Merge branch 'refs/heads/refactoring'

Author: Andreas Mautsch

doc/release-notes.md

@@ -1,3 +1,16 @@
+# 1.3.2
+- cleanup of event folder
+- network policies added
+- basic auth to core service added
+- kiali connection to tempo tracing added, spring application name now contains the Namespace
+- upgrade to apisix chart 2.8.0
+- upgrade to kind kubernetes 1.3.0
+- upgrade to kubernetes dashboard 6.0.8 (7.x has a lot of breaking changes)
+- Namespaces are now created ahead of time during initial install
+- moved dashboard to dashboard namespace
+- moved everything grafana to grafana namespace
+- added redis cluster to invoice
+
 # 1.3.1
 - switchable kafka and rabbitmq broker added
 

doc/todo.md

@@ -1,13 +1,10 @@
 # div
 - kong oidc
-- kiali + grafana + tempo
 
 ## security
-- network policies
 - secrets via vault
 - volume encryption
-- RBAC
-- CSP Headers for Ingress that satisfy Owasp Zap (seems to need restat after every scan)
+- rbac                                                                                                               k
 
 # info
 - 10 best practices: https://www.youtube.com/watch?app=desktop&v=oBf5lrmquYI&pp=ygUSI211dGlyYW9rdWJlcm5ldGVz

helm/core/catalog/application/Chart.yaml

@@ -4,6 +4,6 @@ description: catalog-application
 
 type: application
 
-version: 1.3.1
+version: 1.3.2
 
 appVersion: "3.3.0"

helm/core/catalog/application/templates/config.yaml

@@ -29,8 +29,8 @@ data:
   springdoc.api-docs.path: "//"
 
   #zipkin/jaeger
-  spring.application.name: "{{ include "application.fullname" . }}"
-  management.otlp.tracing.endpoint: "http://tempo.monitoring:4318/v1/traces"
+  spring.application.name: "{{ include "application.fullname" . }}.{{ .Release.Namespace }}"
+  management.otlp.tracing.endpoint: "http://tempo.grafana:4318/v1/traces"
   management.tracing.sampling.probability: "1.0"
 
   #persistence

helm/core/catalog/application/templates/configlog.yaml

@@ -6,6 +6,8 @@ metadata:
     {{- include "application.labels" . | nindent 4 }}
 data:
   #log levels
+  logging.pattern.level: "%5p tenantId=%X{tenantId:-}"
+
   logging.level.root: "WARN"
   logging.level.org.goafabric: "INFO"
 

helm/core/catalog/batch/Chart.yaml

@@ -4,6 +4,6 @@ description: catalog-batch
 
 type: application
 
-version: 1.3.1
+version: 1.3.2
 
 appVersion: "3.3.0"

helm/core/catalog/batch/templates/config.yaml

@@ -26,8 +26,8 @@ data:
   springdoc.api-docs.path: "//"
 
   #zipkin/jaeger
-  spring.application.name: "{{ include "application.fullname" . }}"
-  management.zipkin.tracing.endpoint: "http://zipkin.monitoring:9411/api/v2/spans"
+  spring.application.name: "{{ include "application.fullname" . }}.{{ .Release.Namespace }}"
+  management.zipkin.tracing.endpoint: "http://zipkin.grafana:9411/api/v2/spans"
   management.tracing.sampling.probability: "1.0"
   management.tracing.enabled: "true"
   logging.level.zipkin2.reporter: "ERROR"

helm/core/core/application/Chart.yaml

@@ -4,7 +4,7 @@ description: core-application
 
 type: application
 
-version: 1.3.1
+version: 1.3.2
 
 appVersion: "3.3.0"
 

helm/core/core/application/stack

@@ -11,6 +11,7 @@ function up() {
     --set image.arch=$IMAGE_ARCH $INGRESS_AUTHENTICATION \
     --set ingress.hosts=`kubectl get configmaps cluster-config -o jsonpath='{.data.hostname}' -n default` \
     --set database.password=postgres \
+    --set service.password=secret \
     --set s3.password=minioadmin \
     --set oidc.session.secret=secretsecretsecret \
     --namespace `pwd | rev | cut -d '/' -f3 | rev` \

helm/core/core/application/templates/config.yaml

@@ -24,8 +24,8 @@ data:
   springdoc.api-docs.path: "//"
 
   #zipkin/jaeger
-  spring.application.name: "{{ include "application.fullname" . }}"
-  management.otlp.tracing.endpoint: "http://tempo.monitoring:4318/v1/traces"
+  spring.application.name: "{{ include "application.fullname" . }}.{{ .Release.Namespace }}"
+  management.otlp.tracing.endpoint: "http://tempo.grafana:4318/v1/traces"
   management.tracing.sampling.probability: "1.0"
 
   #persistence
@@ -43,14 +43,8 @@ data:
   #frontend
   frontend.catalog-service.uri: "http://catalog-application:8080"
 
-  #monitoring view
-  monitoring.view.enabled: "true"
-  monitoring.view.tracing.url: "/jaeger"
-  monitoring.view.loki.url: "/grafana/explore"
-  monitoring.view.s3.url: "/s3"
-
   #
   spring.cloud.aws.s3.endpoint: "http://s3-minio:9000"
-  spring.cloud.aws.s3.enabled: "false"
+  spring.cloud.aws.s3.enabled: "true"
 
   event.dispatcher.uri: "http://event-dispatcher-service-application.event:8080/events/dispatch"