Skip to content

Commit 02501c3

Browse files
maryarmdistro-ci[bot]eamonnmoloney
authored
feat: introduce authenticationRefreshInterval config parameter (#3958)
Co-authored-by: distro-ci[bot] <122795778+distro-ci[bot]@users.noreply.github.com> Co-authored-by: Eamonn Moloney <[email protected]>
1 parent 9a4621c commit 02501c3

13 files changed

+38
-20
lines changed

‎charts/camunda-platform-8.8/README.md‎

Lines changed: 21 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -225,9 +225,9 @@ Camunda 8 Helm chart has a dependency on the [Elasticsearch 8 Helm Chart](https:
225225
> The default setup of the Elasticsearch 8 part of Camunda 8 uses nodes that have all roles (master, data, coordinating, and ingest).
226226
> For high-demand deployments, it's recommended to deploy the Elasticsearch master-eligible nodes as master-only nodes.
227227

228-
| Section | Parameter | Description | Default |
229-
|-|-|-|-|
230-
| `elasticsearch`| `enabled` | If true, enables Elasticsearch deployment as part of the Camunda Helm chart | `true` |
228+
| Section | Parameter | Description | Default |
229+
| --------------- | --------- | --------------------------------------------------------------------------- | ------- |
230+
| `elasticsearch` | `enabled` | If true, enables Elasticsearch deployment as part of the Camunda Helm chart | `true` |
231231

232232
**Example:**
233233

@@ -250,9 +250,9 @@ Since Keycloak is a dependency for Identity, all variables related to Keycloak c
250250
[bitnami/keycloak/values.yaml](https://github.com/bitnami/charts/blob/main/bitnami/keycloak/values.yaml)
251251
and can be set under `identityKeycloak`.
252252

253-
| Section | Parameter | Description | Default |
254-
|-|-|-|-|
255-
| `identityKeycloak`| `enabled` | If true, enables Keycloak chart deployment as part of the Camunda Helm chart | `true` |
253+
| Section | Parameter | Description | Default |
254+
| ------------------ | --------- | ---------------------------------------------------------------------------- | ------- |
255+
| `identityKeycloak` | `enabled` | If true, enables Keycloak chart deployment as part of the Camunda Helm chart | `true` |
256256

257257
**Example:**
258258

@@ -274,22 +274,22 @@ with custom values files, then you will need to add this to your own values file
274274
identity:
275275
keycloak:
276276
extraVolumes:
277-
- name: camunda-theme
278-
emptyDir:
279-
sizeLimit: 10Mi
280-
initContainers:
281-
- name: copy-camunda-theme
282-
image: >-
283-
{{- $identityImageParams := (dict "base" .Values.global "overlay" .Values.global.identity) -}}
284-
{{- include "camundaPlatform.imageByParams" $identityImageParams }}
285-
imagePullPolicy: "{{ .Values.global.image.pullPolicy }}"
286-
command: ["sh", "-c", "cp -a /app/keycloak-theme/* /mnt"]
287-
volumeMounts:
288277
- name: camunda-theme
289-
mountPath: /mnt
278+
emptyDir:
279+
sizeLimit: 10Mi
280+
initContainers:
281+
- name: copy-camunda-theme
282+
image: >-
283+
{{- $identityImageParams := (dict "base" .Values.global "overlay" .Values.global.identity) -}}
284+
{{- include "camundaPlatform.imageByParams" $identityImageParams }}
285+
imagePullPolicy: "{{ .Values.global.image.pullPolicy }}"
286+
command: ["sh", "-c", "cp -a /app/keycloak-theme/* /mnt"]
287+
volumeMounts:
288+
- name: camunda-theme
289+
mountPath: /mnt
290290
extraVolumeMounts:
291-
- name: camunda-theme
292-
mountPath: /opt/bitnami/keycloak/themes/identity
291+
- name: camunda-theme
292+
mountPath: /opt/bitnami/keycloak/themes/identity
293293
```
294294

295295
## Development
@@ -1311,6 +1311,7 @@ Please see the corresponding [release guide](../../docs/release.md) to find out
13111311
| `orchestration.security.authentication` | | |
13121312
| `orchestration.security.authentication.method` | defines the authentication method which should be used. Possible values: basic, oidc | `basic` |
13131313
| `orchestration.security.authentication.unprotectedApi` | if true, then allow unauthenticated API access. | `false` |
1314+
| `orchestration.security.authentication.authenticationRefreshInterval` | defines the session's authentication refresh time, defaulted to PT30S. | `PT30S` |
13141315
| `orchestration.security.authentication.oidc.usernameClaim` | username claim. | `preferred_username` |
13151316
| `orchestration.security.authentication.oidc.groupsClaim` | group claim. | `groups` |
13161317
| `orchestration.security.authorizations` | | |

‎charts/camunda-platform-8.8/templates/orchestration/configmap.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -220,6 +220,7 @@ data:
220220
{{- end }}
221221
method: {{ .Values.orchestration.security.authentication.method | quote }}
222222
unprotectedApi: {{ .Values.orchestration.security.authentication.unprotectedApi }}
223+
authenticationRefreshInterval: {{ .Values.orchestration.security.authentication.authenticationRefreshInterval | quote }}
223224
authorizations:
224225
enabled: {{ .Values.orchestration.security.authorizations.enabled }}
225226
initialization:

‎charts/camunda-platform-8.8/test/integration/scenarios/chart-full-setup/values-integration-test-ingress-basic.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ global:
1616
security:
1717
authentication:
1818
method: basic
19+
authenticationRefreshInterval: "PT30S"
1920

2021
orchestration:
2122
ingress:

‎charts/camunda-platform-8.8/test/integration/scenarios/chart-full-setup/values-integration-test-ingress-keycloak.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -107,6 +107,7 @@ orchestration:
107107
security:
108108
authentication:
109109
method: oidc
110+
authenticationRefreshInterval: "PT30S"
110111
# giving access to venom to deploy a model. Given access to connectors
111112
# TODO: Find a way to only give connectors read access
112113
env:

‎charts/camunda-platform-8.8/test/integration/scenarios/chart-full-setup/values-integration-test-ingress-qa-elasticsearch-mt.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ orchestration:
1212
security:
1313
authentication:
1414
method: oidc
15+
authenticationRefreshInterval: "PT30S"
1516
env:
1617
- name: CAMUNDA_SECURITY_INITIALIZATION_MAPPINGRULES_0_MAPPINGRULEID
1718
value: "demo-user-mapping-rule"

‎charts/camunda-platform-8.8/test/integration/scenarios/chart-full-setup/values-integration-test-ingress-qa-elasticsearch-rba.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,7 @@ orchestration:
1212
security:
1313
authentication:
1414
method: oidc
15+
authenticationRefreshInterval: "PT30S"
1516
env:
1617
- name: CAMUNDA_SECURITY_INITIALIZATION_MAPPINGRULES_0_MAPPINGRULEID
1718
value: "demo-user-mapping-rule"

‎charts/camunda-platform-8.8/test/integration/scenarios/chart-full-setup/values-integration-test-ingress-qa-elasticsearch.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ orchestration:
1414
method: oidc
1515
oidc:
1616
groupsClaim: ""
17+
authenticationRefreshInterval: "PT30S"
1718
env:
1819
- name: CAMUNDA_SECURITY_INITIALIZATION_MAPPINGRULES_0_MAPPINGRULEID
1920
value: "demo-user-mapping-rule"

‎charts/camunda-platform-8.8/test/integration/scenarios/chart-full-setup/values-integration-test-ingress-qa-opensearch.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,7 @@ orchestration:
2323
security:
2424
authentication:
2525
method: oidc
26+
authenticationRefreshInterval: "PT30S"
2627
env:
2728
- name: CAMUNDA_SECURITY_INITIALIZATION_MAPPINGRULES_0_MAPPINGRULEID
2829
value: "demo-user-mapping-rule"

‎charts/camunda-platform-8.8/test/unit/orchestration/golden/configmap-authorizations.golden.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -129,6 +129,7 @@ data:
129129
authentication:
130130
method: "basic"
131131
unprotectedApi: false
132+
authenticationRefreshInterval: "PT30S"
132133
authorizations:
133134
enabled: true
134135
initialization:

‎charts/camunda-platform-8.8/test/unit/orchestration/golden/configmap-log4j2.golden.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -129,6 +129,7 @@ data:
129129
authentication:
130130
method: "basic"
131131
unprotectedApi: false
132+
authenticationRefreshInterval: "PT30S"
132133
authorizations:
133134
enabled: true
134135
initialization:

0 commit comments

Comments
 (0)