diff --git a/kubernetes/helm/openslice/values.yaml b/kubernetes/helm/openslice/values.yaml
index 59e39e5b9701b38fe5fe6445b9ff4ad0caa94d18..178451e9bf9af6231313f43cb071fdc85270a89a 100644
--- a/kubernetes/helm/openslice/values.yaml
+++ b/kubernetes/helm/openslice/values.yaml
@@ -19,12 +19,12 @@ image:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.bugzilla
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
centrallog:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.centrallog.service
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
keycloak:
repository: quay.io/keycloak/keycloak
pullPolicy: Always
@@ -39,22 +39,22 @@ image:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.mano
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
osom:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.osom
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
portalapi:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.portal.api
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
osscapi:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.tmf.api
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
mysql:
repository: mysql
pullPolicy: Always
@@ -64,22 +64,22 @@ image:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.oas
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
portalweb:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.portal.web
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
tmfweb:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.tmf.web
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
cridge:
repository: labs.etsi.org:5050/osl/code/org.etsi.osl.cridge
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
- tag: "2024Q2_RC"
+ tag: "develop"
bugzillaurl: example.com:443/bugzilla
bugzillakey: VH2Vw0iI5aYgALFFzVDWqhACwt6Hu3bXla9kSC1Z
diff --git a/kubernetes/k8sdeploy.sh b/kubernetes/k8sdeploy.sh
deleted file mode 100644
index 9eb34b1897fd7ea0dd8c77658d987bed857bf16e..0000000000000000000000000000000000000000
--- a/kubernetes/k8sdeploy.sh
+++ /dev/null
@@ -1,65 +0,0 @@
-#!/bin/bash
-
-CURRENT_DIR="$(pwd)"
-SCRIPT_DIR="$(dirname "$0")"
-cd $SCRIPT_DIR
-
-# copy to a workingdir
-cp -r ./template ./_apply
-
-kubectl create namespace openslice
-
-kubectl apply -f ./_apply/openslice-ingress.yaml
-
-# wait for ingress to get IP address
-INGRESSADDR=""
-while [ -z $INGRESSADDR ]; do
- echo "Waiting for external IP"
- INGRESSADDR=$(kubectl -n openslice get ingress openslice-ingress -o jsonpath='{.status.loadBalancer.ingress[0].ip}')
- if [ -z "$INGRESSADDR" ]
- then
- echo "\INGRESSADDR is empty trying hostname"
- INGRESSADDR=$(kubectl -n openslice get ingress openslice-ingress -o jsonpath='{.status.loadBalancer.ingress[0].hostname}')
- else
- echo "\$INGRESSADDR found!"
- fi
- [ -z "$INGRESSADDR" ] && sleep 5
-done
-echo 'Found external IP: '$INGRESSADDR
-find ./_apply/ -type f -print0 | xargs -0 sed -i "s/INGRESSADDR/$INGRESSADDR/g"
-
-kubectl apply -f ./_apply/artemis.yaml
-kubectl apply -f ./_apply/bugzilla.yaml
-kubectl apply -f ./_apply/centrallog.yaml
-kubectl apply -f ./_apply/manoclient.yaml
-kubectl apply -f ./_apply/kroki.yaml
-kubectl apply -f ./_apply/blockdiag.yaml
-
-kubectl apply -f ./_apply/portalweb-config.yaml
-kubectl apply -f ./_apply/portalweb-config-nginx.yaml
-kubectl apply -f ./_apply/portalweb.yaml
-
-kubectl apply -f ./_apply/tmfweb-config.yaml
-kubectl apply -f ./_apply/tmfweb-config-nginx.yaml
-kubectl apply -f ./_apply/tmfweb.yaml
-
-kubectl apply -f ./_apply/mysql-config.yaml
-kubectl apply -f ./_apply/mysql-pv-pvc.yaml
-kubectl apply -f ./_apply/mysql.yaml
-
-kubectl create configmap keycloak-realm-config --from-file=./_apply/realm-export.json --namespace=openslice
-kubectl apply -f ./_apply/keycloak.yaml
-
-kubectl apply -f ./_apply/osom-pv-pvc.yaml
-kubectl apply -f ./_apply/osom.yaml
-
-kubectl apply -f ./_apply/oasapi-pv-pvc.yaml
-kubectl apply -f ./_apply/oasapi.yaml
-
-kubectl apply -f ./_apply/osportalapi-pv-pvc.yaml
-kubectl apply -f ./_apply/osportalapi.yaml
-
-kubectl apply -f ./_apply/osscapi-pv-pvc.yaml
-kubectl apply -f ./_apply/osscapi.yaml
-
-cd $CURRENT_DIR
diff --git a/kubernetes/k8sremove.sh b/kubernetes/k8sremove.sh
deleted file mode 100644
index 1d5832aa0496894e1a5953ec43b00c0d98f8c341..0000000000000000000000000000000000000000
--- a/kubernetes/k8sremove.sh
+++ /dev/null
@@ -1,45 +0,0 @@
-#!/bin/bash
-
-CURRENT_DIR="$(pwd)"
-SCRIPT_DIR="$(dirname "$0")"
-cd $SCRIPT_DIR
-
-kubectl delete -f ./_apply/osscapi.yaml
-kubectl delete -f ./_apply/osscapi-pv-pvc.yaml
-
-kubectl delete -f ./_apply/osportalapi.yaml
-kubectl delete -f ./_apply/osportalapi-pv-pvc.yaml
-
-kubectl delete -f ./_apply/oasapi.yaml
-kubectl delete -f ./_apply/oasapi-pv-pvc.yaml
-
-kubectl delete -f ./_apply/osom.yaml
-kubectl delete -f ./_apply/osom-pv-pvc.yaml
-
-kubectl delete -f ./_apply/keycloak.yaml
-kubectl delete configmap keycloak-realm-config -n openslice
-
-kubectl delete -f ./_apply/mysql.yaml
-kubectl delete -f ./_apply/mysql-pv-pvc.yaml
-kubectl delete -f ./_apply/mysql-config.yaml
-
-kubectl delete -f ./_apply/tmfweb-config.yaml
-kubectl delete -f ./_apply/tmfweb-config-nginx.yaml
-kubectl delete -f ./_apply/tmfweb.yaml
-
-kubectl delete -f ./_apply/portalweb-config.yaml
-kubectl delete -f ./_apply/portalweb-config-nginx.yaml
-kubectl delete -f ./_apply/portalweb.yaml
-
-kubectl delete -f ./_apply/blockdiag.yaml
-kubectl delete -f ./_apply/kroki.yaml
-kubectl delete -f ./_apply/manoclient.yaml
-kubectl delete -f ./_apply/centrallog.yaml
-kubectl delete -f ./_apply/bugzilla.yaml
-kubectl delete -f ./_apply/artemis.yaml
-
-kubectl delete -f ./_apply/openslice-ingress.yaml
-
-kubectl delete ns openslice
-
-cd $CURRENT_DIR
diff --git a/kubernetes/template/README.md b/kubernetes/template/README.md
deleted file mode 100644
index 83f6025e7085378ba3fcb5f47c2d9024ee16231c..0000000000000000000000000000000000000000
--- a/kubernetes/template/README.md
+++ /dev/null
@@ -1,4 +0,0 @@
-Install first an ingress controler
-For docker desktop
-https://kubernetes.github.io/ingress-nginx/deploy/#docker-desktop
-
diff --git a/kubernetes/template/artemis.yaml b/kubernetes/template/artemis.yaml
deleted file mode 100644
index a5e8f02539fbf3013f884a57ebe1e4cd4942dc83..0000000000000000000000000000000000000000
--- a/kubernetes/template/artemis.yaml
+++ /dev/null
@@ -1,54 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: artemis
- name: artemis
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: artemis
- template:
- metadata:
- labels:
- org.etsi.osl.service: artemis
- spec:
- containers:
- - image: apache/activemq-artemis:2.30.0
- name: artemis
- ports:
- - containerPort: 8161
- - containerPort: 61616
- - containerPort: 61613
- volumeMounts:
- - mountPath: /var/log/activemq
- name: activemq-log
- restartPolicy: Always
- volumes:
- - name: activemq-log
- hostPath:
- path: /var/log/activemq
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- annotations:
- labels:
- org.etsi.osl.service: artemis
- name: artemis
-spec:
- ports:
- - name: "8161"
- port: 8161
- targetPort: 8161
- - name: "61616"
- port: 61616
- targetPort: 61616
- - name: "61613"
- port: 61613
- targetPort: 61613
- selector:
- org.etsi.osl.service: artemis
diff --git a/kubernetes/template/blockdiag.yaml b/kubernetes/template/blockdiag.yaml
deleted file mode 100644
index 0fdc41d62a0c02141024242b1a12b488b8d9e2da..0000000000000000000000000000000000000000
--- a/kubernetes/template/blockdiag.yaml
+++ /dev/null
@@ -1,38 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: blockdiag
- name: blockdiag
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: blockdiag
- template:
- metadata:
- labels:
- org.etsi.osl.service: blockdiag
- spec:
- containers:
- - image: yuzutech/kroki-blockdiag
- name: blockdiag
- ports:
- - containerPort: 8001
- restartPolicy: Always
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: blockdiag
- name: blockdiag
-spec:
- ports:
- - name: "8001"
- targetPort: 8001
- port: 8001
- selector:
- org.etsi.osl.service: blockdiag
diff --git a/kubernetes/template/bugzilla.yaml b/kubernetes/template/bugzilla.yaml
deleted file mode 100644
index 658d1028b6c1cbb39715af0dff019f28779e4c3a..0000000000000000000000000000000000000000
--- a/kubernetes/template/bugzilla.yaml
+++ /dev/null
@@ -1,49 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: bugzilla
- name: bugzilla
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: bugzilla
- template:
- metadata:
- labels:
- org.etsi.osl.service: bugzilla
- spec:
- containers:
- - env:
- - name: SPRING_APPLICATION_JSON
- value: >-
- {
- "spring.activemq.brokerUrl": "tcp://artemis:61616?jms.watchTopicAdvisories=false",
- "spring.activemq.user": "artemis",
- "spring.activemq.password": "artemis",
- "bugzillaurl":"",
- "bugzillakey":"",
- "main_operations_product":""
- }
- image: labs.etsi.org:5050/osl/code/org.etsi.osl.bugzilla:develop
- name: bugzilla
- ports:
- - containerPort: 13010
- restartPolicy: Always
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: bugzilla
- name: bugzilla
-spec:
- ports:
- - name: "13010"
- port: 13010
- targetPort: 13010
- selector:
- org.etsi.osl.service: bugzilla
diff --git a/kubernetes/template/centrallog.yaml b/kubernetes/template/centrallog.yaml
deleted file mode 100644
index 2fa6b276b6fb3e5ff8b37c90e9ebe89c267d2b15..0000000000000000000000000000000000000000
--- a/kubernetes/template/centrallog.yaml
+++ /dev/null
@@ -1,48 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: centrallog
- name: centrallog
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: centrallog
- template:
- metadata:
- labels:
- org.etsi.osl.service: centrallog
- spec:
- containers:
- - env:
- - name: SPRING_APPLICATION_JSON
- value: >-
- {
- "spring.activemq.brokerUrl": "tcp://artemis:61616?jms.watchTopicAdvisories=false",
- "spring.activemq.user": "artemis",
- "spring.activemq.password": "artemis",
- "centrallogurl":"http://elk_ip:elk_port/index_name/_doc"
- }
- image: labs.etsi.org:5050/osl/code/org.etsi.osl.centrallog.service:develop
- name: centrallog
- ports:
- - containerPort: 13013
- restartPolicy: Always
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: centrallog
- name: centrallog
-spec:
- ports:
- - name: "13013"
- targetPort: 13013
- port: 13013
- selector:
- org.etsi.osl.service: centrallog
-
diff --git a/kubernetes/template/keycloak.yaml b/kubernetes/template/keycloak.yaml
deleted file mode 100644
index 086a8951c409e300efeacd96a08a5be7508a1460..0000000000000000000000000000000000000000
--- a/kubernetes/template/keycloak.yaml
+++ /dev/null
@@ -1,82 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- labels:
- org.etsi.osl.service: keycloak
- name: keycloak
- namespace: openslice
-spec:
- selector:
- matchLabels:
- org.etsi.osl.service: keycloak
- strategy:
- type: Recreate
- template:
- metadata:
- labels:
- org.etsi.osl.service: keycloak
- spec:
- initContainers:
- - name: init-mysql-portal
- image: busybox:1.28
- command: ['sh', '-c', "until nslookup mysql; do echo waiting for mysql; sleep 2; done"]
-
- containers:
- - env:
- - name: DB_VENDOR
- value: MYSQL
- - name: DB_ADDR
- value: mysql
- - name: DB_DATABASE
- value: keycloak
- - name: DB_PASSWORD
- value: password
- - name: DB_USER
- value: keycloak
- - name: KEYCLOAK_USER
- value: admin
- - name: KEYCLOAK_PASSWORD
- value: keycloakadminpass
- - name: JDBC_PARAMS
- value: useSSL=false
- - name: JAVA_OPTS
- value: "-server -Xms512m -Xmx2048m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -XX:+UseAdaptiveSizePolicy -XX:MaxMetaspaceSize=1024m -Djava.net.preferIPv4Stack=true -Djboss.as.management.blocking.timeout=3600"
- - name: KEYCLOAK_IMPORT
- value: /tmp/realm-export.json
- - name: PROXY_ADDRESS_FORWARDING
- value: "true"
- image: jboss/keycloak:16.1.1
- name: keycloak
- ports:
- - containerPort: 8080
- - containerPort: 8443
- volumeMounts:
- - name: "keycloak-configuration"
- readOnly: true
- mountPath: "/tmp"
- readinessProbe:
- httpGet:
- path: /auth/realms/master
- port: 8080
- volumes:
- - name: "keycloak-configuration"
- configMap:
- name: keycloak-realm-config
----
-apiVersion: v1
-kind: Service
-metadata:
- labels:
- org.etsi.osl.service: keycloak
- name: keycloak
- namespace: openslice
-spec:
- ports:
- - name: "8080"
- port: 8080
- targetPort: 8080
- - name: "8443"
- port: 8443
- targetPort: 8443
- selector:
- org.etsi.osl.service: keycloak
diff --git a/kubernetes/template/kroki.yaml b/kubernetes/template/kroki.yaml
deleted file mode 100644
index d01f25ece8716d408415d6820eac5a67ba232680..0000000000000000000000000000000000000000
--- a/kubernetes/template/kroki.yaml
+++ /dev/null
@@ -1,41 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: kroki
- name: kroki
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: kroki
- template:
- metadata:
- labels:
- org.etsi.osl.service: kroki
- spec:
- containers:
- - image: yuzutech/kroki
- name: kroki
- env:
- - name: KROKI_BLOCKDIAG_HOST
- value: "blockdiag"
- ports:
- - containerPort: 8000
- restartPolicy: Always
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: kroki
- name: kroki
-spec:
- ports:
- - name: "8000"
- targetPort: 8000
- port: 8000
- selector:
- org.etsi.osl.service: kroki
diff --git a/kubernetes/template/manoclient.yaml b/kubernetes/template/manoclient.yaml
deleted file mode 100644
index 5c181dc7ebca85f53707a39529548a9542b77ae0..0000000000000000000000000000000000000000
--- a/kubernetes/template/manoclient.yaml
+++ /dev/null
@@ -1,47 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: manoclient
- name: manoclient
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: manoclient
- template:
- metadata:
- labels:
- org.etsi.osl.service: manoclient
- spec:
- containers:
- - env:
- - name: SPRING_APPLICATION_JSON
- value: >-
- {
- "spring.activemq.brokerUrl": "tcp://artemis:61616?jms.watchTopicAdvisories=false",
- "spring.activemq.user": "artemis",
- "spring.activemq.password": "artemis",
- "logging.level.org.springframework" : "INFO"
- }
- image: labs.etsi.org:5050/osl/code/org.etsi.osl.mano:develop
- name: manoclient
- ports:
- - containerPort: 13011
- restartPolicy: Always
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: manoclient
- name: manoclient
-spec:
- ports:
- - name: "13011"
- port: 13011
- targetPort: 13011
- selector:
- org.etsi.osl.service: manoclient
diff --git a/kubernetes/template/mysql-config.yaml b/kubernetes/template/mysql-config.yaml
deleted file mode 100644
index 8ddccddb2e9aadb58d0881db6a229850a1ff78c0..0000000000000000000000000000000000000000
--- a/kubernetes/template/mysql-config.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
- namespace: openslice
- name: mysql-initdb-config
-data:
- 01-databases.sql: |
- # create databases
- CREATE DATABASE IF NOT EXISTS `osdb`;
- CREATE DATABASE IF NOT EXISTS `keycloak`;
-
- # create root user and grant rights
- CREATE USER 'portaluser'@'localhost' IDENTIFIED BY '12345';
- GRANT ALL PRIVILEGES ON *.* TO 'portaluser'@'%' IDENTIFIED BY '12345';
-
- # create root user and grant rights
- CREATE USER 'keycloak'@'localhost' IDENTIFIED BY 'password';
- GRANT ALL PRIVILEGES ON *.* TO 'keycloak'@'%' IDENTIFIED BY 'password';
diff --git a/kubernetes/template/mysql-pv-pvc.yaml b/kubernetes/template/mysql-pv-pvc.yaml
deleted file mode 100644
index b0fbdca3626f66b305ac1807003ebc83ee2f73ba..0000000000000000000000000000000000000000
--- a/kubernetes/template/mysql-pv-pvc.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
- namespace: openslice
- name: mysql-pv-volume
- labels:
- type: local
-spec:
- storageClassName: manual
- capacity:
- storage: 10Gi
- accessModes:
- - ReadWriteOnce
- hostPath:
- path: "/dockerdata-nfs/osmysql"
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
- namespace: openslice
- creationTimestamp: null
- labels:
- org.etsi.osl.service: mysql
- name: mysql-portal-claim0
-spec:
- storageClassName: manual
- accessModes:
- - ReadWriteOnce
- resources:
- requests:
- storage: 10Gi
diff --git a/kubernetes/template/mysql.yaml b/kubernetes/template/mysql.yaml
deleted file mode 100644
index ef27f27981694a3c142b0a30597cebab1aae09ee..0000000000000000000000000000000000000000
--- a/kubernetes/template/mysql.yaml
+++ /dev/null
@@ -1,69 +0,0 @@
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: mysql
- name: mysql
-spec:
- selector:
- matchLabels:
- org.etsi.osl.service: mysql
- serviceName: mysql
- replicas: 1
- template:
- metadata:
- labels:
- org.etsi.osl.service: mysql
- spec:
- containers:
- - env:
- - name: MYSQL_ROOT_HOST
- value: "%"
- - name: MYSQL_ROOT_PASSWORD
- value: letmein
- - name: MYSQL_DATABASE
- value: osdb
- - name: MYSQL_USER
- value: portaluser
- - name: MYSQL_PASSWORD
- value: "12345"
- image: mysql:5.7.43
- name: mysql
- ports:
- - containerPort: 3306
- volumeMounts:
- - mountPath: /var/lib/mysql
- name: mysql-portal-claim0
- - mountPath: /docker-entrypoint-initdb.d
- name: mysql-initdb
- readinessProbe:
- exec:
- # Check we can execute queries over TCP (skip-networking is off).
- command: ["mysql", "-h", "127.0.0.1", "-u", "root", "-pletmein", "-e", "SELECT 1"]
- initialDelaySeconds: 5
- periodSeconds: 2
- timeoutSeconds: 1
- restartPolicy: Always
- volumes:
- - name: mysql-portal-claim0
- persistentVolumeClaim:
- claimName: mysql-portal-claim0
- - name: mysql-initdb
- configMap:
- name: mysql-initdb-config
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: mysql
- name: mysql
-spec:
- ports:
- - name: mysql
- port: 3306
- targetPort: 3306
- selector:
- org.etsi.osl.service: mysql
diff --git a/kubernetes/template/oasapi-pv-pvc.yaml b/kubernetes/template/oasapi-pv-pvc.yaml
deleted file mode 100644
index 6a675bb6fe37835c5886ec027de0ff38ba602cee..0000000000000000000000000000000000000000
--- a/kubernetes/template/oasapi-pv-pvc.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
- namespace: openslice
- name: oasapi-pv-volume
- labels:
- type: local
-spec:
- storageClassName: oasapi-pv-manual
- capacity:
- storage: 1Gi
- accessModes:
- - ReadWriteOnce
- hostPath:
- path: "/dockerdata-nfs/oasapi"
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
- namespace: openslice
- creationTimestamp: null
- labels:
- org.etsi.osl.service: oasapi-claim0
- name: oasapi-claim0
-spec:
- storageClassName: oasapi-pv-manual
- accessModes:
- - ReadWriteOnce
- resources:
- requests:
- storage: 1Gi
diff --git a/kubernetes/template/oasapi.yaml b/kubernetes/template/oasapi.yaml
deleted file mode 100644
index f494e3e748766750dd0f1c011f8f72e973d9ad44..0000000000000000000000000000000000000000
--- a/kubernetes/template/oasapi.yaml
+++ /dev/null
@@ -1,79 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: oasapi
- name: oasapi
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: oasapi
- strategy:
- type: Recreate
- template:
- metadata:
- labels:
- org.etsi.osl.service: oasapi
- spec:
- initContainers:
- - name: init-keycloak
- image: busybox:1.28
- command: ['sh', '-c', "until nslookup keycloak; do echo waiting for keycloak; sleep 2; done"]
- - name: init-mysql-portal
- image: busybox:1.28
- command: ['sh', '-c', "until nslookup mysql; do echo waiting for mysql; sleep 2; done"]
- containers:
- - env:
- - name: SPRING_APPLICATION_JSON
- value: >-
- {
- "spring.datasource.url": "jdbc:mysql://mysql/ostmfdb?createDatabaseIfNotExist=true&useUnicode=true&nullCatalogMeansCurrent=true&characterEncoding=utf8&useJDBCCompliantTimezoneShift=true&useLegacyDatetimeCode=false&serverTimezone=UTC",
- "spring.datasource.username":"root",
- "spring.datasource.password":"letmein",
- "spring-addons.issuers[0].uri": "http://INGRESSADDR/auth/realms/openslice",
- "spring-addons.issuers[0].username-json-path":"$.preferred_username",
- "spring-addons.issuers[0].claims[0].jsonPath":"$.realm_access.roles",
- "spring-addons.issuers[0].claims[1].jsonPath":"$.resource_access.*.roles",
- "spring.security.oauth2.resourceserver.jwt.issuer-uri": "http://INGRESSADDR/auth/realms/openslice",
- "springdoc.oAuthFlow.authorizationUrl": "http://INGRESSADDR/auth/realms/openslice/protocol/openid-connect/auth",
- "springdoc.oAuthFlow.tokenUrl": "http://INGRESSADDR/auth/realms/openslice/protocol/openid-connect/token",
- "springdoc.oauth.client-id" : "osapiWebClientId",
- "springdoc.oauth.clientsecret" : "secret",
- "spring.activemq.brokerUrl": "tcp://artemis:61616?jms.watchTopicAdvisories=false",
- "spring.activemq.user": "artemis",
- "spring.activemq.password": "artemis",
- "logging.level.org.springframework" : "INFO"
- }
- image: labs.etsi.org:5050/osl/code/org.etsi.osl.oas:develop
- name: openslice-oasapi
- ports:
- - containerPort: 13101
- volumeMounts:
- - mountPath: /root
- name: oasapi-claim0
- readinessProbe:
- httpGet:
- path: /oas-api/swagger-ui/index.html
- port: 13101
- restartPolicy: Always
- volumes:
- - name: oasapi-claim0
- persistentVolumeClaim:
- claimName: oasapi-claim0
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: oasapi
- name: oasapi
-spec:
- ports:
- - name: "13101"
- targetPort: 13101
- port: 13101
- selector:
- org.etsi.osl.service: oasapi
diff --git a/kubernetes/template/openslice-ingress.yaml b/kubernetes/template/openslice-ingress.yaml
deleted file mode 100644
index 67cb54299daec0414cdd5eb0201d6ed36e982770..0000000000000000000000000000000000000000
--- a/kubernetes/template/openslice-ingress.yaml
+++ /dev/null
@@ -1,52 +0,0 @@
-apiVersion: networking.k8s.io/v1
-kind: Ingress
-metadata:
- name: openslice-ingress
- namespace: openslice
-spec:
- ingressClassName: nginx
- rules:
- - http:
- paths:
- - pathType: Prefix
- path: "/tmf-api"
- backend:
- service:
- name: osscapi
- port:
- number: 13082
- - pathType: Prefix
- path: "/oas-api"
- backend:
- service:
- name: oasapi
- port:
- number: 13101
- - pathType: Prefix
- path: "/auth"
- backend:
- service:
- name: keycloak
- port:
- number: 8080
- - pathType: Prefix
- path: "/osapi"
- backend:
- service:
- name: osportalapi
- port:
- number: 13000
- - pathType: Prefix
- path: "/nfvportal"
- backend:
- service:
- name: portalweb
- port:
- number: 80
- - pathType: Prefix
- path: "/"
- backend:
- service:
- name: tmfweb
- port:
- number: 80
diff --git a/kubernetes/template/osom-pv-pvc.yaml b/kubernetes/template/osom-pv-pvc.yaml
deleted file mode 100644
index da3f75b97c6a01c6c557d48025b8cdc2975b4dcd..0000000000000000000000000000000000000000
--- a/kubernetes/template/osom-pv-pvc.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
- namespace: openslice
- name: osom-pv-volume
- labels:
- type: local
-spec:
- storageClassName: osom-pv-manual
- capacity:
- storage: 100Mi
- accessModes:
- - ReadWriteOnce
- hostPath:
- path: "/dockerdata-nfs/osom"
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
- namespace: openslice
- creationTimestamp: null
- labels:
- org.etsi.osl.service: osom-claim0
- name: osom-claim0
-spec:
- storageClassName: osom-pv-manual
- accessModes:
- - ReadWriteOnce
- resources:
- requests:
- storage: 100Mi
diff --git a/kubernetes/template/osom.yaml b/kubernetes/template/osom.yaml
deleted file mode 100644
index d05010e79e60c15c6de465eff9e73a1255f7682d..0000000000000000000000000000000000000000
--- a/kubernetes/template/osom.yaml
+++ /dev/null
@@ -1,56 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: osom
- name: osom
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: osom
- strategy:
- type: Recreate
- template:
- metadata:
- labels:
- org.etsi.osl.service: osom
- spec:
- containers:
- - env:
- - name: SPRING_APPLICATION_JSON
- value: >-
- {
- "spring.activemq.brokerUrl": "tcp://artemis:61616?jms.watchTopicAdvisories=false",
- "spring.activemq.user": "artemis",
- "spring.activemq.password": "artemis",
- "logging.level.org.springframework" : "INFO"
- }
- image: labs.etsi.org:5050/osl/code/org.etsi.osl.osom:develop
- name: openslice-osom
- ports:
- - containerPort: 13100
- volumeMounts:
- - mountPath: /root
- name: osom-claim0
- restartPolicy: Always
- volumes:
- - name: osom-claim0
- persistentVolumeClaim:
- claimName: osom-claim0
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: osom
- name: osom
-spec:
- ports:
- - name: "13100"
- targetPort: 13100
- port: 13100
- selector:
- org.etsi.osl.service: osom
diff --git a/kubernetes/template/osportalapi-pv-pvc.yaml b/kubernetes/template/osportalapi-pv-pvc.yaml
deleted file mode 100644
index bd15ddce3e27e4037deaf1e23665b60c20c7dccc..0000000000000000000000000000000000000000
--- a/kubernetes/template/osportalapi-pv-pvc.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
- namespace: openslice
- name: osportalapi-pv-volume
- labels:
- type: local
-spec:
- storageClassName: osportalapi-pv-volume
- capacity:
- storage: 100Mi
- accessModes:
- - ReadWriteOnce
- hostPath:
- path: "/dockerdata-nfs/osportalapi-pv-volume"
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
- namespace: openslice
- creationTimestamp: null
- labels:
- org.etsi.osl.service: osportalapi-claim0
- name: osportalapi-claim0
-spec:
- storageClassName: osportalapi-pv-volume
- accessModes:
- - ReadWriteOnce
- resources:
- requests:
- storage: 100Mi
diff --git a/kubernetes/template/osportalapi.yaml b/kubernetes/template/osportalapi.yaml
deleted file mode 100644
index 16995791bf30b2358e88ea0cf2385e137c9e898b..0000000000000000000000000000000000000000
--- a/kubernetes/template/osportalapi.yaml
+++ /dev/null
@@ -1,76 +0,0 @@
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: osportalapi
- name: osportalapi
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: osportalapi
- strategy:
- type: Recreate
- template:
- metadata:
- labels:
- org.etsi.osl.service: osportalapi
- spec:
- initContainers:
- - name: init-keycloak
- image: busybox:1.28
- command: ['sh', '-c', "until nslookup keycloak; do echo waiting for keycloak; sleep 2; done"]
- - name: init-mysql-portal
- image: busybox:1.28
- command: ['sh', '-c', "until nslookup mysql; do echo waiting for mysql; sleep 2; done"]
- containers:
- - name: openslice-portalapi
- image: labs.etsi.org:5050/osl/code/org.etsi.osl.portal.api:develop
- ports:
- - containerPort: 13000
- volumeMounts:
- - name: osportalapi-claim0
- mountPath: /root
- env:
- - name: SPRING_APPLICATION_JSON
- value: >-
- {
- "spring.datasource.url": "jdbc:mysql://mysql/osdb?createDatabaseIfNotExist=true",
- "spring.datasource.username": "root",
- "spring.datasource.password": "letmein",
- "spring-addons.issuers[0].uri": "http://INGRESSADDR/auth/realms/openslice",
- "spring-addons.issuers[0].username-json-path":"$.preferred_username",
- "spring-addons.issuers[0].claims[0].jsonPath":"$.realm_access.roles",
- "spring-addons.issuers[0].claims[1].jsonPath":"$.resource_access.*.roles",
- "spring.security.oauth2.resourceserver.jwt.issuer-uri": "http://INGRESSADDR/auth/realms/openslice",
- "springdoc.oAuthFlow.authorizationUrl": "http://INGRESSADDR/auth/realms/openslice/protocol/openid-connect/auth",
- "springdoc.oAuthFlow.tokenUrl": "http://INGRESSADDR/auth/realms/openslice/protocol/openid-connect/token",
- "springdoc.oauth.client-id" : "osapiWebClientId",
- "springdoc.oauth.clientsecret" : "secret",
- "spring.activemq.brokerUrl": "tcp://artemis:61616?jms.watchTopicAdvisories=false",
- "spring.activemq.user": "artemis",
- "spring.activemq.password": "artemis",
- "logging.level.org.springframework" : "INFO"
- }
- restartPolicy: Always
- volumes:
- - name: osportalapi-claim0
- persistentVolumeClaim:
- claimName: osportalapi-claim0
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: osportalapi
- name: osportalapi
-spec:
- ports:
- - name: "13000"
- port: 13000
- targetPort: 13000
- selector:
- org.etsi.osl.service: osportalapi
diff --git a/kubernetes/template/osscapi-pv-pvc.yaml b/kubernetes/template/osscapi-pv-pvc.yaml
deleted file mode 100644
index 57b661bfcf41f8bee98e64ba89f6d41661663d45..0000000000000000000000000000000000000000
--- a/kubernetes/template/osscapi-pv-pvc.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
- namespace: openslice
- name: osscapi-pv-volume
- labels:
- type: local
-spec:
- storageClassName: osscapi-pv-manual
- capacity:
- storage: 1Gi
- accessModes:
- - ReadWriteOnce
- hostPath:
- path: "/dockerdata-nfs/osscapi"
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
- namespace: openslice
- creationTimestamp: null
- labels:
- org.etsi.osl.service: osscapi-claim0
- name: osscapi-claim0
-spec:
- storageClassName: osscapi-pv-manual
- accessModes:
- - ReadWriteOnce
- resources:
- requests:
- storage: 1Gi
diff --git a/kubernetes/template/osscapi.yaml b/kubernetes/template/osscapi.yaml
deleted file mode 100644
index 720c922066b04b91fab1358ce28997630907ad01..0000000000000000000000000000000000000000
--- a/kubernetes/template/osscapi.yaml
+++ /dev/null
@@ -1,81 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: osscapi
- name: osscapi
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: osscapi
- strategy:
- type: Recreate
- template:
- metadata:
- labels:
- org.etsi.osl.service: osscapi
- spec:
- initContainers:
- - name: init-keycloak
- image: busybox:1.28
- command: ['sh', '-c', "until nslookup keycloak; do echo waiting for keycloak; sleep 2; done"]
- - name: init-mysql-portal
- image: busybox:1.28
- command: ['sh', '-c', "until nslookup mysql; do echo waiting for mysql; sleep 2; done"]
- containers:
- - env:
- - name: SPRING_APPLICATION_JSON
- value: >-
- {
- "spring.datasource.url":"jdbc:mysql://mysql/ostmfdb?createDatabaseIfNotExist=true&useSSL=false&requireSSL=false&useUnicode=true&characterEncoding=utf8&useJDBCCompliantTimezoneShift=true&useLegacyDatetimeCode=false&serverTimezone=UTC",
- "spring.datasource.username":"root",
- "spring.datasource.password":"letmein",
- "spring-addons.issuers[0].uri":"http://INGRESSADDR/auth/realms/openslice",
- "spring-addons.issuers[0].username-json-path":"$.preferred_username",
- "spring-addons.issuers[0].claims[0].jsonPath":"$.realm_access.roles",
- "spring-addons.issuers[0].claims[1].jsonPath":"$.resource_access.*.roles",
- "spring.security.oauth2.resourceserver.jwt.issuer-uri":"http://INGRESSADDR/auth/realms/openslice",
- "spring.security.oauth2.resourceserver.jwt.jwk-set-uri":"http://INGRESSADDR/auth/realms/openslice/.well-known/openid-configuration",
- "springdoc.oAuthFlow.authorizationUrl":"http://INGRESSADDR/auth/realms/openslice/protocol/openid-connect/auth",
- "springdoc.oAuthFlow.tokenUrl":"http://INGRESSADDR/auth/realms/openslice/protocol/openid-connect/token",
- "springdoc.oauth.client-id":"osapiWebClientId",
- "springdoc.oauth.clientsecret":"secret",
- "spring.activemq.brokerUrl":"tcp://artemis:61616?jms.watchTopicAdvisories=false",
- "spring.activemq.user":"artemis",
- "spring.activemq.password":"artemis",
- "logging.level.org.springframework":"INFO",
- "kroki.serverurl":"http://INGRESSADDR/kroki"
- }
- image: labs.etsi.org:5050/osl/code/org.etsi.osl.tmf.api:develop
- name: openslice-scapi
- ports:
- - containerPort: 13082
- volumeMounts:
- - mountPath: /root
- name: osscapi-claim0
- readinessProbe:
- httpGet:
- path: /tmf-api/serviceCatalogManagement/v4/serviceCatalog
- port: 13082
- restartPolicy: Always
- volumes:
- - name: osscapi-claim0
- persistentVolumeClaim:
- claimName: osscapi-claim0
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: osscapi
- name: osscapi
-spec:
- ports:
- - name: "13082"
- targetPort: 13082
- port: 13082
- selector:
- org.etsi.osl.service: osscapi
diff --git a/kubernetes/template/portalweb-config-nginx.yaml b/kubernetes/template/portalweb-config-nginx.yaml
deleted file mode 100644
index 17a60e90ac599b8a6188c4674a36245cadddd1fc..0000000000000000000000000000000000000000
--- a/kubernetes/template/portalweb-config-nginx.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-kind: ConfigMap
-apiVersion: v1
-metadata:
- name: portalweb-config-nginx
- namespace: openslice
-data:
- default.conf: |+
- # Expires map
- map $sent_http_content_type $expires {
- default off;
- text/html epoch;
- text/css max;
- application/json max;
- application/javascript max;
- ~image/ max;
- }
-
- server {
- listen 80;
- include /etc/nginx/mime.types;
-
- server_name INGRESSADDR;
- location / {
- root /usr/share/nginx/html/;
- index index.html index.htm;
- try_files $uri $uri/ /index.html =404;
- }
-
- expires $expires;
- gzip on;
- }
diff --git a/kubernetes/template/portalweb-config.yaml b/kubernetes/template/portalweb-config.yaml
deleted file mode 100644
index f7c12aa6f28db7997d8b185fd98a57414e82dde9..0000000000000000000000000000000000000000
--- a/kubernetes/template/portalweb-config.yaml
+++ /dev/null
@@ -1,8 +0,0 @@
-kind: ConfigMap
-apiVersion: v1
-metadata:
- namespace: openslice
- name: portalweb-config
-data:
- config.js: "var appConfig = angular.module('portalwebapp.config',[]);\n\n\nappConfig.factory('APIEndPointService', function() {\n\t return {\t \n\t\tTITLE: \"Openslice demo\",\n\t\tWIKI: \"http://INGRESSADDR\",\n\t\tBUGZILLA: \"https://INGRESSADDR/bugzilla/\",\n\t\tSTATUS: \"http://INGRESSADDR/\",\n\t\tAPIURL: \"http://INGRESSADDR\",\n\t\tWEBURL: \"http://INGRESSADDR/nfvportal\",\n\t\tAPIOAUTHURL: \"http://INGRESSADDR/auth/realms/openslice\",\n\t\tAPITMFURL: \"http://INGRESSADDR/tmf-api/serviceCatalogManagement/v4\"\n\t\t\n\t };\n});\n\n\n"
-
diff --git a/kubernetes/template/portalweb.yaml b/kubernetes/template/portalweb.yaml
deleted file mode 100644
index 92106a9a65c0fbeb4cba44a833f228d799a1e804..0000000000000000000000000000000000000000
--- a/kubernetes/template/portalweb.yaml
+++ /dev/null
@@ -1,54 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: portalweb
- name: portalweb
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: portalweb
- strategy:
- type: Recreate
- template:
- metadata:
- labels:
- org.etsi.osl.service: portalweb
- spec:
- containers:
- - name: openslice-portalweb
- image: labs.etsi.org:5050/osl/code/org.etsi.osl.portal.web:develop
- ports:
- - containerPort: 80
- volumeMounts:
- - name: "portalweb-configuration"
- mountPath: /usr/share/nginx/html/nfvportal/js/config.js
- subPath: config.js
- - name: "portalweb-configuration-nginx"
- readOnly: true
- mountPath: "/etc/nginx/conf.d"
- volumes:
- - name: "portalweb-configuration"
- configMap:
- name: portalweb-config
- defaultMode: 420
- - name: "portalweb-configuration-nginx"
- configMap:
- name: portalweb-config-nginx
- restartPolicy: Always
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: portalweb
- name: portalweb
-spec:
- ports:
- - name: "portalwebport"
- port: 80
- selector:
- org.etsi.osl.service: portalweb
diff --git a/kubernetes/template/realm-export.json b/kubernetes/template/realm-export.json
deleted file mode 100644
index 16ea845afd790243e4f51ca622815c54bbea36ac..0000000000000000000000000000000000000000
--- a/kubernetes/template/realm-export.json
+++ /dev/null
@@ -1,2221 +0,0 @@
-{
- "id": "openslice",
- "realm": "openslice",
- "displayName": "Openslice",
- "notBefore": 1586721661,
- "revokeRefreshToken": false,
- "refreshTokenMaxReuse": 0,
- "accessTokenLifespan": 300,
- "accessTokenLifespanForImplicitFlow": 900,
- "ssoSessionIdleTimeout": 1800,
- "ssoSessionMaxLifespan": 36000,
- "ssoSessionIdleTimeoutRememberMe": 0,
- "ssoSessionMaxLifespanRememberMe": 0,
- "offlineSessionIdleTimeout": 2592000,
- "offlineSessionMaxLifespanEnabled": false,
- "offlineSessionMaxLifespan": 5184000,
- "accessCodeLifespan": 60,
- "accessCodeLifespanUserAction": 300,
- "accessCodeLifespanLogin": 1800,
- "actionTokenGeneratedByAdminLifespan": 43200,
- "actionTokenGeneratedByUserLifespan": 300,
- "enabled": true,
- "sslRequired": "external",
- "registrationAllowed": false,
- "registrationEmailAsUsername": false,
- "rememberMe": false,
- "verifyEmail": false,
- "loginWithEmailAllowed": true,
- "duplicateEmailsAllowed": false,
- "resetPasswordAllowed": false,
- "editUsernameAllowed": false,
- "bruteForceProtected": false,
- "permanentLockout": false,
- "maxFailureWaitSeconds": 900,
- "minimumQuickLoginWaitSeconds": 60,
- "waitIncrementSeconds": 60,
- "quickLoginCheckMilliSeconds": 1000,
- "maxDeltaTimeSeconds": 43200,
- "failureFactor": 30,
- "roles": {
- "realm": [
- {
- "id": "1741dd77-ee50-4fd7-bec6-1a6d3d9d778a",
- "name": "MENTOR",
- "composite": true,
- "composites": {
- "realm": [
- "USER"
- ]
- },
- "clientRole": false,
- "containerId": "openslice",
- "attributes": {}
- },
- {
- "id": "f61e8649-b003-42e2-8670-4116885a1e26",
- "name": "NFV_DEVELOPER",
- "composite": true,
- "composites": {
- "realm": [
- "USER"
- ]
- },
- "clientRole": false,
- "containerId": "openslice",
- "attributes": {}
- },
- {
- "id": "379857ba-17b0-4299-9191-4df27ce9425b",
- "name": "uma_authorization",
- "description": "${role_uma_authorization}",
- "composite": false,
- "clientRole": false,
- "containerId": "openslice",
- "attributes": {}
- },
- {
- "id": "a2685809-e874-4009-8435-92ded0c7180d",
- "name": "ADMIN",
- "composite": true,
- "composites": {
- "realm": [
- "USER"
- ]
- },
- "clientRole": false,
- "containerId": "openslice",
- "attributes": {}
- },
- {
- "id": "af2ef7e2-d78a-4f4e-844c-174c64168316",
- "name": "offline_access",
- "description": "${role_offline-access}",
- "composite": false,
- "clientRole": false,
- "containerId": "openslice",
- "attributes": {}
- },
- {
- "id": "8b544ccb-d0de-4550-b879-985c86b8d018",
- "name": "USER",
- "composite": false,
- "clientRole": false,
- "containerId": "openslice",
- "attributes": {}
- },
- {
- "id": "0f367333-06dc-4740-931a-b2d6b3b06577",
- "name": "EXPERIMENTER",
- "composite": true,
- "composites": {
- "realm": [
- "USER"
- ]
- },
- "clientRole": false,
- "containerId": "openslice",
- "attributes": {}
- },
- {
- "id": "ec900678-a7df-4955-a78d-a90b138a5121",
- "name": "TESTBED_PROVIDER",
- "composite": true,
- "composites": {
- "realm": [
- "USER"
- ]
- },
- "clientRole": false,
- "containerId": "openslice",
- "attributes": {}
- }
- ],
- "client": {
- "openslice-service": [],
- "realm-management": [
- {
- "id": "679a9d01-6d85-42f5-9c6b-f3d923dd1a0a",
- "name": "query-clients",
- "description": "${role_query-clients}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "06f2873b-3926-4d97-9179-769e342f86e9",
- "name": "create-client",
- "description": "${role_create-client}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "63f7b29c-c463-40d8-82de-4ae894de65ea",
- "name": "view-realm",
- "description": "${role_view-realm}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "09422e3f-4358-466a-a46a-e887cb5f5189",
- "name": "realm-admin",
- "description": "${role_realm-admin}",
- "composite": true,
- "composites": {
- "client": {
- "realm-management": [
- "query-clients",
- "create-client",
- "view-realm",
- "manage-events",
- "query-groups",
- "manage-identity-providers",
- "view-events",
- "view-users",
- "view-clients",
- "manage-clients",
- "impersonation",
- "manage-authorization",
- "manage-users",
- "query-realms",
- "query-users",
- "manage-realm",
- "view-authorization",
- "view-identity-providers"
- ]
- }
- },
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "2d6c5511-1cb7-4283-90f5-50d751c2eb92",
- "name": "manage-events",
- "description": "${role_manage-events}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "dbb571cf-7d5e-418e-95d7-ca2160eceba6",
- "name": "query-groups",
- "description": "${role_query-groups}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "31f02966-2fa2-479b-bcf1-fa2a000e7b0f",
- "name": "manage-identity-providers",
- "description": "${role_manage-identity-providers}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "46c57172-f46d-466c-a73c-4b4f58eb23ce",
- "name": "view-events",
- "description": "${role_view-events}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "006e604a-1915-4165-bf8a-709f77d07c99",
- "name": "view-users",
- "description": "${role_view-users}",
- "composite": true,
- "composites": {
- "client": {
- "realm-management": [
- "query-users",
- "query-groups"
- ]
- }
- },
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "22b0f1f4-b2de-4829-ae70-5b6a2ffb90c0",
- "name": "view-clients",
- "description": "${role_view-clients}",
- "composite": true,
- "composites": {
- "client": {
- "realm-management": [
- "query-clients"
- ]
- }
- },
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "2ec8e15f-d086-4c49-a2dc-ccf1b85b645f",
- "name": "manage-clients",
- "description": "${role_manage-clients}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "841fcb24-6965-4299-a2a8-2a0caf98b022",
- "name": "impersonation",
- "description": "${role_impersonation}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "16a19114-7aa5-4c7c-a741-424e74b379b9",
- "name": "manage-authorization",
- "description": "${role_manage-authorization}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "7c81140a-8b70-44fc-af0e-d6b83f6be914",
- "name": "manage-users",
- "description": "${role_manage-users}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "1690c8e2-971a-4472-a21c-d2c403f46907",
- "name": "query-realms",
- "description": "${role_query-realms}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "3b455fa3-45ce-4210-b138-c3a64b69271f",
- "name": "query-users",
- "description": "${role_query-users}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "9cfae318-c817-428c-8a41-9f37fa3b8848",
- "name": "manage-realm",
- "description": "${role_manage-realm}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "a085267a-ac93-4004-9899-b76b74d06c31",
- "name": "view-authorization",
- "description": "${role_view-authorization}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- },
- {
- "id": "1dd16fc9-7abd-41fe-bb23-5887f01fa295",
- "name": "view-identity-providers",
- "description": "${role_view-identity-providers}",
- "composite": false,
- "clientRole": true,
- "containerId": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "attributes": {}
- }
- ],
- "security-admin-console": [],
- "admin-cli": [],
- "osapiWebClientId": [],
- "account-console": [],
- "broker": [
- {
- "id": "be197fdb-fe78-4b10-87d3-9e17826b05c9",
- "name": "read-token",
- "description": "${role_read-token}",
- "composite": false,
- "clientRole": true,
- "containerId": "92128d63-9887-4e70-b5e2-9797756279d3",
- "attributes": {}
- }
- ],
- "account": [
- {
- "id": "e2d74a05-f1a0-4fb1-8b03-a3e9b691d82b",
- "name": "manage-account",
- "description": "${role_manage-account}",
- "composite": true,
- "composites": {
- "client": {
- "account": [
- "manage-account-links"
- ]
- }
- },
- "clientRole": true,
- "containerId": "d30c8b0b-4d20-4dd7-876a-21ee1ae2c028",
- "attributes": {}
- },
- {
- "id": "f661e78f-1ce3-4af2-9a7c-a5cb7a09d4b5",
- "name": "manage-account-links",
- "description": "${role_manage-account-links}",
- "composite": false,
- "clientRole": true,
- "containerId": "d30c8b0b-4d20-4dd7-876a-21ee1ae2c028",
- "attributes": {}
- },
- {
- "id": "3094e791-7572-4845-b64b-3dbbb763fdb7",
- "name": "view-consent",
- "description": "${role_view-consent}",
- "composite": false,
- "clientRole": true,
- "containerId": "d30c8b0b-4d20-4dd7-876a-21ee1ae2c028",
- "attributes": {}
- },
- {
- "id": "05ddbf6c-7b93-4c49-83e9-154255ac877e",
- "name": "view-profile",
- "description": "${role_view-profile}",
- "composite": false,
- "clientRole": true,
- "containerId": "d30c8b0b-4d20-4dd7-876a-21ee1ae2c028",
- "attributes": {}
- },
- {
- "id": "84bad9b3-a179-4700-84a4-fdcbf0ae2991",
- "name": "manage-consent",
- "description": "${role_manage-consent}",
- "composite": true,
- "composites": {
- "client": {
- "account": [
- "view-consent"
- ]
- }
- },
- "clientRole": true,
- "containerId": "d30c8b0b-4d20-4dd7-876a-21ee1ae2c028",
- "attributes": {}
- },
- {
- "id": "d3e32349-192a-464e-91f8-b73ed6a8f170",
- "name": "view-applications",
- "description": "${role_view-applications}",
- "composite": false,
- "clientRole": true,
- "containerId": "d30c8b0b-4d20-4dd7-876a-21ee1ae2c028",
- "attributes": {}
- }
- ]
- }
- },
- "groups": [],
- "defaultRoles": [
- "uma_authorization",
- "offline_access"
- ],
- "requiredCredentials": [
- "password"
- ],
- "otpPolicyType": "totp",
- "otpPolicyAlgorithm": "HmacSHA1",
- "otpPolicyInitialCounter": 0,
- "otpPolicyDigits": 6,
- "otpPolicyLookAheadWindow": 1,
- "otpPolicyPeriod": 30,
- "otpSupportedApplications": [
- "FreeOTP",
- "Google Authenticator"
- ],
- "webAuthnPolicyRpEntityName": "keycloak",
- "webAuthnPolicySignatureAlgorithms": [
- "ES256"
- ],
- "webAuthnPolicyRpId": "",
- "webAuthnPolicyAttestationConveyancePreference": "not specified",
- "webAuthnPolicyAuthenticatorAttachment": "not specified",
- "webAuthnPolicyRequireResidentKey": "not specified",
- "webAuthnPolicyUserVerificationRequirement": "not specified",
- "webAuthnPolicyCreateTimeout": 0,
- "webAuthnPolicyAvoidSameAuthenticatorRegister": false,
- "webAuthnPolicyAcceptableAaguids": [],
- "webAuthnPolicyPasswordlessRpEntityName": "keycloak",
- "webAuthnPolicyPasswordlessSignatureAlgorithms": [
- "ES256"
- ],
- "webAuthnPolicyPasswordlessRpId": "",
- "webAuthnPolicyPasswordlessAttestationConveyancePreference": "not specified",
- "webAuthnPolicyPasswordlessAuthenticatorAttachment": "not specified",
- "webAuthnPolicyPasswordlessRequireResidentKey": "not specified",
- "webAuthnPolicyPasswordlessUserVerificationRequirement": "not specified",
- "webAuthnPolicyPasswordlessCreateTimeout": 0,
- "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister": false,
- "webAuthnPolicyPasswordlessAcceptableAaguids": [],
- "scopeMappings": [
- {
- "clientScope": "offline_access",
- "roles": [
- "offline_access"
- ]
- }
- ],
- "clientScopeMappings": {
- "account": [
- {
- "client": "account-console",
- "roles": [
- "manage-account"
- ]
- }
- ]
- },
- "clients": [
- {
- "id": "d30c8b0b-4d20-4dd7-876a-21ee1ae2c028",
- "clientId": "account",
- "name": "${client_account}",
- "rootUrl": "${authBaseUrl}",
- "baseUrl": "/realms/openslice/account/",
- "surrogateAuthRequired": false,
- "enabled": true,
- "alwaysDisplayInConsole": false,
- "clientAuthenticatorType": "client-secret",
- "secret": "**********",
- "defaultRoles": [
- "view-profile",
- "manage-account"
- ],
- "redirectUris": [
- "/realms/openslice/account/*"
- ],
- "webOrigins": [],
- "notBefore": 0,
- "bearerOnly": false,
- "consentRequired": false,
- "standardFlowEnabled": true,
- "implicitFlowEnabled": false,
- "directAccessGrantsEnabled": false,
- "serviceAccountsEnabled": false,
- "publicClient": false,
- "frontchannelLogout": false,
- "protocol": "openid-connect",
- "attributes": {},
- "authenticationFlowBindingOverrides": {},
- "fullScopeAllowed": false,
- "nodeReRegistrationTimeout": 0,
- "defaultClientScopes": [
- "web-origins",
- "role_list",
- "roles",
- "profile",
- "email"
- ],
- "optionalClientScopes": [
- "address",
- "phone",
- "offline_access",
- "microprofile-jwt"
- ]
- },
- {
- "id": "7838e492-c9ce-4812-a9e9-629244fe1295",
- "clientId": "account-console",
- "name": "${client_account-console}",
- "rootUrl": "${authBaseUrl}",
- "baseUrl": "/realms/openslice/account/",
- "surrogateAuthRequired": false,
- "enabled": true,
- "alwaysDisplayInConsole": false,
- "clientAuthenticatorType": "client-secret",
- "secret": "**********",
- "redirectUris": [
- "/realms/openslice/account/*"
- ],
- "webOrigins": [],
- "notBefore": 0,
- "bearerOnly": false,
- "consentRequired": false,
- "standardFlowEnabled": true,
- "implicitFlowEnabled": false,
- "directAccessGrantsEnabled": false,
- "serviceAccountsEnabled": false,
- "publicClient": true,
- "frontchannelLogout": false,
- "protocol": "openid-connect",
- "attributes": {
- "pkce.code.challenge.method": "S256"
- },
- "authenticationFlowBindingOverrides": {},
- "fullScopeAllowed": false,
- "nodeReRegistrationTimeout": 0,
- "protocolMappers": [
- {
- "id": "48e276a8-68a7-45ef-929a-18d2afbab527",
- "name": "audience resolve",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-audience-resolve-mapper",
- "consentRequired": false,
- "config": {}
- }
- ],
- "defaultClientScopes": [
- "web-origins",
- "role_list",
- "roles",
- "profile",
- "email"
- ],
- "optionalClientScopes": [
- "address",
- "phone",
- "offline_access",
- "microprofile-jwt"
- ]
- },
- {
- "id": "b233eb6d-e3df-4d8d-8b09-3666f043258f",
- "clientId": "admin-cli",
- "name": "${client_admin-cli}",
- "surrogateAuthRequired": false,
- "enabled": true,
- "alwaysDisplayInConsole": false,
- "clientAuthenticatorType": "client-secret",
- "secret": "**********",
- "redirectUris": [],
- "webOrigins": [],
- "notBefore": 0,
- "bearerOnly": false,
- "consentRequired": false,
- "standardFlowEnabled": false,
- "implicitFlowEnabled": false,
- "directAccessGrantsEnabled": true,
- "serviceAccountsEnabled": false,
- "publicClient": true,
- "frontchannelLogout": false,
- "protocol": "openid-connect",
- "attributes": {},
- "authenticationFlowBindingOverrides": {},
- "fullScopeAllowed": false,
- "nodeReRegistrationTimeout": 0,
- "defaultClientScopes": [
- "web-origins",
- "role_list",
- "roles",
- "profile",
- "email"
- ],
- "optionalClientScopes": [
- "address",
- "phone",
- "offline_access",
- "microprofile-jwt"
- ]
- },
- {
- "id": "92128d63-9887-4e70-b5e2-9797756279d3",
- "clientId": "broker",
- "name": "${client_broker}",
- "surrogateAuthRequired": false,
- "enabled": true,
- "alwaysDisplayInConsole": false,
- "clientAuthenticatorType": "client-secret",
- "secret": "**********",
- "redirectUris": [],
- "webOrigins": [],
- "notBefore": 0,
- "bearerOnly": false,
- "consentRequired": false,
- "standardFlowEnabled": true,
- "implicitFlowEnabled": false,
- "directAccessGrantsEnabled": false,
- "serviceAccountsEnabled": false,
- "publicClient": false,
- "frontchannelLogout": false,
- "protocol": "openid-connect",
- "attributes": {},
- "authenticationFlowBindingOverrides": {},
- "fullScopeAllowed": false,
- "nodeReRegistrationTimeout": 0,
- "defaultClientScopes": [
- "web-origins",
- "role_list",
- "roles",
- "profile",
- "email"
- ],
- "optionalClientScopes": [
- "address",
- "phone",
- "offline_access",
- "microprofile-jwt"
- ]
- },
- {
- "id": "41a307d8-9465-463e-89ad-8c30af4ad5c0",
- "clientId": "openslice-service",
- "surrogateAuthRequired": false,
- "enabled": true,
- "alwaysDisplayInConsole": false,
- "clientAuthenticatorType": "client-secret",
- "secret": "**********",
- "redirectUris": [],
- "webOrigins": [],
- "notBefore": 0,
- "bearerOnly": false,
- "consentRequired": false,
- "standardFlowEnabled": false,
- "implicitFlowEnabled": false,
- "directAccessGrantsEnabled": true,
- "serviceAccountsEnabled": false,
- "publicClient": false,
- "frontchannelLogout": false,
- "protocol": "openid-connect",
- "attributes": {
- "saml.assertion.signature": "false",
- "saml.force.post.binding": "false",
- "saml.multivalued.roles": "false",
- "saml.encrypt": "false",
- "saml.server.signature": "false",
- "saml.server.signature.keyinfo.ext": "false",
- "exclude.session.state.from.auth.response": "false",
- "saml_force_name_id_format": "false",
- "saml.client.signature": "false",
- "tls.client.certificate.bound.access.tokens": "false",
- "saml.authnstatement": "false",
- "display.on.consent.screen": "false",
- "saml.onetimeuse.condition": "false"
- },
- "authenticationFlowBindingOverrides": {},
- "fullScopeAllowed": true,
- "nodeReRegistrationTimeout": -1,
- "protocolMappers": [
- {
- "id": "40742f38-d000-431b-a0a5-f5101a730a5a",
- "name": "Client ID",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usersessionmodel-note-mapper",
- "consentRequired": false,
- "config": {
- "user.session.note": "clientId",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "clientId",
- "jsonType.label": "String"
- }
- },
- {
- "id": "5115e3c5-8453-4c8b-a6a7-67e16f56eda9",
- "name": "Client Host",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usersessionmodel-note-mapper",
- "consentRequired": false,
- "config": {
- "user.session.note": "clientHost",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "clientHost",
- "jsonType.label": "String"
- }
- },
- {
- "id": "a194cc8d-d541-42f8-8c3c-3553568b3d2c",
- "name": "Client IP Address",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usersessionmodel-note-mapper",
- "consentRequired": false,
- "config": {
- "user.session.note": "clientAddress",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "clientAddress",
- "jsonType.label": "String"
- }
- }
- ],
- "defaultClientScopes": [
- "web-origins",
- "role_list",
- "roles",
- "profile",
- "email"
- ],
- "optionalClientScopes": [
- "address",
- "phone",
- "offline_access",
- "microprofile-jwt"
- ]
- },
- {
- "id": "40ec2a52-1033-4471-80a3-404167935e6f",
- "clientId": "osapiWebClientId",
- "rootUrl": "http://INGRESSADDR",
- "adminUrl": "http://INGRESSADDR",
- "surrogateAuthRequired": false,
- "enabled": true,
- "alwaysDisplayInConsole": false,
- "clientAuthenticatorType": "client-secret",
- "secret": "**********",
- "redirectUris": [
- "http://openslice.io/*",
- "http://localhost:13000/osapi/webjars/springfox-swagger-ui/oauth2-redirect.html",
- "http://localhost:13082/*",
- "http://localhost:13000/*",
- "http://INGRESSADDR/*",
- "http://localhost:13000/osapi/testweb/oauthresp.html"
- ],
- "webOrigins": [
- "http://localhost:13082",
- "http://INGRESSADDR",
- "http://openslice.io",
- "http://localhost:13000"
- ],
- "notBefore": 0,
- "bearerOnly": false,
- "consentRequired": false,
- "standardFlowEnabled": true,
- "implicitFlowEnabled": false,
- "directAccessGrantsEnabled": true,
- "serviceAccountsEnabled": false,
- "publicClient": true,
- "frontchannelLogout": false,
- "protocol": "openid-connect",
- "attributes": {
- "saml.assertion.signature": "false",
- "saml.force.post.binding": "false",
- "saml.multivalued.roles": "false",
- "saml.encrypt": "false",
- "saml.server.signature": "false",
- "saml.server.signature.keyinfo.ext": "false",
- "exclude.session.state.from.auth.response": "false",
- "saml_force_name_id_format": "false",
- "saml.client.signature": "false",
- "tls.client.certificate.bound.access.tokens": "false",
- "saml.authnstatement": "false",
- "display.on.consent.screen": "false",
- "saml.onetimeuse.condition": "false"
- },
- "authenticationFlowBindingOverrides": {},
- "fullScopeAllowed": true,
- "nodeReRegistrationTimeout": -1,
- "defaultClientScopes": [
- "web-origins",
- "role_list",
- "roles",
- "profile",
- "email"
- ],
- "optionalClientScopes": [
- "address",
- "phone",
- "offline_access",
- "microprofile-jwt"
- ]
- },
- {
- "id": "380ac4d6-6105-495d-873c-6e85983fcfeb",
- "clientId": "realm-management",
- "name": "${client_realm-management}",
- "surrogateAuthRequired": false,
- "enabled": true,
- "alwaysDisplayInConsole": false,
- "clientAuthenticatorType": "client-secret",
- "secret": "**********",
- "redirectUris": [],
- "webOrigins": [],
- "notBefore": 0,
- "bearerOnly": true,
- "consentRequired": false,
- "standardFlowEnabled": true,
- "implicitFlowEnabled": false,
- "directAccessGrantsEnabled": false,
- "serviceAccountsEnabled": false,
- "publicClient": false,
- "frontchannelLogout": false,
- "protocol": "openid-connect",
- "attributes": {},
- "authenticationFlowBindingOverrides": {},
- "fullScopeAllowed": false,
- "nodeReRegistrationTimeout": 0,
- "defaultClientScopes": [
- "web-origins",
- "role_list",
- "roles",
- "profile",
- "email"
- ],
- "optionalClientScopes": [
- "address",
- "phone",
- "offline_access",
- "microprofile-jwt"
- ]
- },
- {
- "id": "37a4e3c2-48be-4ee0-b50f-6e439ed2cdb2",
- "clientId": "security-admin-console",
- "name": "${client_security-admin-console}",
- "rootUrl": "${authAdminUrl}",
- "baseUrl": "/admin/openslice/console/",
- "surrogateAuthRequired": false,
- "enabled": true,
- "alwaysDisplayInConsole": false,
- "clientAuthenticatorType": "client-secret",
- "secret": "**********",
- "redirectUris": [
- "/admin/openslice/console/*"
- ],
- "webOrigins": [
- "+"
- ],
- "notBefore": 0,
- "bearerOnly": false,
- "consentRequired": false,
- "standardFlowEnabled": true,
- "implicitFlowEnabled": false,
- "directAccessGrantsEnabled": false,
- "serviceAccountsEnabled": false,
- "publicClient": true,
- "frontchannelLogout": false,
- "protocol": "openid-connect",
- "attributes": {
- "pkce.code.challenge.method": "S256"
- },
- "authenticationFlowBindingOverrides": {},
- "fullScopeAllowed": false,
- "nodeReRegistrationTimeout": 0,
- "protocolMappers": [
- {
- "id": "d7eaa5b1-22be-4ab4-86b4-2e415aeca815",
- "name": "locale",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "locale",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "locale",
- "jsonType.label": "String"
- }
- }
- ],
- "defaultClientScopes": [
- "web-origins",
- "role_list",
- "roles",
- "profile",
- "email"
- ],
- "optionalClientScopes": [
- "address",
- "phone",
- "offline_access",
- "microprofile-jwt"
- ]
- }
- ],
- "clientScopes": [
- {
- "id": "562b8e42-c857-4cf6-8241-28efb2642c4b",
- "name": "address",
- "description": "OpenID Connect built-in scope: address",
- "protocol": "openid-connect",
- "attributes": {
- "include.in.token.scope": "true",
- "display.on.consent.screen": "true",
- "consent.screen.text": "${addressScopeConsentText}"
- },
- "protocolMappers": [
- {
- "id": "5a5001cb-4bd0-480f-a7a3-c0bcba80ad3a",
- "name": "address",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-address-mapper",
- "consentRequired": false,
- "config": {
- "user.attribute.formatted": "formatted",
- "user.attribute.country": "country",
- "user.attribute.postal_code": "postal_code",
- "userinfo.token.claim": "true",
- "user.attribute.street": "street",
- "id.token.claim": "true",
- "user.attribute.region": "region",
- "access.token.claim": "true",
- "user.attribute.locality": "locality"
- }
- }
- ]
- },
- {
- "id": "f6653189-9761-4ef3-936c-38affde191d8",
- "name": "email",
- "description": "OpenID Connect built-in scope: email",
- "protocol": "openid-connect",
- "attributes": {
- "include.in.token.scope": "true",
- "display.on.consent.screen": "true",
- "consent.screen.text": "${emailScopeConsentText}"
- },
- "protocolMappers": [
- {
- "id": "767ac64d-5809-4239-b406-edcdd9050e80",
- "name": "email",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-property-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "email",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "email",
- "jsonType.label": "String"
- }
- },
- {
- "id": "e8d8398b-37ea-43bb-9196-f934ac296014",
- "name": "email verified",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-property-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "emailVerified",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "email_verified",
- "jsonType.label": "boolean"
- }
- }
- ]
- },
- {
- "id": "09a290c7-2b47-4151-9bc5-157c74aca908",
- "name": "microprofile-jwt",
- "description": "Microprofile - JWT built-in scope",
- "protocol": "openid-connect",
- "attributes": {
- "include.in.token.scope": "true",
- "display.on.consent.screen": "false"
- },
- "protocolMappers": [
- {
- "id": "f00e6912-4087-4887-a322-28e138d4b39f",
- "name": "groups",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-realm-role-mapper",
- "consentRequired": false,
- "config": {
- "multivalued": "true",
- "user.attribute": "foo",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "groups",
- "jsonType.label": "String"
- }
- },
- {
- "id": "b782ede1-459f-4e6a-bf8b-88b18a6772d6",
- "name": "upn",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-property-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "username",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "upn",
- "jsonType.label": "String"
- }
- }
- ]
- },
- {
- "id": "a12e8651-599f-4ddb-b653-d8cb5b0184d7",
- "name": "offline_access",
- "description": "OpenID Connect built-in scope: offline_access",
- "protocol": "openid-connect",
- "attributes": {
- "consent.screen.text": "${offlineAccessScopeConsentText}",
- "display.on.consent.screen": "true"
- }
- },
- {
- "id": "0f2b29e9-8093-455c-a5a9-f0c1c928942f",
- "name": "phone",
- "description": "OpenID Connect built-in scope: phone",
- "protocol": "openid-connect",
- "attributes": {
- "include.in.token.scope": "true",
- "display.on.consent.screen": "true",
- "consent.screen.text": "${phoneScopeConsentText}"
- },
- "protocolMappers": [
- {
- "id": "f4ec14ee-b067-40bf-b7c0-6dd7df5a602f",
- "name": "phone number",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "phoneNumber",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "phone_number",
- "jsonType.label": "String"
- }
- },
- {
- "id": "65664f25-c82d-433d-bf36-c08ded829901",
- "name": "phone number verified",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "phoneNumberVerified",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "phone_number_verified",
- "jsonType.label": "boolean"
- }
- }
- ]
- },
- {
- "id": "c712880d-9ef1-4ea2-86bf-810054d40b26",
- "name": "profile",
- "description": "OpenID Connect built-in scope: profile",
- "protocol": "openid-connect",
- "attributes": {
- "include.in.token.scope": "true",
- "display.on.consent.screen": "true",
- "consent.screen.text": "${profileScopeConsentText}"
- },
- "protocolMappers": [
- {
- "id": "b18c9def-9b75-4706-9936-2d4178c7b5a6",
- "name": "website",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "website",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "website",
- "jsonType.label": "String"
- }
- },
- {
- "id": "dbef3b60-3c68-4bb7-9d2a-d8a85f6f7004",
- "name": "full name",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-full-name-mapper",
- "consentRequired": false,
- "config": {
- "id.token.claim": "true",
- "access.token.claim": "true",
- "userinfo.token.claim": "true"
- }
- },
- {
- "id": "bdf07a0c-c5ca-4608-b494-b8a1ddc063c4",
- "name": "nickname",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "nickname",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "nickname",
- "jsonType.label": "String"
- }
- },
- {
- "id": "81e16a30-df1f-416b-80c3-6983101166d1",
- "name": "zoneinfo",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "zoneinfo",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "zoneinfo",
- "jsonType.label": "String"
- }
- },
- {
- "id": "b44f4f26-6d0d-406e-9009-c5d8dfdd5d16",
- "name": "username",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-property-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "username",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "preferred_username",
- "jsonType.label": "String"
- }
- },
- {
- "id": "86c5c86e-cb21-4abd-a17a-85dc63617995",
- "name": "gender",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "gender",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "gender",
- "jsonType.label": "String"
- }
- },
- {
- "id": "d78aedcd-828c-4773-ad70-22091d874bbd",
- "name": "middle name",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "middleName",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "middle_name",
- "jsonType.label": "String"
- }
- },
- {
- "id": "95e1cb5d-4f42-4b2a-8e3a-69e39055b66d",
- "name": "updated at",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "updatedAt",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "updated_at",
- "jsonType.label": "String"
- }
- },
- {
- "id": "ac157f2a-50b9-404e-bde0-965910a47d05",
- "name": "given name",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-property-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "firstName",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "given_name",
- "jsonType.label": "String"
- }
- },
- {
- "id": "4edc4427-0ebe-4825-89a8-0e8e80620f5a",
- "name": "picture",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "picture",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "picture",
- "jsonType.label": "String"
- }
- },
- {
- "id": "6ce933f3-a5b4-4676-b5db-b6425d45021d",
- "name": "family name",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-property-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "lastName",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "family_name",
- "jsonType.label": "String"
- }
- },
- {
- "id": "bd070586-ba31-42c4-b2fa-0614ad88e792",
- "name": "profile",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "profile",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "profile",
- "jsonType.label": "String"
- }
- },
- {
- "id": "397b1ae7-6c83-4a4c-a97d-75102563ae57",
- "name": "birthdate",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "birthdate",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "birthdate",
- "jsonType.label": "String"
- }
- },
- {
- "id": "a40de263-79e3-4adf-9dc6-584b1f537a06",
- "name": "locale",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-attribute-mapper",
- "consentRequired": false,
- "config": {
- "userinfo.token.claim": "true",
- "user.attribute": "locale",
- "id.token.claim": "true",
- "access.token.claim": "true",
- "claim.name": "locale",
- "jsonType.label": "String"
- }
- }
- ]
- },
- {
- "id": "6ca378b4-4e3b-4cc2-bee4-ef3479d59114",
- "name": "roles",
- "description": "OpenID Connect scope for add user roles to the access token",
- "protocol": "openid-connect",
- "attributes": {
- "include.in.token.scope": "false",
- "display.on.consent.screen": "true",
- "consent.screen.text": "${rolesScopeConsentText}"
- },
- "protocolMappers": [
- {
- "id": "57d2d578-eb49-4756-8d41-c999c2849f1a",
- "name": "client roles",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-client-role-mapper",
- "consentRequired": false,
- "config": {
- "user.attribute": "foo",
- "access.token.claim": "true",
- "claim.name": "resource_access.${client_id}.roles",
- "jsonType.label": "String",
- "multivalued": "true"
- }
- },
- {
- "id": "b322295e-fae9-4ade-9b0e-138a44732f3e",
- "name": "realm roles",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-usermodel-realm-role-mapper",
- "consentRequired": false,
- "config": {
- "user.attribute": "foo",
- "access.token.claim": "true",
- "claim.name": "realm_access.roles",
- "jsonType.label": "String",
- "multivalued": "true"
- }
- },
- {
- "id": "f24c94cb-8156-4f4e-b5f2-e7b3000f4f81",
- "name": "audience resolve",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-audience-resolve-mapper",
- "consentRequired": false,
- "config": {}
- }
- ]
- },
- {
- "id": "27c412ff-97ef-49d2-8a80-f42fd8649b7a",
- "name": "role_list",
- "description": "SAML role list",
- "protocol": "saml",
- "attributes": {
- "consent.screen.text": "${samlRoleListScopeConsentText}",
- "display.on.consent.screen": "true"
- },
- "protocolMappers": [
- {
- "id": "377da2df-94e7-43de-98f6-b3b4326cfa02",
- "name": "role list",
- "protocol": "saml",
- "protocolMapper": "saml-role-list-mapper",
- "consentRequired": false,
- "config": {
- "single": "false",
- "attribute.nameformat": "Basic",
- "attribute.name": "Role"
- }
- }
- ]
- },
- {
- "id": "39e41a56-6439-40da-9aa7-fa3b8a57c759",
- "name": "web-origins",
- "description": "OpenID Connect scope for add allowed web origins to the access token",
- "protocol": "openid-connect",
- "attributes": {
- "include.in.token.scope": "false",
- "display.on.consent.screen": "false",
- "consent.screen.text": ""
- },
- "protocolMappers": [
- {
- "id": "bb450b68-fcda-4f82-b16c-6d83cd28aa8f",
- "name": "allowed web origins",
- "protocol": "openid-connect",
- "protocolMapper": "oidc-allowed-origins-mapper",
- "consentRequired": false,
- "config": {}
- }
- ]
- }
- ],
- "defaultDefaultClientScopes": [
- "role_list",
- "web-origins",
- "roles",
- "profile",
- "email"
- ],
- "defaultOptionalClientScopes": [
- "microprofile-jwt",
- "phone",
- "address",
- "offline_access"
- ],
- "browserSecurityHeaders": {
- "contentSecurityPolicyReportOnly": "",
- "xContentTypeOptions": "nosniff",
- "xRobotsTag": "none",
- "xFrameOptions": "SAMEORIGIN",
- "contentSecurityPolicy": "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
- "xXSSProtection": "1; mode=block",
- "strictTransportSecurity": "max-age=31536000; includeSubDomains"
- },
- "smtpServer": {},
- "eventsEnabled": false,
- "eventsListeners": [
- "jboss-logging"
- ],
- "enabledEventTypes": [],
- "adminEventsEnabled": false,
- "adminEventsDetailsEnabled": false,
- "components": {
- "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy": [
- {
- "id": "34e415a5-18a4-4e32-a17c-daf41c5cbf19",
- "name": "Full Scope Disabled",
- "providerId": "scope",
- "subType": "anonymous",
- "subComponents": {},
- "config": {}
- },
- {
- "id": "7d113054-e7c7-44cb-a6d8-d257195b1364",
- "name": "Consent Required",
- "providerId": "consent-required",
- "subType": "anonymous",
- "subComponents": {},
- "config": {}
- },
- {
- "id": "388b5ffd-ea57-48bc-b7af-43b21b529e8a",
- "name": "Allowed Protocol Mapper Types",
- "providerId": "allowed-protocol-mappers",
- "subType": "anonymous",
- "subComponents": {},
- "config": {
- "allowed-protocol-mapper-types": [
- "oidc-full-name-mapper",
- "oidc-usermodel-property-mapper",
- "saml-user-property-mapper",
- "oidc-address-mapper",
- "saml-role-list-mapper",
- "oidc-sha256-pairwise-sub-mapper",
- "oidc-usermodel-attribute-mapper",
- "saml-user-attribute-mapper"
- ]
- }
- },
- {
- "id": "70080b90-b144-421e-9ec4-4106a6181d88",
- "name": "Max Clients Limit",
- "providerId": "max-clients",
- "subType": "anonymous",
- "subComponents": {},
- "config": {
- "max-clients": [
- "200"
- ]
- }
- },
- {
- "id": "d556fcc1-038a-4ed2-992b-5803e4c599be",
- "name": "Allowed Client Scopes",
- "providerId": "allowed-client-templates",
- "subType": "authenticated",
- "subComponents": {},
- "config": {
- "allow-default-scopes": [
- "true"
- ]
- }
- },
- {
- "id": "67803167-d874-41b2-970b-b2de89d0250b",
- "name": "Allowed Protocol Mapper Types",
- "providerId": "allowed-protocol-mappers",
- "subType": "authenticated",
- "subComponents": {},
- "config": {
- "allowed-protocol-mapper-types": [
- "oidc-full-name-mapper",
- "saml-role-list-mapper",
- "oidc-sha256-pairwise-sub-mapper",
- "oidc-address-mapper",
- "oidc-usermodel-attribute-mapper",
- "oidc-usermodel-property-mapper",
- "saml-user-property-mapper",
- "saml-user-attribute-mapper"
- ]
- }
- },
- {
- "id": "a4381728-f174-492f-9404-c8ecaddc8bd9",
- "name": "Allowed Client Scopes",
- "providerId": "allowed-client-templates",
- "subType": "anonymous",
- "subComponents": {},
- "config": {
- "allow-default-scopes": [
- "true"
- ]
- }
- },
- {
- "id": "c60d614f-36b1-4a0f-b359-f2c4c7e7a2d5",
- "name": "Trusted Hosts",
- "providerId": "trusted-hosts",
- "subType": "anonymous",
- "subComponents": {},
- "config": {
- "host-sending-registration-request-must-match": [
- "true"
- ],
- "client-uris-must-match": [
- "true"
- ]
- }
- }
- ],
- "org.keycloak.keys.KeyProvider": [
- {
- "id": "472544bd-20bd-467d-8d5c-f71468017b90",
- "name": "aes-generated",
- "providerId": "aes-generated",
- "subComponents": {},
- "config": {
- "priority": [
- "100"
- ]
- }
- },
- {
- "id": "56cdedf5-b827-4ca7-be55-8e12df78b974",
- "name": "rsa-generated",
- "providerId": "rsa-generated",
- "subComponents": {},
- "config": {
- "priority": [
- "100"
- ]
- }
- },
- {
- "id": "9d0c7f22-b432-4223-baf1-83dbfbca38db",
- "name": "hmac-generated",
- "providerId": "hmac-generated",
- "subComponents": {},
- "config": {
- "priority": [
- "100"
- ],
- "algorithm": [
- "HS256"
- ]
- }
- }
- ]
- },
- "internationalizationEnabled": false,
- "supportedLocales": [],
- "authenticationFlows": [
- {
- "id": "8357d622-c8b1-428d-b134-3315622f398d",
- "alias": "Account verification options",
- "description": "Method with which to verity the existing account",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "idp-email-verification",
- "requirement": "ALTERNATIVE",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "ALTERNATIVE",
- "priority": 20,
- "flowAlias": "Verify Existing Account by Re-authentication",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "f373c5c3-0467-47c7-8aa4-f6fe1acfe380",
- "alias": "Authentication Options",
- "description": "Authentication options.",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "basic-auth",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "basic-auth-otp",
- "requirement": "DISABLED",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "auth-spnego",
- "requirement": "DISABLED",
- "priority": 30,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- }
- ]
- },
- {
- "id": "1647396e-5d80-47c0-9780-1b0601d81f55",
- "alias": "Browser - Conditional OTP",
- "description": "Flow to determine if the OTP is required for the authentication",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "conditional-user-configured",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "auth-otp-form",
- "requirement": "REQUIRED",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- }
- ]
- },
- {
- "id": "4b75ca24-90fb-46da-ba2b-ba11e96b9cee",
- "alias": "Direct Grant - Conditional OTP",
- "description": "Flow to determine if the OTP is required for the authentication",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "conditional-user-configured",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "direct-grant-validate-otp",
- "requirement": "REQUIRED",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- }
- ]
- },
- {
- "id": "df72819f-b96b-47b9-88f5-bf0033798b40",
- "alias": "First broker login - Conditional OTP",
- "description": "Flow to determine if the OTP is required for the authentication",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "conditional-user-configured",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "auth-otp-form",
- "requirement": "REQUIRED",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- }
- ]
- },
- {
- "id": "241c2432-5771-4a42-90f3-4198b6e9fd62",
- "alias": "Handle Existing Account",
- "description": "Handle what to do if there is existing account with same email/username like authenticated identity provider",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "idp-confirm-link",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "REQUIRED",
- "priority": 20,
- "flowAlias": "Account verification options",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "fc2f23d5-003a-4e2a-947b-8f426c52694c",
- "alias": "Reset - Conditional OTP",
- "description": "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "conditional-user-configured",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "reset-otp",
- "requirement": "REQUIRED",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- }
- ]
- },
- {
- "id": "c152dd74-8690-4c1f-b83f-2da74289cc1e",
- "alias": "User creation or linking",
- "description": "Flow for the existing/non-existing user alternatives",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticatorConfig": "create unique user config",
- "authenticator": "idp-create-user-if-unique",
- "requirement": "ALTERNATIVE",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "ALTERNATIVE",
- "priority": 20,
- "flowAlias": "Handle Existing Account",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "db2da225-e43a-42ad-977f-508895169efa",
- "alias": "Verify Existing Account by Re-authentication",
- "description": "Reauthentication of existing account",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "idp-username-password-form",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "CONDITIONAL",
- "priority": 20,
- "flowAlias": "First broker login - Conditional OTP",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "6bda8474-8636-4bff-9e86-b95552f5944a",
- "alias": "browser",
- "description": "browser based authentication",
- "providerId": "basic-flow",
- "topLevel": true,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "auth-cookie",
- "requirement": "ALTERNATIVE",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "auth-spnego",
- "requirement": "DISABLED",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "identity-provider-redirector",
- "requirement": "ALTERNATIVE",
- "priority": 25,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "ALTERNATIVE",
- "priority": 30,
- "flowAlias": "forms",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "2dcccc92-8c58-4b18-9773-a991977fc829",
- "alias": "clients",
- "description": "Base authentication for clients",
- "providerId": "client-flow",
- "topLevel": true,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "client-secret",
- "requirement": "ALTERNATIVE",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "client-jwt",
- "requirement": "ALTERNATIVE",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "client-secret-jwt",
- "requirement": "ALTERNATIVE",
- "priority": 30,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "client-x509",
- "requirement": "ALTERNATIVE",
- "priority": 40,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- }
- ]
- },
- {
- "id": "34a83f8f-e241-412e-93c5-398495bc8f2a",
- "alias": "direct grant",
- "description": "OpenID Connect Resource Owner Grant",
- "providerId": "basic-flow",
- "topLevel": true,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "direct-grant-validate-username",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "direct-grant-validate-password",
- "requirement": "REQUIRED",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "CONDITIONAL",
- "priority": 30,
- "flowAlias": "Direct Grant - Conditional OTP",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "d3849e68-145f-44ac-a360-d16930a6eb09",
- "alias": "docker auth",
- "description": "Used by Docker clients to authenticate against the IDP",
- "providerId": "basic-flow",
- "topLevel": true,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "docker-http-basic-authenticator",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- }
- ]
- },
- {
- "id": "30ed0330-9d8a-4992-aa0c-56313cf60790",
- "alias": "first broker login",
- "description": "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
- "providerId": "basic-flow",
- "topLevel": true,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticatorConfig": "review profile config",
- "authenticator": "idp-review-profile",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "REQUIRED",
- "priority": 20,
- "flowAlias": "User creation or linking",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "2521a30f-27ba-441e-821b-8515f63380c9",
- "alias": "forms",
- "description": "Username, password, otp and other auth forms.",
- "providerId": "basic-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "auth-username-password-form",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "CONDITIONAL",
- "priority": 20,
- "flowAlias": "Browser - Conditional OTP",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "3f9984f5-a163-4b57-a947-1a7b72240dec",
- "alias": "http challenge",
- "description": "An authentication flow based on challenge-response HTTP Authentication Schemes",
- "providerId": "basic-flow",
- "topLevel": true,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "no-cookie-redirect",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "REQUIRED",
- "priority": 20,
- "flowAlias": "Authentication Options",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "273c03f3-8fc2-4e81-a9f7-fbf72158e129",
- "alias": "registration",
- "description": "registration flow",
- "providerId": "basic-flow",
- "topLevel": true,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "registration-page-form",
- "requirement": "REQUIRED",
- "priority": 10,
- "flowAlias": "registration form",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "07afd274-0910-43d8-b627-422d4d9e2ed8",
- "alias": "registration form",
- "description": "registration form",
- "providerId": "form-flow",
- "topLevel": false,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "registration-user-creation",
- "requirement": "REQUIRED",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "registration-profile-action",
- "requirement": "REQUIRED",
- "priority": 40,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "registration-password-action",
- "requirement": "REQUIRED",
- "priority": 50,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "registration-recaptcha-action",
- "requirement": "DISABLED",
- "priority": 60,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- }
- ]
- },
- {
- "id": "7b72931e-ad78-41fd-add0-1e622e208d55",
- "alias": "reset credentials",
- "description": "Reset credentials for a user if they forgot their password or something",
- "providerId": "basic-flow",
- "topLevel": true,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "reset-credentials-choose-user",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "reset-credential-email",
- "requirement": "REQUIRED",
- "priority": 20,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "authenticator": "reset-password",
- "requirement": "REQUIRED",
- "priority": 30,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- },
- {
- "requirement": "CONDITIONAL",
- "priority": 40,
- "flowAlias": "Reset - Conditional OTP",
- "userSetupAllowed": false,
- "autheticatorFlow": true
- }
- ]
- },
- {
- "id": "2e95fbe8-90de-4ad0-af7c-b8a598456a19",
- "alias": "saml ecp",
- "description": "SAML ECP Profile Authentication Flow",
- "providerId": "basic-flow",
- "topLevel": true,
- "builtIn": true,
- "authenticationExecutions": [
- {
- "authenticator": "http-basic-authenticator",
- "requirement": "REQUIRED",
- "priority": 10,
- "userSetupAllowed": false,
- "autheticatorFlow": false
- }
- ]
- }
- ],
- "authenticatorConfig": [
- {
- "id": "0c8464aa-a2ea-479e-9f21-e3b4ba670b46",
- "alias": "create unique user config",
- "config": {
- "require.password.update.after.registration": "false"
- }
- },
- {
- "id": "060e864c-a566-4551-ba54-2c280aafda02",
- "alias": "review profile config",
- "config": {
- "update.profile.on.first.login": "missing"
- }
- }
- ],
- "requiredActions": [
- {
- "alias": "CONFIGURE_TOTP",
- "name": "Configure OTP",
- "providerId": "CONFIGURE_TOTP",
- "enabled": true,
- "defaultAction": false,
- "priority": 10,
- "config": {}
- },
- {
- "alias": "terms_and_conditions",
- "name": "Terms and Conditions",
- "providerId": "terms_and_conditions",
- "enabled": false,
- "defaultAction": false,
- "priority": 20,
- "config": {}
- },
- {
- "alias": "UPDATE_PASSWORD",
- "name": "Update Password",
- "providerId": "UPDATE_PASSWORD",
- "enabled": true,
- "defaultAction": false,
- "priority": 30,
- "config": {}
- },
- {
- "alias": "UPDATE_PROFILE",
- "name": "Update Profile",
- "providerId": "UPDATE_PROFILE",
- "enabled": true,
- "defaultAction": false,
- "priority": 40,
- "config": {}
- },
- {
- "alias": "VERIFY_EMAIL",
- "name": "Verify Email",
- "providerId": "VERIFY_EMAIL",
- "enabled": true,
- "defaultAction": false,
- "priority": 50,
- "config": {}
- },
- {
- "alias": "update_user_locale",
- "name": "Update User Locale",
- "providerId": "update_user_locale",
- "enabled": true,
- "defaultAction": false,
- "priority": 1000,
- "config": {}
- }
- ],
- "browserFlow": "browser",
- "registrationFlow": "registration",
- "directGrantFlow": "direct grant",
- "resetCredentialsFlow": "reset credentials",
- "clientAuthenticationFlow": "clients",
- "dockerAuthenticationFlow": "docker auth",
- "attributes": {},
- "keycloakVersion": "9.0.2",
- "userManagedAccessAllowed": false
-}
diff --git a/kubernetes/template/tmfweb-config-nginx.yaml b/kubernetes/template/tmfweb-config-nginx.yaml
deleted file mode 100644
index 04de3cd2e43ba639939edbd605a57af6ac8c6d00..0000000000000000000000000000000000000000
--- a/kubernetes/template/tmfweb-config-nginx.yaml
+++ /dev/null
@@ -1,31 +0,0 @@
-kind: ConfigMap
-apiVersion: v1
-metadata:
- name: tmfweb-config-nginx
- namespace: openslice
-data:
- default.conf: |+
- # Expires map
- map $sent_http_content_type $expires {
- default off;
- text/html epoch;
- text/css max;
- application/json max;
- application/javascript max;
- ~image/ max;
- }
-
- server {
- listen 80;
- include /etc/nginx/mime.types;
-
- server_name INGRESSADDR;
- location / {
- root /usr/share/nginx/html/services;
- index index.html index.htm;
- try_files $uri $uri/ /index.html =404;
- }
-
- expires $expires;
- gzip on;
- }
diff --git a/kubernetes/template/tmfweb-config.yaml b/kubernetes/template/tmfweb-config.yaml
deleted file mode 100644
index 3d7442823c785ca893c30030c894c7dd0ef2c1f8..0000000000000000000000000000000000000000
--- a/kubernetes/template/tmfweb-config.yaml
+++ /dev/null
@@ -1,47 +0,0 @@
-kind: ConfigMap
-apiVersion: v1
-metadata:
- name: tmfweb-config
- namespace: openslice
-data:
- config.prod.json: |+
- {
- "TITLE": "Openslice demo",
- "PORTALVERSION":"2023-Q3 1.2.0-SNAPSHOT",
- "WIKI": "https://openslice.readthedocs.io/en/stable/",
- "BUGZILLA": "{BASEURL}/bugzilla/",
- "STATUS": "http://INGRESSADDR/",
- "WEBURL": "{BASEURL}",
- "PORTAL_REPO_APIURL": "{BASEURL}/osapi",
- "ASSURANCE_SERVICE_MGMT_APIURL": "{BASEURL}/oas-api",
- "APITMFURL": "{BASEURL}/tmf-api",
- "OAUTH_CONFIG" : {
- "issuer": "{BASEURL}/auth/realms/openslice",
- "loginUrl": "{BASEURL}/auth/realms/openslice/protocol/openid-connect/auth",
- "tokenEndpoint": "{BASEURL}/auth/realms/openslice/protocol/openid-connect/token",
- "redirectUri": "{BASEURL}/redirect",
- "logoutUrl": "{BASEURL}/auth/realms/openslice/protocol/openid-connect/logout",
- "postLogoutRedirectUri": "{BASEURL}",
-
- "responseType": "code",
- "oidc": false,
- "clientId": "osapiWebClientId",
- "dummyClientSecret": "secret",
-
- "requireHttps": false,
- "useHttpBasicAuth": true,
- "clearHashAfterLogin": false,
-
- "showDebugInformation": true
- }
- }
- config.theming.json: |+
- {
- "THEME_ID":"default",
- "DEPLOYMENT_LOGO_PATH":"assets/images/logo_clear.png",
- "DEFAULT_SERVICE_LOGO_PATH":"assets/images/logo_icon_original.png",
- "FAVICON_PATH":"favicon.ico",
- "WHO_WE_ARE_HTML":"<address class='font-weight-light'><span class='font-weight-bold'>openslice.io project</span> | <a href='http://openslice.io/' class='text-white'>openslice.io</a><br>openslice.io an opensource OSS</address><address class='font-weight-light'><span class='font-weight-bold'>Openslice demo</span> | <a href='http://portal.openslice.io' class='text-white'>http://portal.openslice.io</a><br>A portal that allows 5G experimenters to deploy experiment descriptors towards the infrastructure.</address><address class='font-weight-light'><span class='font-weight-bold'>Openslice demo wiki</span> | <a href='https://openslice.readthedocs.io/en/stable/' class='text-white'>https://openslice.readthedocs.io/en/stable/</a><br>A wiki containing project documentation.</address><address class='font-weight-light'><span class='font-weight-bold'>Openslice demo Report Issues</span> | <a href='http://portal.openslice.io/bugzilla/' class='text-white'>http://portal.openslice.io/bugzilla/</a><br>Our issue tracking system.</address>",
- "CONNECT_WITH_US_HTML":"<div class='col-xs-12 col-sm-6 col-md-3'><div><a href='https://twitter.com/OpensliceOSS' class='font-weight-light text-white'><i class='fab fa-twitter mr-2'></i>Twitter</a></div></div><div class='col-xs-12 col-sm-6 col-md-3'><div><a href='https://openslice.slack.com/' class='font-weight-light text-white'><i class='fab fa-slack mr-2'></i>Slack</a></div></div>",
- "FOOTER_HTML":"<div class='row align-items-center'><div class='col-md-2'><img src='assets/images/eu-commission.png' /></div><div class='col-md-10 font-weight-light'>openslice.io has received funding from<div class='font-weight-light'>5GinFIRE | https://5ginfire.eu/ project from the European Horizon 2020 Programme for research, technological development and demonstration under grant agreement number 732497.</div><div class='font-weight-light'>5G-VINNI project | https://5g-vinni.eu/ 5G-VINNI project has received funding from the European Horizon 2020 Programme for research, technological development and demonstration under grant agreement number 815279</div><div class='font-weight-light'>Openslice demo running openslice.io version 1.1.0-SNAPSHOT| <a href='https://openslice.io/data-protection-declaration/' class='font-weight-light'>Data Protection Declaration</a> | © 2019-2021 on behalf of <a target='_blank' href='http://openslice.io/' title='openslice.io' class='font-weight-light'>openslice.io</a></div></div></div>"
- }
diff --git a/kubernetes/template/tmfweb.yaml b/kubernetes/template/tmfweb.yaml
deleted file mode 100644
index a07b188fd8caf794695234f2cd8c8cfe29d935fa..0000000000000000000000000000000000000000
--- a/kubernetes/template/tmfweb.yaml
+++ /dev/null
@@ -1,53 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: tmfweb
- name: tmfweb
-spec:
- replicas: 1
- selector:
- matchLabels:
- org.etsi.osl.service: tmfweb
- strategy:
- type: Recreate
- template:
- metadata:
- labels:
- org.etsi.osl.service: tmfweb
- spec:
- containers:
- - name: openslice-tmfweb
- image: labs.etsi.org:5050/osl/code/org.etsi.osl.tmf.web:develop
- ports:
- - containerPort: 80
- volumeMounts:
- - name: "tmfweb-configuration"
- readOnly: true
- mountPath: "/usr/share/nginx/html/services/assets/config"
- - name: "tmfweb-configuration-nginx"
- readOnly: true
- mountPath: "/etc/nginx/conf.d"
- volumes:
- - name: "tmfweb-configuration"
- configMap:
- name: tmfweb-config
- - name: "tmfweb-configuration-nginx"
- configMap:
- name: tmfweb-config-nginx
- restartPolicy: Always
----
-apiVersion: v1
-kind: Service
-metadata:
- namespace: openslice
- labels:
- org.etsi.osl.service: tmfweb
- name: tmfweb
-spec:
- ports:
- - name: "tmwebport"
- port: 80
- selector:
- org.etsi.osl.service: tmfweb