fix: replace bitnami commercial images with free official images (#2477)

misba7 · web-flow · commit 604ddd21ad29 · 2025-11-27T11:01:44.000+02:00
Signed-off-by: Amro Misbah &lt;amromisba7@gmail.com&gt;
diff --git a/automation/mysql.yaml b/automation/mysql.yaml
@@ -0,0 +1,70 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mysql-secret
+  namespace: gluu
+type: Opaque
+stringData:
+  root-password: Test1234#
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: mysql
+  namespace: gluu
+spec:
+  ports:
+  - port: 3306
+  selector:
+    app: mysql
+  clusterIP: None
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mysql
+  namespace: gluu
+spec:
+  selector:
+    matchLabels:
+      app: mysql
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: mysql
+    spec:
+      containers:
+      - image: mysql:8.0
+        name: mysql
+        env:
+        - name: MYSQL_ROOT_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: mysql-secret
+              key: root-password
+        - name: MYSQL_DATABASE
+          value: gluu
+        ports:
+        - containerPort: 3306
+          name: mysql
+        volumeMounts:
+        - name: mysql-persistent-storage
+          mountPath: /var/lib/mysql
+      volumes:
+      - name: mysql-persistent-storage
+        persistentVolumeClaim:
+          claimName: mysql-pv-claim
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: mysql-pv-claim
+  namespace: gluu
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi
diff --git a/automation/pgsql.yaml b/automation/pgsql.yaml
@@ -0,0 +1,72 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: postgresql-secret
+  namespace: gluu
+type: Opaque
+stringData:
+  postgresql-password: Test1234#
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgresql
+  namespace: gluu
+spec:
+  ports:
+  - port: 5432
+  selector:
+    app: postgresql
+  clusterIP: None
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: postgresql
+  namespace: gluu
+spec:
+  selector:
+    matchLabels:
+      app: postgresql
+  strategy:
+    type: Recreate
+  template:
+    metadata:
+      labels:
+        app: postgresql
+    spec:
+      containers:
+      - image: postgres:16
+        name: postgresql
+        env:
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: postgresql-secret
+              key: postgresql-password
+        - name: POSTGRES_DB
+          value: gluu
+        - name: PGDATA
+          value: /var/lib/postgresql/data/pgdata
+        ports:
+        - containerPort: 5432
+          name: postgresql
+        volumeMounts:
+        - name: postgresql-persistent-storage
+          mountPath: /var/lib/postgresql/data
+      volumes:
+      - name: postgresql-persistent-storage
+        persistentVolumeClaim:
+          claimName: postgresql-pv-claim
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: postgresql-pv-claim
+  namespace: gluu
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi
diff --git a/automation/startflexdemo.sh b/automation/startflexdemo.sh
@@ -62,10 +62,9 @@ if [[ $INSTALL_ISTIO == "true" ]]; then
   cd ..
 fi
 
-PERSISTENCE_TYPE="sql"
 if [[ $GLUU_PERSISTENCE == "MYSQL" ]]; then
-  sudo microk8s.kubectl get po --kubeconfig="$KUBECONFIG"
-  sudo helm install my-release --set auth.rootPassword=Test1234#,auth.database=gluu -n gluu oci://registry-1.docker.io/bitnamicharts/mysql --kubeconfig="$KUBECONFIG"
+  sudo wget https://raw.githubusercontent.com/GluuFederation/flex/nightly/automation/mysql.yaml
+  sudo microk8s.kubectl apply -f mysql.yaml --kubeconfig="$KUBECONFIG"
   cat << EOF > override.yaml
 config:
   countryCode: US
@@ -76,15 +75,14 @@ config:
     cnSqlDbName: gluu
     cnSqlDbPort: 3306
     cnSqlDbDialect: mysql
-    cnSqlDbHost: my-release-mysql.gluu.svc
+    cnSqlDbHost: mysql.gluu.svc
     cnSqlDbUser: root
     cnSqlDbTimezone: UTC
     cnSqldbUserPassword: Test1234#
 EOF
-fi
-if [[ $GLUU_PERSISTENCE == "PGSQL" ]]; then
-  sudo microk8s.kubectl get po --kubeconfig="$KUBECONFIG"
-  sudo helm install my-release --set auth.postgresPassword=Test1234#,auth.database=gluu -n gluu oci://registry-1.docker.io/bitnamicharts/postgresql --kubeconfig="$KUBECONFIG"
+else
+  sudo wget https://raw.githubusercontent.com/GluuFederation/flex/nightly/automation/pgsql.yaml
+  sudo microk8s.kubectl apply -f pgsql.yaml --kubeconfig="$KUBECONFIG"
   cat << EOF > override.yaml
 config:
   countryCode: US
@@ -95,7 +93,7 @@ config:
     cnSqlDbName: gluu
     cnSqlDbPort: 5432
     cnSqlDbDialect: pgsql
-    cnSqlDbHost: my-release-postgresql.gluu.svc
+    cnSqlDbHost: postgresql.gluu.svc
     cnSqlDbUser: postgres
     cnSqlDbTimezone: UTC
     cnSqldbUserPassword: Test1234#
@@ -108,7 +106,6 @@ global:
     testEnviroment: true
   istio:
     enable: $INSTALL_ISTIO
-  cnPersistenceType: $PERSISTENCE_TYPE
   admin-ui:
     ingress:
       adminUiEnabled: true
diff --git a/docs/admin/recipes/getting-started-rancher.md b/docs/admin/recipes/getting-started-rancher.md
@@ -167,18 +167,12 @@ kubectl get secret cn -o json -n <namespace>
     To install a quick setup with `PostgreSQL` as the backend, you need to provide the connection parameters of a fresh setup. 
     For a test setup, you can follow the below instructions:
 
-    - `Apps` --> `Charts` and search for `Postgres`.
-    - Click on `Install` on the right side of the window.
-    - Create a new namespace called `postgres` and hit `Next`.
-    - You should be on the `Edit YAML` page. Modify the below keys as desired. These values will be inputted in the installation of `Gluu Flex`
-
-    | Key             |
-    |-----------------|
-    | `auth.database` |
-    | `auth.username` |
-    | `auth.password` |
-
-    - Click `Install` at the bottom right of the page.
+    - Open a kubectl shell from the top right navigation menu `>_`. 
+    - Run:
+        ```bash
+        wget https://raw.githubusercontent.com/GluuFederation/flex/nightly/automation/pgsql.yaml 
+        kubectl apply -f pgsql.yaml #adjust values as preferred
+        ```
 
     ###  Install MySQL database
     !!! Note
@@ -189,21 +183,11 @@ kubectl get secret cn -o json -n <namespace>
 
     - Open a kubectl shell from the top right navigation menu `>_`. 
     - Run:
+        ```bash
+        wget https://raw.githubusercontent.com/GluuFederation/flex/nightly/automation/mysql.yaml 
+        kubectl apply -f mysql.yaml #adjust values as preferred
         ```
-        helm repo add bitnami https://charts.bitnami.com/bitnami
-        helm repo update
-        kubectl create ns gluu #Create gluu namespace
-        ```
-    - Pass in a custom password for the database. Here we used `Test1234#`. The admin user will be left as `root`. Notice we are installing in the `gluu` namespace. Run 
-
-        ```
-        helm install my-release --set auth.rootPassword=Test1234#,auth.database=jans bitnami/mysql -n gluu
-        ```
-
-    ### Successful Installation    
-    After the installation is successful, you should have a `Statefulset` active in the rancher UI as shown in the screenshot below.
 
-    <img width="1504" alt="Screenshot 2022-07-05 at 14 54 26" src="https://user-images.githubusercontent.com/17182751/177326700-9215436c-f1c2-467f-94ff-601ff7fbdbfb.png">
 
 
 2. Install [Nginx-Ingress](https://github.com/kubernetes/ingress-nginx), if you are not using Istio ingress
@@ -227,7 +211,7 @@ kubectl get secret cn -o json -n <namespace>
     - Change the namespace from `default` to `gluu`, then click on `Next`.
     - Scroll through the sections to get familiar with the options. For minimal setup follow with the next instructions.
     - Add `License SSA`. Before initiating the setup, please obtain an [SSA](https://docs.gluu.org/vreplace-flex-version/install/agama/prerequisites/#obtaining-an-ssa) for Flex trial, after which you will issued a JWT.
-    - Click on the `Persistence` section. Change `SQL database host uri` to `postgresql.postgres.svc.cluster.local` in the case of `PostgreSQL` or `my-release-mysql.gluu.svc.cluster.local` in the case of `MySQL`. Also set `SQL database username`,`SQL password`, and `SQL database name` to the values you used during the database installation.
+    - Click on the `Persistence` section. Change `SQL database host uri` to `postgresql.gluu.svc` in the case of `PostgreSQL` or `mysql.gluu.svc` in the case of `MySQL`. Also set `SQL database username`,`SQL password`, and `SQL database name` to the values you used during the database installation.
     - To enable Casa and the Admin UI, navigate to the `Optional Services` section and check the `Enable casa` and `boolean flag to enable admin UI` boxes. You can also enable different services like `Client API` and `Jackrabbit`.
     - Click on the  section named `Ingress` and enable all the endpoints. You might add LB IP or address if you don't have `FQDN` for `Gluu`. 
     - To pass your `FQDN` or `Domain` that is intended to serve the Gluu Flex IDP, head to the `Configuration` section:
diff --git a/docs/includes/cn-system-requirements.md b/docs/includes/cn-system-requirements.md
@@ -21,5 +21,6 @@ Use the listing below for a detailed estimation of the minimum required resource
 | link              | 0.5      | 1GB   | N/A        | 64 Bit         | No                                 |
 | saml              | 0.5      | 1GB   | N/A        | 64 Bit         | No                                 |
 | kc-scheduler - job| 0.3      | 0.3GB | N/A        | 64 Bit         | No                                 |
+| cleanup - job     | 0.3      | 0.3GB | N/A        | 64 Bit         | Yes                                |
 
-Releases of images are in style 1.0.0-beta.0, 1.0.0-0
+Releases of images are in style 0.0.0-nightly or x.y-z-1
diff --git a/docs/install/helm-install/amazon-eks.md b/docs/install/helm-install/amazon-eks.md
@@ -68,8 +68,6 @@ tags:
         Add the following yaml snippet to your `override.yaml` file:
 
         ```yaml
-        global:
-            isFqdnRegistered: false
         config:
             configmap:
                 lbAddr: http:// #Add LB address from previous command
@@ -81,7 +79,6 @@ tags:
 
         ```yaml
         global:
-            isFqdnRegistered: true
             fqdn: demoexample.gluu.org #CHANGE-THIS to the FQDN used for Gluu
         config:
             configmap:
@@ -102,24 +99,22 @@ tags:
 
         In a production environment, a production grade PostgreSQL server should be used such as `Amazon RDS`
 
-        For testing purposes, you can deploy it on the EKS cluster using the following command:
+        For testing purposes, you can deploy it on the EKS cluster using the following commands:
 
-        ```
-        helm install my-release --set auth.postgresPassword=Test1234#,auth.database=gluu -n gluu oci://registry-1.docker.io/bitnamicharts/postgresql
+        ```bash
+        wget https://raw.githubusercontent.com/GluuFederation/flex/vreplace-flex-version/automation/pgsql.yaml
+        kubectl apply -f pgsql.yaml
         ```
 
         Add the following yaml snippet to your `override.yaml` file:
         
         ```yaml
-        
-        global:
-          cnPersistenceType: sql
         config:
           configmap:
             cnSqlDbName: gluu
             cnSqlDbPort: 5432
             cnSqlDbDialect: pgsql
-            cnSqlDbHost: my-release-postgresql.gluu.svc
+            cnSqlDbHost: postgresql.gluu.svc
             cnSqlDbUser: postgres
             cnSqlDbTimezone: UTC
             cnSqldbUserPassword: Test1234#
@@ -129,24 +124,22 @@ tags:
 
         In a production environment, a production grade MySQL server should be used such as `Amazon RDS`
 
-        For testing purposes, you can deploy it on the EKS cluster using the following command:
+        For testing purposes, you can deploy it on the EKS cluster using the following commands:
 
-        ```
-        helm install my-release --set auth.rootPassword=Test1234#,auth.database=gluu -n gluu oci://registry-1.docker.io/bitnamicharts/mysql
+        ```bash
+        wget https://raw.githubusercontent.com/GluuFederation/flex/vreplace-flex-version/automation/mysql.yaml
+        kubectl apply -f mysql.yaml
         ```
 
         Add the following yaml snippet to your `override.yaml` file:
         
         ```yaml
-        
-        global:
-          cnPersistenceType: sql
         config:
           configmap:
             cnSqlDbName: gluu
             cnSqlDbPort: 3306
             cnSqlDbDialect: mysql
-            cnSqlDbHost: my-release-mysql.gluu.svc
+            cnSqlDbHost: mysql.gluu.svc
             cnSqlDbUser: root
             cnSqlDbTimezone: UTC
             cnSqldbUserPassword: Test1234#
@@ -156,8 +149,6 @@ tags:
 
         ```yaml
         global:
-          cnPersistenceType: sql
-          isFqdnRegistered: true
           fqdn: demoexample.gluu.org #CHANGE-THIS to the FQDN used for Gluu
         nginx-ingress:
           ingress:
@@ -174,7 +165,7 @@ tags:
             cnSqlDbName: gluu
             cnSqlDbPort: 3306
             cnSqlDbDialect: mysql
-            cnSqlDbHost: my-release-mysql.gluu.svc
+            cnSqlDbHost: mysql.gluu.svc
             cnSqlDbUser: root
             cnSqlDbTimezone: UTC
             cnSqldbUserPassword: Test1234#
diff --git a/docs/install/helm-install/google-gke.md b/docs/install/helm-install/google-gke.md
diff --git a/docs/install/helm-install/local.md b/docs/install/helm-install/local.md
diff --git a/docs/install/helm-install/microsoft-azure.md b/docs/install/helm-install/microsoft-azure.md
