uselagoon/lagoon v2.0.0-rc.9

lagoon v2.0.0-rc.9

on GitHub

This release is built on the https://github.com/uselagoon/lagoon-images/releases/tag/21.8.0 images

Facts, Tasks, and ProjectRouterPatterns, oh my 😌

Changes in this release

• Deletes from DB rather than marks deleted @bomoko (#2656)
• Adds Redis caching to bb sync script @bomoko (#2802)
• Custom tasks @bomoko (#2779)
• enable 20MB query cache for Keycloak-db @Schnitzel (#2797)
• Update Slack Notification GraphQL to use correct DB table @dan2k3k4 (#2782)
• remove curator, it's not used anymore since we switched to OpenDistro @Schnitzel (#2787)
• remove ELASTICSEARCH_HOST, use ELASTICSEARCH_URL @Schnitzel (#2786)
• parsed user logs and transport to rabbitMQ and Logstash @timclifford (#2800)
• filters out Billing Groups that we don't need to create in Opendistro… @Schnitzel (#2788)
• Fact API changes for fact search @timclifford (#2693)
• Adding check for double dashes in new project names @cdchris12 (#2785)
• Add support for project routerPatterns @shreddedbacon (#2806)
• Update link to amazee.io Kibana in docs @cdchris12 (#2769)

Upgrade instructions:

1. Normal Helm Upgrade
2. connect to api-db container: kubectl exec -it lagoon-core-api-db-0 sh
3. run /rerun_initdb.sh
4. Visit Keycloak UI as admin
5. Navigate to Clients > lagoon-opendistro-security > Mappers > groups
6. Replace script with:

var ArrayList = Java.type("java.util.ArrayList");
var groupsAndRoles = new ArrayList();
var forEach = Array.prototype.forEach;

// add all groups the user is part of
forEach.call(user.getGroups().toArray(), function(group) {
  // remove the group role suffixes
  //lets check if the group has a parent if this is a child
  if(group.getFirstAttribute("type") == "role-subgroup") {
    var parent = group.getParent();
    if(parent.getFirstAttribute("type") == "project-default-group") {
        var projectIds = parent.getFirstAttribute("lagoon-projects");
        if(projectIds !== null) {
            forEach.call(projectIds.split(","), function(g) {
              groupsAndRoles.add("p" + g);  
            });
            return;
        }
    }
  }
 
  var groupName = group.getName().replace(/-owner|-maintainer|-developer|-reporter|-guest/gi,"");
  groupsAndRoles.add(groupName);
  return;
});

// add all roles the user is part of
forEach.call(user.getRoleMappings().toArray(), function(role) {
   var roleName = role.getName();
   groupsAndRoles.add(roleName);
});

exports = groupsAndRoles;

1. connect to api container: kubectl exec deploy/lagoon-core-api -it -- sh
2. run yarn sync:opendistro-security