adds ssl to token-issuer (#34)

* updates token-issuer
VNG-Realisatie · Oct 19, 2023 · c69bbd5 · c69bbd5
1 parent 80cd44d
commit c69bbd5
Show file tree

Hide file tree

Showing 17 changed files with 85 additions and 80 deletions.
diff --git a/flux/github.sealed.yaml b/flux/github.sealed.yaml
@@ -6,7 +6,7 @@ metadata:
   namespace: zgw
 spec:
   encryptedData:
-    .dockerconfigjson: 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
+    .dockerconfigjson: AgCgwgEn+JTpmHwOA5kMYDRhsQXSgWV7QrnZxS1epPTWGrhfXkBnl6//OR/CZUG29EZESzPvI5I7xh/FYwbNX9VzIJnqYg5fldmYxGXd0KArjHUmj65gmZNk1zxzKo1iOxtAI3f3FkqJINto2deS8rtuh2JDNqhH9R2QKFoBLrtLVDiJrCIcaQBMyD1vAk5wt+kULtRPiMg17Lpd6hJAzFPn4bsUJ2oDeBaJcp2q6xMzc9c79eAOdVTIDMcMuDK+jsTi4fklTAnMeZN8Tt8y8qUKeImiDMVXP90fBf9HKBP/yRa19fWLNIv22Ue6HIe5zUWo9Ax6lDYu5/7SLo/mDugnnvlPMtvjYWBsYXMBlMNWvQNNsVssnyBoES+sttWXck4LsEpC9FnPzIH89++hjmTz0fMbRf4POCkWMxIIw620wf5wokQa8/eF/xFtqzIJ81Wf1u7ISf1TNv+Lro7CQmT+PwUy7ckIWq+qQ0UBxSb6NnIpq5mgceyt+n00w6E5C+VGessFfUATlVzkMn7SIxbmRfvtTHtjAblqWpT5iLxdBkOyfcVp//kWU3IVjT9yzTi3MBDcnf2E5VC1gry3CW+5RUR83P2esPuz0JKu4/V7kHt5LiIynDfawlK9ZtQPP2Prwug7ruxpE1IaKY7YHUbZlfglQUWuoYd5+RilhzLHm9nwrrgnj7616l5um/JOeyzZ6bOin3vwt8tl0wmHqs5Bhb8EmSzJ2LePNhrVlfu3WxzXHOL4bdJA/MneUR/pX7PXc0es7KfcdNu1UfxayxAwuDDH+mAh7PzctkCjKwz7uGPx3r4KJZ6WIrkz5u47f8obv/RwbnDrl31dUyW4HeKuD/YQ/oqskfdp94VpdH4qM0w18di6tkTGKXa5fvgRcUZk13KPmU/A5xDSIPGNmlYnJc18JPc=
   template:
     metadata:
       creationTimestamp: null

diff --git a/flux/zgw-secrets.sealed.yaml b/flux/zgw-secrets.sealed.yaml
diff --git a/flux/zgw-test-secrets.sealed.yaml b/flux/zgw-test-secrets.sealed.yaml
diff --git a/helm/ri-zgw/Chart.yaml b/helm/ri-zgw/Chart.yaml
@@ -3,28 +3,28 @@ appVersion: 0.1.0
 dependencies:
 - condition: services.ac.enabled
   name: ac
-  version: 0.1.0
+  version: 0.1.2
 - condition: services.brc.enabled
   name: brc
-  version: 0.1.0
+  version: 0.1.2
 - condition: services.drc.enabled
   name: drc
-  version: 0.1.0
+  version: 0.1.2
 - condition: services.nrc.enabled
   name: nrc
-  version: 0.1.0
+  version: 0.1.2
 - condition: services.token-issuer.enabled
   name: token-issuer
-  version: 0.1.0
+  version: 0.1.2
 - condition: services.vrl.enabled
   name: vrl
-  version: 0.1.0
+  version: 0.1.2
 - condition: services.zrc.enabled
   name: zrc
-  version: 0.1.0
+  version: 0.1.2
 - condition: services.ztc.enabled
   name: ztc
-  version: 0.1.0
+  version: 0.1.2
 description: Helm chart for referentie implementaties as part of API standards for
   local government
 home: https://gitlab.com/commonground/ri/infra
@@ -35,4 +35,4 @@ maintainers:
 name: ri-zgw
 sources:
 - https://github.com/VNG-Realisatie/gemma-zaken
-version: 0.1.0
+version: 0.1.2
diff --git a/helm/ri-zgw/charts/ac/Chart.yaml b/helm/ri-zgw/charts/ac/Chart.yaml
@@ -3,4 +3,4 @@ appVersion: 1.0.0
 description: gemma zaken
 name: ac
 type: application
-version: 0.1.0
+version: 0.1.2
diff --git a/helm/ri-zgw/charts/brc/Chart.yaml b/helm/ri-zgw/charts/brc/Chart.yaml
@@ -3,4 +3,4 @@ appVersion: 1.0.2
 description: gemma zaken
 name: brc
 type: application
-version: 0.1.0
+version: 0.1.2
diff --git a/helm/ri-zgw/charts/drc/Chart.yaml b/helm/ri-zgw/charts/drc/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
-appVersion: 1.4.0
+appVersion: 1.4.2
 description: Documenten
 name: drc
 type: application
-version: 0.1.0
+version: 0.1.2
diff --git a/helm/ri-zgw/charts/drc/values.yaml b/helm/ri-zgw/charts/drc/values.yaml
@@ -16,7 +16,7 @@ secret:
 service:
   images:
     imageRepo: ghcr.io/vng-realisatie/documenten-api
-    tag: 1.4.0
+    tag: 1.4.2
   minUploadSize: '4294967296'
   name: drc
   port: 8000
diff --git a/helm/ri-zgw/charts/nrc/Chart.yaml b/helm/ri-zgw/charts/nrc/Chart.yaml
@@ -3,4 +3,4 @@ appVersion: 1.0.0.post1
 description: gemma zaken
 name: nrc
 type: application
-version: 0.1.0
+version: 0.1.2
diff --git a/helm/ri-zgw/charts/token-issuer/Chart.yaml b/helm/ri-zgw/charts/token-issuer/Chart.yaml
@@ -3,4 +3,4 @@ appVersion: 0.1.0
 description: gemma zaken
 name: token-issuer
 type: application
-version: 0.1.0
+version: 0.1.2
diff --git a/helm/ri-zgw/charts/vrl/Chart.yaml b/helm/ri-zgw/charts/vrl/Chart.yaml
@@ -3,4 +3,4 @@ appVersion: 0.1.4
 description: gemma zaken
 name: vrl
 type: application
-version: 0.1.0
+version: 0.1.2
diff --git a/helm/ri-zgw/charts/zrc/Chart.yaml b/helm/ri-zgw/charts/zrc/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
-appVersion: 1.5.0
+appVersion: 1.5.1
 description: gemma zaken
 name: zrc
 type: application
-version: 0.1.0
+version: 0.1.2
diff --git a/helm/ri-zgw/charts/zrc/values.yaml b/helm/ri-zgw/charts/zrc/values.yaml
@@ -17,6 +17,6 @@ secret:
 service:
   images:
     imageRepo: ghcr.io/vng-realisatie/zaken-api
-    tag: 1.5.0
+    tag: 1.5.1
   name: zrc
   port: 8000
diff --git a/helm/ri-zgw/charts/ztc/Chart.yaml b/helm/ri-zgw/charts/ztc/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
-appVersion: 1.3.0
+appVersion: 1.3.1
 description: gemma zaken
 name: ztc
 type: application
-version: 0.1.0
+version: 0.1.2
diff --git a/helm/ri-zgw/charts/ztc/values.yaml b/helm/ri-zgw/charts/ztc/values.yaml
@@ -17,6 +17,6 @@ secret:
 service:
   images:
     imageRepo: ghcr.io/vng-realisatie/catalogi-api
-    tag: 1.3.0
+    tag: 1.3.1
   name: ztc
   port: 8000
diff --git a/helm/ri-zgw/values.yaml b/helm/ri-zgw/values.yaml
@@ -5,26 +5,27 @@ global:
   config:
     certManager: true
     createCronJobs: false
+    createJobs: true
     createSecret: true
     enableTLS: false
-    environment: minikube
-    kube: v1.26.1
+    environment: pinniped-azure-common-prod
+    kube: v1.26.3
     nginx: false
     notificationsDisabled: true
     pullPolicy: Always
   name: ri
   namespace: zgw
   postgres:
     name: postgres
-    password: auCz6cVYsxMq7sFPVzmzXRj7
+    password: AeaKtiIebmtY5tA56XfbsTjC
     passwordKey: postgresPassword
     service:
       host: postgres
       port: 5432
     usernameKey: postgresUsername
   rabbitmq:
     defaultUser: nrc_root
-    default_password: Rcf4vzrCKOYErl3VDr1h21AM
+    default_password: IqoaiZePwOcOcRY0DUDAPlHL
     name: rabbitmq
     port: 5672
   redis:
@@ -34,37 +35,37 @@ global:
     service:
       port: 6379
   secretKeys:
-    ac: =ljzsa6vv76#-o39sq%zmx8l_lz32)hardh)=a40lrdw6@1sj$
-    brc: t%@n#t^%w%s)n53$xz=d@^4+_ftz0m67bv8vqb&$+p%6p8f_!j
-    drc: _ev%6ws!@m=h%g+uz9e6*cch1mko4uwhx5$)yq@j&&9r6!$k9=
-    nrc: eldhsyl91d8^2w1)d9+v0@^dc2c#ehtg(e1%1g2b$sw-9lp3s8
-    zrc: ^ooeqct+60*ndexmivrma1*%zi&l-v+c#0d2voq+))a+s1f$f!
-    ztc: '*opg=hly*2#o=k2x9_ii1rpq)0qo$1k%)o5k*37-0#lh=27@s%'
+    ac: 6l6(fqmu1rf6(uwq=y3+kz%gp#zo%4_kvidn^pgs4szc!x$odg
+    brc: _pkti%q-i-44*+!4=sa2dv(5)#)v^ss)hlu=f7r_#ph%l6+edf
+    drc: 2&6#6c5ccsimg8@adhy-4#gorqns78=ar0@xg7#6s%8k#w(91*
+    nrc: jlyb^u1_v12^d#t7o_^n7o0x-7l^2i8c11_2$8dn9vi-!b!8!h
+    zrc: a4@#!#q-&62cgie53p$*i6rb$o8%cm+)=_8ks#9==(+8)ja!#)
+    ztc: '&zp$!63^tqe&9v5ej!_lundq@r((=zm5v^-zc%7eqxgtr7hs3)'
   secrets:
     data:
-      brokerUrl: amqp://nrc_root:F9X88AndmgIF6QlhKuUyU6pv@rabbitmq:5672//
+      brokerUrl: amqp://nrc_root:4zhXdemdlCxuonJyerfDBjwk@rabbitmq:5672//
       defaultAdminEmail: standaarden.ondersteuning@vng.nl
       defaultAdminPassword: notthepassword
       defaultAdminUser: admin
-      postgresPassword: r3TXPOMXI5DQIcfOb94EXdra
+      postgresPassword: 4AHTFjdovEtLlB9g4TPKnJnX
       postgresUsername: postgres
-      publishBrokerUrl: amqp://nrc_root:F9X88AndmgIF6QlhKuUyU6pv@rabbitmq:5672/%2F
+      publishBrokerUrl: amqp://nrc_root:4zhXdemdlCxuonJyerfDBjwk@rabbitmq:5672/%2F
       rabbitmqDefaultDefaultUser: nrc_root
-      rabbitmqDefaultPassword: TqzmrbCIzpEJtOtfYHC6XbLI
-      resultBackend: amqp://nrc_root:TqzmrbCIzpEJtOtfYHC6XbLI@rabbitmq-nc:5672//
+      rabbitmqDefaultPassword: 4zhXdemdlCxuonJyerfDBjwk
+      resultBackend: amqp://nrc_root:4zhXdemdlCxuonJyerfDBjwk@rabbitmq-nc:5672//
       tokenIssuerIdentifier: token-issuer-seeded
-      tokenIssuerSecret: 4lUYRWrfN13GUevfPT0E7AgS
-      tokenSeederSecret: qJUj64uleyVASR5fJy9nhTf0
+      tokenIssuerSecret: afD7pmu4xg0HM44fAunXIprv
+      tokenSeederSecret: FN950JhTx44UuSh79PeFitFz
     name: zgw-secrets
   tokenIssuer:
     identifierKey: tokenIssuerIdentifier
-    secret: Ue76bqdBzgi0NWXPYCn2Rba7
+    secret: 2Fzbwl1KnTVgXBRm3NdDRmaf
     secretKey: tokenIssuerSecret
   tokenSeeder:
     imagePullPolicy: Never
     imageRepo: ghcr.io/vng-realisatie/token-seeder
     pullPolicy: Always
-    secret: n3jEp4QbVtFItpgcQnMOXJUJ
+    secret: 3uTXWfVH5PqfCa407qEmZMiR
     secretKey: tokenSeederSecret
     tag: 0.1.1
 ingress:

diff --git a/parser/env.yaml b/parser/env.yaml
@@ -50,13 +50,13 @@ token-issuer:
   createSecret: true
   repo: ghcr.io/vng-realisatie/token-issuer
   local:
-    tag: 0.1.0
+    tag: 0.1.1
     ingressHost: k8s-tokens-local.test
   test:
-    tag: 0.1.0
+    tag: 0.1.1
     ingressHost: zaken-auth.test.vng.cloud
   production:
-    tag: 0.1.0
+    tag: 0.1.1
     ingressHost: zaken-auth.vng.cloud
 
 vrl: