml | 4 ++-- .../stx-oidc-auth-helm/helm-charts/oidc-client/Chart.yaml | 2 +- .../stx-oidc-auth-helm/helm-charts/oidc-client/values.yaml | 4 ++-- 8 files changed, 15 insertions(+), 15 deletions(-) diff --git a/stx-oidc-auth-helm/debian/deb_folder/rules b/stx-oidc-auth-helm/debian/deb_folder/rules index 89bcd0c..27b2e48 100755 --- a/stx-oidc-auth-helm/debian/deb_folder/rules +++ b/stx-oidc-auth-helm/debian/deb_folder/rules @@ -15,7 +15,7 @@ export APP_TARBALL = $(APP_NAME)-$(APP_VERSION).tgz export HELM_FOLDER = /usr/lib/helm export HELM_REPO = stx-platform export STAGING = staging -export DEX_TAR_NAME = dex-0.14.1.tgz +export DEX_TAR_NAME = dex-0.15.3.tgz %: dh $@ diff --git a/stx-oidc-auth-helm/debian/meta_data.yaml b/stx-oidc-auth-helm/debian/meta_data.yaml index d95f75e..355a5df 100644 --- a/stx-oidc-auth-helm/debian/meta_data.yaml +++ b/stx-oidc-auth-helm/debian/meta_data.yaml @@ -5,10 +5,10 @@ src_path: stx-oidc-auth-helm src_files: - ${MY_REPO}/stx/helm-charts/secret-observer/secret-observer/helm-charts dl_files: - dex-0.14.1.tgz: + dex-0.15.3.tgz: topdir: null - url: https://github.com/dexidp/helm-charts/releases/download/dex-0.14.1/dex-0.14.1.tgz - md5sum: 0477135581527203b695c8733b4c3438 + url: https://github.com/dexidp/helm-charts/releases/download/dex-0.15.3/dex-0.15.3.tgz + sha256sum: 8100ba92ee85ee1b25298bcf9ea72f09a004ef502e43f38e45bf793cae5b88f3 revision: dist: $STX_DIST FILES_GITREVCOUNT: diff --git a/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/dex/dex-static-overrides.yaml b/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/dex/dex-static-overrides.yaml index c2cbcde..b11add7 100644 --- a/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/dex/dex-static-overrides.yaml +++ b/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/dex/dex-static-overrides.yaml @@ -1,5 +1,5 @@ # -# Copyright (c) 2022 Wind River Systems, Inc. +# Copyright (c) 2022-2023 Wind River Systems, Inc. # # SPDX-License-Identifier: Apache-2.0 # @@ -7,7 +7,7 @@ image: repository: ghcr.io/dexidp/dex pullPolicy: IfNotPresent - tag: v2.36.0 + tag: v2.37.0 imagePullSecrets: - name: default-registry-key env: diff --git a/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/dex/helmrelease.yaml b/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/dex/helmrelease.yaml index f4c7f34..3005437 100644 --- a/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/dex/helmrelease.yaml +++ b/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/dex/helmrelease.yaml @@ -1,5 +1,5 @@ # -# Copyright (c) 2022 Wind River Systems, Inc. +# Copyright (c) 2022-2023 Wind River Systems, Inc. # # SPDX-License-Identifier: Apache-2.0 # @@ -15,7 +15,7 @@ spec: chart: spec: chart: dex - version: 0.14.1 + version: 0.15.3 sourceRef: kind: HelmRepository name: stx-platform diff --git a/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/oidc-client/helmrelease.yaml b/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/oidc-client/helmrelease.yaml index a43947b..66a1097 100644 --- a/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/oidc-client/helmrelease.yaml +++ b/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/oidc-client/helmrelease.yaml @@ -1,5 +1,5 @@ # -# Copyright (c) 2022 Wind River Systems, Inc. +# Copyright (c) 2022-2023 Wind River Systems, Inc. # # SPDX-License-Identifier: Apache-2.0 # @@ -15,7 +15,7 @@ spec: chart: spec: chart: oidc-client - version: 0.1.0 + version: 0.1.1 sourceRef: kind: HelmRepository name: stx-platform diff --git a/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/secret-observer/helmrelease.yaml b/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/secret-observer/helmrelease.yaml index e549831..b52b909 100644 --- a/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/secret-observer/helmrelease.yaml +++ b/stx-oidc-auth-helm/stx-oidc-auth-helm/fluxcd-manifests/secret-observer/helmrelease.yaml @@ -1,5 +1,5 @@ # -# Copyright (c) 2022 Wind River Systems, Inc. +# Copyright (c) 2022-2023 Wind River Systems, Inc. # # SPDX-License-Identifier: Apache-2.0 # @@ -15,7 +15,7 @@ spec: chart: spec: chart: secret-observer - version: 0.1.0 + version: 0.1.1 sourceRef: kind: HelmRepository name: stx-platform diff --git a/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/Chart.yaml b/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/Chart.yaml index 373983b..1f0cbf9 100644 --- a/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/Chart.yaml +++ b/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/Chart.yaml @@ -2,4 +2,4 @@ apiVersion: v1 appVersion: "1.0" description: A Helm chart for Kubernetes name: oidc-client -version: 0.1.0 +version: 0.1.1 diff --git a/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/values.yaml b/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/values.yaml index d29c271..e4b43b1 100644 --- a/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/values.yaml +++ b/stx-oidc-auth-helm/stx-oidc-auth-helm/helm-charts/oidc-client/values.yaml @@ -1,5 +1,5 @@ # -# Copyright (c) 2020 Wind River Systems, Inc. +# Copyright (c) 2020-2023 Wind River Systems, Inc. # # SPDX-License-Identifier: Apache-2.0 # @@ -14,7 +14,7 @@ tlsName: local-dex.tls image: repository: docker.io/starlingx/stx-oidc-client - tag: stx.9.0-v1.0.6 + tag: stx.9.0-v1.0.7 pullPolicy: IfNotPresent nameOverride: ""