feat(gateway): native image

.github/workflows/maven-build-native.yml

@@ -0,0 +1,45 @@
+name: Build refarch-gateway native
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+jobs:
+  build-maven:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Set up JDK
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
+        with:
+          java-version: "21"
+          distribution: "temurin"
+          cache: "maven"
+          cache-dependency-path: "./refarch-gateway/pom.xml"
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository }}/refarch-gateway-native
+          tags: |
+            type=raw,value=dev-k8s
+      - name: Build with Maven
+        env:
+          IMAGE_NAME: ghcr.io/${{ github.repository }}/refarch-gateway-native
+          IMAGE_RAW_TAGS: ${{ steps.meta.outputs.tags }}
+          NATIVE_SPRING_PROFILES: hazelcast-k8s
+          REGISTRY_USER: ${{ github.repository_owner }}
+          REGISTRY_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          export IMAGE_TAGS="${IMAGE_RAW_TAGS//$'\n'/,}"
+          mvn -f ./refarch-gateway/pom.xml -Pci,native,build-native-image,publish-image spring-boot:build-image

refarch-gateway/pom.xml

@@ -63,6 +63,7 @@
 
         <!-- Release -->
         <maven-release-plugin.version>3.1.1</maven-release-plugin.version>
+        <image.name>itatm/${project.artifactId}</image.name>
 
         <!-- Utility -->
         <apache-commons-lang.version>3.17.0</apache-commons-lang.version>
@@ -361,4 +362,98 @@
             </plugin>
         </plugins>
     </build>
+
+    <profiles>
+        <profile>
+            <id>lhm</id>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.springframework.boot</groupId>
+                        <artifactId>spring-boot-maven-plugin</artifactId>
+                        <configuration>
+                            <docker>
+                                <builderRegistry>
+                                    <username>${env.DOCKERHUB_USERNAME}</username>
+                                    <password>${env.DOCKERHUB_PASSWORD}</password>
+                                    <url>https://index.docker.io/v1/</url>
+                                </builderRegistry>
+                            </docker>
+                        </configuration>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+        <profile>
+            <id>ci</id>
+            <properties>
+                <image.name>${env.IMAGE_NAME}</image.name>
+            </properties>
+        </profile>
+        <profile>
+            <id>build-native-image</id>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.graalvm.buildtools</groupId>
+                        <artifactId>native-maven-plugin</artifactId>
+                    </plugin>
+                    <plugin>
+                        <groupId>org.springframework.boot</groupId>
+                        <artifactId>spring-boot-maven-plugin</artifactId>
+                        <!-- Needed for image build behind proxy -->
+                        <configuration>
+                            <image>
+                                <name>${image.name}:${project.version}</name>
+                                <tags>${env.IMAGE_TAGS}</tags>
+                                <env>
+                                    <HTTP_PROXY>${env.HTTP_PROXY}</HTTP_PROXY>
+                                    <HTTPS_PROXY>${env.HTTPS_PROXY}</HTTPS_PROXY>
+                                    <NO_PROXY>${env.NO_PROXY}</NO_PROXY>
+                                    <BP_HEALTH_CHECKER_ENABLED>true</BP_HEALTH_CHECKER_ENABLED>
+                                </env>
+                                <verboseLogging>true</verboseLogging>
+                                <builder>paketobuildpacks/builder-jammy-base</builder>
+                                <buildpacks>
+                                    <buildpack>urn:cnb:builder:paketo-buildpacks/java</buildpack>
+                                    <buildpack>urn:cnb:builder:paketo-buildpacks/native-image</buildpack>
+                                    <buildpack>docker.io/paketobuildpacks/health-checker</buildpack>
+                                </buildpacks>
+                            </image>
+                        </configuration>
+                        <executions>
+                            <execution>
+                                <id>process-aot</id>
+                                <configuration>
+                                    <profiles>native,${env.NATIVE_SPRING_PROFILES}</profiles>
+                                </configuration>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+        <profile>
+            <id>publish-image</id>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.springframework.boot</groupId>
+                        <artifactId>spring-boot-maven-plugin</artifactId>
+                        <configuration>
+                            <image>
+                                <publish>true</publish>
+                            </image>
+                            <docker>
+                                <publishRegistry>
+                                    <username>${env.REGISTRY_USER}</username>
+                                    <password>${env.REGISTRY_TOKEN}</password>
+                                </publishRegistry>
+                            </docker>
+                        </configuration>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+    </profiles>
 </project>

refarch-gateway/src/main/resources/META-INF/native-image/de.muenchen.refarch/refarch-gateway-additional-hints/reflect-config.json

@@ -0,0 +1,57 @@
+[
+  {
+    "condition": {
+      "typeReachable": "com.hazelcast.instance.BuildInfoProvider"
+    },
+    "name": "com.hazelcast.instance.GeneratedBuildProperties",
+    "fields": [
+      {
+        "name": "ARTIFACT_ID"
+      }
+    ]
+  },
+  {
+    "name": "com.hazelcast.internal.cluster.Versions",
+    "allPublicFields": true
+  },
+  {
+    "condition": {
+      "typeReachable": "com.hazelcast.shaded.org.jctools.queues.MpmcArrayQueueConsumerIndexField"
+    },
+    "name": "com.hazelcast.shaded.org.jctools.queues.MpmcArrayQueueConsumerIndexField",
+    "fields": [
+      {
+        "name": "consumerIndex"
+      }
+    ]
+  },
+  {
+    "condition": {
+      "typeReachable": "com.hazelcast.shaded.org.jctools.queues.MpmcArrayQueueProducerIndexField"
+    },
+    "name": "com.hazelcast.shaded.org.jctools.queues.MpmcArrayQueueProducerIndexField",
+    "fields": [
+      {
+        "name": "producerIndex"
+      }
+    ]
+  },
+  {
+    "condition": {
+      "typeReachable": "com.hazelcast.internal.partition.impl.MigrationStats"
+    },
+    "name": "com.hazelcast.internal.partition.impl.MigrationStats",
+    "allPublicMethods": true
+  },
+  {
+    "condition": {
+      "typeReachable": "com.hazelcast.internal.networking.nio.NioOutboundPipeline"
+    },
+    "name": "com.hazelcast.internal.networking.nio.NioOutboundPipeline",
+    "methods": [
+      {
+        "name": "idleTimeMillis"
+      }
+    ]
+  }
+]

refarch-gateway/src/main/resources/application-native.yml

@@ -0,0 +1,17 @@
+spring:
+  security:
+    oauth2:
+      resourceserver:
+        jwt:
+          issuer-uri: "https://sso.muenchen.de/auth/realms/muenchen.de"
+      client:
+        provider:
+          sso:
+            issuer-uri: ${spring.security.oauth2.resourceserver.jwt.issuer-uri}
+        registration:
+          sso:
+            provider: sso
+            client-id:
+            client-secret:
+            # needed for userInfo endpoint
+            scope: profile, openid