chore: Remove unused Helm charts and Kubernetes components

Update Deployment and statefulSet
2024-09-12 16:17:52 +02:00 · 2024-09-07 01:37:07 +02:00
34 changed files with 207 additions and 1103 deletions
--- a/.gitignore
+++ b/.gitignore
@ -1 +0,0 @@
 k8s/deployed_config
--- a/clone_opencloud_microservices.sh
+++ b/clone_opencloud_microservices.sh
@ -1,48 +0,0 @@
 #!/bin/bash
 REPOS=(
    "oc-auth"
    "oc-catalog"
    "oc-datacenter"
    "oc-front"
    "oc-monitord"
    "oc-peer"
    "oc-shared"
    "oc-scheduler"
    "oc-schedulerd"
    "oc-workflow"
    "oc-workspace"
 )
 # Function to clone repositories
 clone_repo() {
    local repo_url="https://cloud.o-forge.io/core/$1.git"
    local repo_name=$(basename "$repo_url" .git)
    local branche=$2
    echo "Processing repository: $repo_name"
    if [ ! -d "$repo_name" ]; then
        echo "Cloning repository: $repo_name"
        git clone "$repo_url"
        if [ $? -ne 0 ]; then
            echo "Error cloning $repo_url"
            exit 1
        fi 
    fi
    echo "Check in $branche & pull"
    ls
    echo "Repository '$repo_name' already exists. Pulling latest changes..."
    cd "$repo_name" && git checkout $branche && git pull 
    cd ..
 }
 cd ..
 # Iterate through each repository in the list
 for repo in "${REPOS[@]}"; do
    clone_repo $repo ${1:-main}
 done
 echo "All repositories processed successfully."
--- a/docker/db/add.sh
+++ b/docker/db/add.sh
@ -1,9 +0,0 @@
 #!/bin/bash
 docker cp ./datas mongo:.
 for i in $(ls ./datas); do 
   firstString=$i
   echo "ADD file $i in collection ${i/.json/}"
   docker exec -it mongo sh -c "mongoimport --jsonArray --db DC_myDC --collection ${i/.json/} --file ./datas/$i"
 done
--- a/docker/db/datas/collaborative_area.json
+++ b/docker/db/datas/collaborative_area.json
@ -1 +0,0 @@
 [{"_id":"0b6a375f-be3e-49a9-9827-3c2d5eddb057","abstractobject":{"id":"0b6a375f-be3e-49a9-9827-3c2d5eddb057","name":"test","is_draft":false,"creator_id":"c0cece97-7730-4c2a-8c20-a30944564106","creation_date":{"$date":"2025-01-27T10:41:47.741Z"},"update_date":{"$date":"2025-01-27T10:41:47.741Z"},"updater_id":"c0cece97-7730-4c2a-8c20-a30944564106","access_mode":0},"description":"Proto Collaborative area example","collaborative_area":{},"workflows":["58314c99-c595-4ca2-8b5e-822a6774efed"],"allowed_peers_group":{"c0cece97-7730-4c2a-8c20-a30944564106":["*"]},"workspaces":[]}]
--- a/docker/db/datas/compute_resource.json
+++ b/docker/db/datas/compute_resource.json
--- a/docker/db/datas/data_resource.json
+++ b/docker/db/datas/data_resource.json
--- a/docker/db/datas/peer.json
+++ b/docker/db/datas/peer.json
@ -1 +0,0 @@
 [{"_id":"c0cece97-7730-4c2a-8c20-a30944564106","failed_execution":null,"abstractobject":{"update_date":{"$date":"2025-03-27T09:13:13.230Z"},"access_mode":0,"id":"c0cece97-7730-4c2a-8c20-a30944564106","name":"local","is_draft":false,"creation_date":{"$date":"2025-03-27T09:13:13.230Z"}},"url":"http://localhost:8000","wallet_address":"my-wallet","public_key":"-----BEGIN RSA PUBLIC KEY-----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\n-----END RSA PUBLIC KEY-----\n","state":1}]
--- a/docker/db/datas/processing_resource.json
+++ b/docker/db/datas/processing_resource.json
--- a/docker/db/datas/storage_resource.json
+++ b/docker/db/datas/storage_resource.json
@ -1 +0,0 @@
 [{"_id":"04bc70b5-8d7b-44e6-9015-fadfa0fb102d","abstractinstanciatedresource":{"abstractresource":{"type":"storage","abstractobject":{"id":"04bc70b5-8d7b-44e6-9015-fadfa0fb102d","name":"IRT risk database","is_draft":false,"creator_id":"c0cece97-7730-4c2a-8c20-a30944564106","creation_date":"2021-09-30T14:00:00.000Z","update_date":"2021-09-30T14:00:00.000Z","updater_id":"c0cece97-7730-4c2a-8c20-a30944564106","access_mode":1},"logo":"https://cloud.o-forge.io/core/deperecated-oc-catalog/raw/branch/main/scripts/local_imgs/IRT risk database.png","description":"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.","short_description":"S3 compliant IRT file storage","owners":[{"name":"IRT"}]},"instances":[{"env":[{"attr":"source","readonly":true}],"resourceinstance":{"abstractobject":{"id":"7fdccb9c-7090-40a5-bacd-7435bc56c90d","name":"IRT local file storage Marseille"},"location":{"latitude":50.62925,"longitude":3.057256},"country":250,"partnerships":[{"resourcepartnership":{"namespace":"default","peer_groups":{"c0cece97-7730-4c2a-8c20-a30944564106":["*"]},"pricing_profiles":[{"pricing":{"price":50,"currency":"EUR","buying_strategy":0,"time_pricing_strategy":0}}]}}]},"source":"/mnt/vol","local":false,"security_level":"public","size":50,"size_type":3,"redundancy":"RAID5","throughput":"r:200,w:150"}]},"storage_type":5,"acronym":"DC_myDC"},{"_id":"e726020a-b68e-4abc-ab36-c3640ea3f557","abstractinstanciatedresource":{"abstractresource":{"type":"storage","abstractobject":{"id":"e726020a-b68e-4abc-ab36-c3640ea3f557","name":"IRT local file storage","is_draft":false,"creator_id":"c0cece97-7730-4c2a-8c20-a30944564106","creation_date":"2021-09-30T14:00:00.000Z","update_date":"2021-09-30T14:00:00.000Z","updater_id":"c0cece97-7730-4c2a-8c20-a30944564106","access_mode":1},"logo":"https://cloud.o-forge.io/core/deperecated-oc-catalog/raw/branch/main/scripts/local_imgs/IRT local file storage.png","description":"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.","short_description":"S3 compliant IRT file storage","owners":[{"name":"IRT"}]},"instances":[{"resourceinstance":{"env":[{"attr":"source","readonly":true}],"abstractobject":{"id":"7fdccb9c-7090-40a5-bacd-7435bc56c90d","name":"IRT local file storage Marseille"},"location":{"latitude":50.62925,"longitude":3.057256},"country":250,"partnerships":[{"resourcepartnership":{"namespace":"default","peer_groups":{"c0cece97-7730-4c2a-8c20-a30944564106":["*"]},"pricing_profiles":[{"pricing":{"price":50,"currency":"EUR","buying_strategy":0,"time_pricing_strategy":0}}]}}]},"source":"/mnt/vol","local":true,"security_level":"public","size":500,"size_type":0,"encryption":true,"redundancy":"RAID5S","throughput":"r:300,w:350"}]},"storage_type":5,"acronym":"DC_myDC"}]
--- a/docker/db/datas/workflow.json
+++ b/docker/db/datas/workflow.json
--- a/docker/kube.exemple.env
+++ b/docker/kube.exemple.env
@ -1,4 +0,0 @@
 KUBERNETES_SERVICE_HOST=192.168.47.20
 KUBE_CA="LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJkekNDQVIyZ0F3SUJBZ0lCQURBS0JnZ3Foa2pPUFFRREFqQWpNU0V3SHdZRFZRUUREQmhyTTNNdGMyVnkKZG1WeUxXTmhRREUzTWpNeE1USXdNell3SGhjTk1qUXdPREE0TVRBeE16VTJXaGNOTXpRd09EQTJNVEF4TXpVMgpXakFqTVNFd0h3WURWUVFEREJock0zTXRjMlZ5ZG1WeUxXTmhRREUzTWpNeE1USXdNell3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTVlk3ZHZhNEdYTVdkMy9jMlhLN3JLYjlnWXgyNSthaEE0NmkyNVBkSFAKRktQL2UxSVMyWVF0dzNYZW1TTUQxaStZdzJSaVppNUQrSVZUamNtNHdhcnFvMEl3UURBT0JnTlZIUThCQWY4RQpCQU1DQXFRd0R3WURWUjBUQVFIL0JBVXdBd0VCL3pBZEJnTlZIUTRFRmdRVWtlUVJpNFJiODduME5yRnZaWjZHClc2SU55NnN3Q2dZSUtvWkl6ajBFQXdJRFNBQXdSUUlnRXA5ck04WmdNclRZSHYxZjNzOW5DZXZZeWVVa3lZUk4KWjUzazdoaytJS1FDSVFDbk05TnVGKzlTakIzNDFacGZ5ays2NEpWdkpSM3BhcmVaejdMd2lhNm9kdz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K"
 KUBE_CERT="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"
 KUBE_DATA="LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU5ZS1BFb1dhd1NKUzJlRW5oWmlYMk5VZlY1ZlhKV2krSVNnV09TNFE5VTlvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFVUozblJZN0tCNEtUWUx0WnFUMS96VS84a0Z2Sk1lUGhYMm1Vc25pczBiR3FZblkyaVZEeApYVzR2SVhTYjNqcm9iZ1YwSUtDT0twUWs2OHJEbE03ckRBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo="
--- a/docker/start-demo.sh
+++ b/docker/start-demo.sh
@ -1,36 +0,0 @@
 #!/bin/bash
 KUBERNETES_ENV_FILE=$(realpath ${1:-"./kube.exemple.env"})
 HOST=${2:-"http://localhost:8000"}
 docker network create oc | true
 docker compose down
 cd ./tools && docker compose  -f ./docker-compose.dev.yml up --force-recreate -d
 docker compose  -f ./docker-compose.traefik.yml up --force-recreate -d  && cd ..
 cd ./db && ./add.sh && cd ..
 cd ../..
 REPOS=(
    "oc-auth"
    "oc-catalog"
    "oc-datacenter"
    "oc-monitord"
    "oc-peer"
    "oc-shared"
    "oc-scheduler"
    "oc-schedulerd"
    "oc-workflow"
    "oc-workspace"
    "oc-front"
 )
 for i in "${REPOS[@]}"
 do
   echo "Building $i"
   docker kill $i | true
   docker rm $i | true
   cd ./$i 
   cp $KUBERNETES_ENV_FILE ./env.env
   docker build . -t $i --build-arg=HOST=$HOST && docker compose up -d
   cd ..
 done
--- a/docker/start.sh
+++ b/docker/start.sh
@ -1,34 +0,0 @@
 #!/bin/bash
 export KUBERNETES_ENV_FILE=$(realpath ${KUBERNETES_ENV_FILE=:-"./kube.exemple.env"})
 export HOST=${HOST:-"http://localhost:8000"}
 docker network create oc | true
 docker compose down
 cd ./tools && docker compose  -f ./docker-compose.dev.yml up --force-recreate -d
 docker compose  -f ./docker-compose.traefik.yml up --force-recreate -d  && cd ..
 cd ../..
 REPOS=(
    "oc-auth"
    "oc-catalog"
    "oc-datacenter"
    "oc-monitord"
    "oc-peer"
    "oc-shared"
    "oc-scheduler"
    "oc-schedulerd"
    "oc-workflow"
    "oc-workspace"
    "oc-front"
 )
 for i in "${REPOS[@]}"
 do
   echo "Building $i"
   docker kill $i | true
   docker rm $i | true
   cd ./$i 
   cp $KUBERNETES_ENV_FILE ./env.env
   make run-docker
   cd ..
 done
--- a/docker/stop.sh
+++ b/docker/stop.sh
@ -1,50 +0,0 @@
 #!/bin/bash
 docker network delete oc | true
 docker compose -f ./tools/docker-compose.traefik.yml down
 TOOLS=(
    "mongo"
    "mongo-express"
    "nats"
    "loki"
    "grafana"
    "hydra-client"
    "hydra"
    "keto"
    "ldap"
 )
 for i in "${TOOLS[@]}"
 do
   echo "kill $i"
   docker kill $i | true
   docker rm $i | true
 done
 docker volume rm tools_oc-data
 cd ../..
 REPOS=(
    "oc-auth"
    "oc-catalog"
    "oc-datacenter"
    "oc-monitord"
    "oc-peer"
    "oc-shared"
    "oc-scheduler"
    "oc-schedulerd"
    "oc-workflow"
    "oc-workspace"
    "oc-front"
 )
 for i in "${REPOS[@]}"
 do
   echo "Kill $i"
   cd ./$i 
   docker kill $i | true
   docker rm $i | true
   make purge | true
   cd ..
 done
--- a/docker/tools/conf/grafana_data_source.yml
+++ b/docker/tools/conf/grafana_data_source.yml
@ -1,8 +0,0 @@
 datasources:
  - name: Loki
    type: loki
    access: proxy
    url: http://loki:3100
    isDefault: true
    jsonData:
      httpMethod: POST  
--- a/docker/tools/docker-compose.dev.yml
+++ b/docker/tools/docker-compose.dev.yml
@ -1,162 +0,0 @@
 version: '3.4'
 services:
  mongo:
    image: 'mongo:latest'
    networks: 
      - oc
    ports:
      - 27017:27017
    container_name: mongo
    volumes: 
      - oc-data:/data/db
      - oc-data:/data/configdb
  mongo-express:
    image: "mongo-express:latest"
    restart: always
    depends_on: 
      - mongo
    networks: 
      - oc
    ports:
      - 8081:8081
    environment:
      - ME_CONFIG_BASICAUTH_USERNAME=test
      - ME_CONFIG_BASICAUTH_PASSWORD=test
  nats:
    image: 'nats:latest'
    container_name: nats
    ports:
      - 4222:4222
    command:
      - "--debug"
    networks: 
      - oc
  loki:
    image: 'grafana/loki'
    container_name: loki
    labels:
        - "traefik.enable=true"
        - "traefik.http.routers.loki.entrypoints=web"
        - "traefik.http.routers.loki.rule=PathPrefix(`/tools/loki`)"
        - "traefik.http.services.loki.loadbalancer.server.port=3100"
        - "traefik.http.middlewares.loki-stripprefix.stripprefix.prefixes=/tools/loki"
        - "traefik.http.routers.loki.middlewares=loki-stripprefix"
        - "traefik.http.middlewares.loki.forwardauth.address=http://oc-auth:8080/oc/forward"
    ports : 
      - "3100:3100"
    networks:
      - oc
  grafana:
    image: 'grafana/grafana'
    container_name: grafana
    ports:
      - '3000:3000'
    labels:
        - "traefik.enable=true"
        - "traefik.http.routers.grafana.entrypoints=web"
        - "traefik.http.routers.grafana.rule=PathPrefix(`/tools/grafana`)"
        - "traefik.http.services.grafana.loadbalancer.server.port=3000"
        - "traefik.http.middlewares.grafana-stripprefix.stripprefix.prefixes=/tools/grafana"
        - "traefik.http.routers.grafana.middlewares=grafana-stripprefix"
        - "traefik.http.middlewares.grafana.forwardauth.address=http://oc-auth:8080/oc/forward"
    networks:
      - oc
    volumes:
      - ./conf/grafana_data_source.yml:/etc/grafana/provisioning/datasources/datasource.yml
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=pfnirt                   # Change this to anything but admin to not have a password change page at startup
      - GF_SECURITY_ADMIN_USER=admin
      - GF_SECURITY_DISABLE_INITIAL_ADMIN_PASSWORD_CHANGE=true
  hydra:
      container_name: hydra
      image: oryd/hydra:v2.2.0
      environment:
        SECRETS_SYSTEM: oc-auth-got-secret
        LOG_LEAK_SENSITIVE_VALUES: true
        # OAUTH2_TOKEN_HOOK_URL: http://oc-auth:8080/oc/claims
        URLS_SELF_ISSUER: http://hydra:4444
        URLS_SELF_PUBLIC: http://hydra:4444
        WEBFINGER_OIDC_DISCOVERY_SUPPORTED_SCOPES: profile,email,phone,roles
        WEBFINGER_OIDC_DISCOVERY_SUPPORTED_CLAIMS: name,family_name,given_name,nickname,email,phone_number
        DSN: memory
      command: serve all --dev
      networks:
        - oc
      ports:
        - "4444:4444"
        - "4445:4445"
      deploy:
        restart_policy:
          condition: on-failure
  hydra-client: 
        image: oryd/hydra:v2.2.0
        container_name: hydra-client
        environment:
            HYDRA_ADMIN_URL: http://hydra:4445
            ORY_SDK_URL: http://hydra:4445
        command:
            - create
            - oauth2-client
            - --skip-tls-verify
            - --name
            - test-client
            - --secret
            - oc-auth-got-secret
            - --response-type
            - id_token,token,code
            - --grant-type
            - implicit,refresh_token,authorization_code,client_credentials
            - --scope
            - openid,profile,email,roles
            - --token-endpoint-auth-method
            - client_secret_post
            - --redirect-uri
            - http://localhost:3000
        networks:
            - oc
        deploy:
            restart_policy:
                condition: none
        depends_on:
            - hydra
        healthcheck:
            test: ["CMD", "curl", "-f", "http://hydra:4445"]
            interval: 10s
            timeout: 10s
            retries: 10
  ldap:
    image: pgarrett/ldap-alpine
    container_name: ldap
    volumes:  
      - "./ldap.ldif:/ldif/ldap.ldif"
    networks:
      - oc
    ports:
      - "390:389"
    deploy:
      restart_policy:
        condition: on-failure
  keto:
    image: oryd/keto:v0.7.0-alpha.1-sqlite
    ports:
      - "4466:4466"
      - "4467:4467"
    command: serve -c /home/ory/keto.yml
    restart: on-failure
    volumes:
      - type: bind
        source: .
        target: /home/ory
    container_name: keto
    networks: 
      - oc
 volumes:
  oc-data:
 networks: 
  oc:
    external: true
--- a/docker/tools/docker-compose.traefik.yml
+++ b/docker/tools/docker-compose.traefik.yml
@ -1,24 +0,0 @@
 version: '3.4'
 services:
  traefik:
    image: traefik:v2.10.4
    container_name: traefik
    restart: unless-stopped
    networks:
      - oc
    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--entrypoints.web.address=:8000"
    ports:
      - "8000:8000"  # Expose Traefik on port 8000    
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
 volumes:
  oc-data:
 networks: 
  oc:
    external: true
--- a/docker/tools/keto.yml
+++ b/docker/tools/keto.yml
@ -1,18 +0,0 @@
 version: v0.6.0-alpha.1
 log:
  level: debug
 namespaces:
  - id: 0
    name: open-cloud
 dsn: memory
 serve:
  read:
    host: 0.0.0.0
    port: 4466
  write:
    host: 0.0.0.0
    port: 4467
--- a/docker/tools/ldap.ldif
+++ b/docker/tools/ldap.ldif
@ -1,24 +0,0 @@
 dn: uid=admin,ou=Users,dc=example,dc=com
 objectClass: inetOrgPerson
 cn: Admin
 sn: Istrator
 uid: admin
 userPassword: admin
 mail: admin@example.com
 ou: Users
 dn: ou=AppRoles,dc=example,dc=com
 objectClass: organizationalunit
 ou: AppRoles
 description: AppRoles
 dn: ou=App1,ou=AppRoles,dc=example,dc=com
 objectClass: organizationalunit
 ou: App1
 description: App1
 dn: cn=traveler,ou=App1,ou=AppRoles,dc=example,dc=com
 objectClass: groupofnames
 cn: traveler
 description: traveler
 member: uid=admin,ou=Users,dc=example,dc=com
--- a/docs/diagrams/src/oc-kube.puml
+++ b/docs/diagrams/src/oc-kube.puml
@ -0,0 +1,207 @@
@startuml
 skinparam componentStyle rectangle
 node "Kubernetes Cluster" {
  cloud "Service: oc-catalog" as oc_catalog_service {
    oc_catalog_service : Type: NodePort
    oc_catalog_service : External NodePort: 8087  # Exposed NodePort for external access
    oc_catalog_service : Internal TargetPort: 8080
  }
  ' Deployment for oc-catalog managing the pods
  node "Deployment: oc-catalog" as oc_catalog_deployment {
    oc_catalog_deployment : Replicas: {{ .Values.replicaCount }}
    oc_catalog_deployment : Image: registry.dev.svc.cluster.local:5000/oc-catalog:latest
    oc_catalog_deployment : PullPolicy: IfNotPresent
    oc_catalog_deployment : TargetPort: 8080
    node "Pod: oc-catalog-1" as catalog_1 {
      component "Container: oc-catalog" as oc_catalog_container1 {
        oc_catalog_container1 : Internal Port: 8080
        oc_catalog_container1 : MONGO_DATABASE=DC_myDC
        oc_catalog_container1 : MONGO_URI=mongodb://mongo:27017
      }
    }
  }
  oc_catalog_service --> oc_catalog_deployment : Routes traffic to Deployment
  oc_catalog_deployment --> catalog_1 : Manages Pods
  ' MongoDB service and statefulset
  cloud "Service: mongo" as mongo_service {
    mongo_service : Type: ClusterIP
    mongo_service : Internal Port: 27017
  }
  catalog_1 --> mongo_service : Connects to MongoDB
  cloud "Service: oc-shared" as oc_shared_service {
    oc_shared_service : Type: NodePort
    oc_shared_service : External NodePort: 8091  # Exposed NodePort for external access
    oc_shared_service : Internal TargetPort: 8080
  }
  ' Deployment for oc-shared managing the pods
  node "Deployment: oc-shared" as oc_shared_deployment {
    oc_shared_deployment : Replicas: {{ .Values.replicaCount }}
    oc_shared_deployment : Image: registry.dev.svc.cluster.local:5000/oc-shared:latest
    oc_shared_deployment : PullPolicy: IfNotPresent
    oc_shared_deployment : TargetPort: 8080
    node "Pod: oc-shared-1" as shared_1 {
      component "Container: oc-shared" as oc_shared_container1 {
        oc_shared_container1 : Internal Port: 8080
        oc_shared_container1 : MONGO_DATABASE=DC_myDC
        oc_shared_container1 : MONGO_URI=mongodb://mongo:27017
      }
    }
  }
  oc_shared_service --> oc_shared_deployment : Routes traffic to Deployment
  oc_shared_deployment --> shared_1 : Manages Pods
  ' MongoDB service and statefulset
  cloud "Service: mongo" as mongo_service {
    mongo_service : Type: ClusterIP
    mongo_service : Internal Port: 27017
  }
  shared_1 --> mongo_service : Connects to MongoDB
  cloud "Service: oc-workflow" as oc_workflow_service {
    oc_workflow_service : Type: NodePort
    oc_workflow_service : External NodePort: 8088  # Exposed NodePort for external access
    oc_workflow_service : Internal TargetPort: 8080
  }
  ' Deployment for oc-workflow managing the pods
  node "Deployment: oc-workflow" as oc_workflow_deployment {
    oc_workflow_deployment : Replicas: {{ .Values.replicaCount }}
    oc_workflow_deployment : Image: registry.dev.svc.cluster.local:5000/oc-workflow:latest
    oc_workflow_deployment : PullPolicy: IfNotPresent
    oc_workflow_deployment : TargetPort: 8080
    node "Pod: oc-workflow-1" as workflow_1 {
      component "Container: oc-workflow" as oc_workflow_container1 {
        oc_workflow_container1 : Internal Port: 8080
        oc_workflow_container1 : MONGO_DATABASE=DC_myDC
        oc_workflow_container1 : MONGO_URI=mongodb://mongo:27017
      }
    }
  }
  oc_workflow_service --> oc_workflow_deployment : Routes traffic to Deployment
  oc_workflow_deployment --> workflow_1 : Manages Pods
  ' MongoDB service and statefulset
  cloud "Service: mongo" as mongo_service {
    mongo_service : Type: ClusterIP
    mongo_service : Internal Port: 27017
  }
  workflow_1 --> mongo_service : Connects to MongoDB
  cloud "Service: oc-workspace" as oc_workspace_service {
    oc_workspace_service : Type: NodePort
    oc_workspace_service : External NodePort: 8089  # Exposed NodePort for external access
    oc_workspace_service : Internal TargetPort: 8080
  }
  ' Deployment for oc-workspace managing the pods
  node "Deployment: oc-workspace" as oc_workspace_deployment {
    oc_workspace_deployment : Replicas: {{ .Values.replicaCount }}
    oc_workspace_deployment : Image: registry.dev.svc.cluster.local:5000/oc-workspace:latest
    oc_workspace_deployment : PullPolicy: IfNotPresent
    oc_workspace_deployment : TargetPort: 8080
    node "Pod: oc-workspace-1" as workspace_1 {
      component "Container: oc-workspace" as oc_workspace_container1 {
        oc_workspace_container1 : Internal Port: 8080
        oc_workspace_container1 : MONGO_DATABASE=DC_myDC
        oc_workspace_container1 : MONGO_URI=mongodb://mongo:27017
      }
    }
  }
  oc_workspace_service --> oc_workspace_deployment : Routes traffic to Deployment
  oc_workspace_deployment --> workspace_1 : Manages Pods
  cloud "Service: oc-scheduler" as oc_scheduler_service {
    oc_scheduler_service : Type: NodePort
    oc_scheduler_service : External NodePort: 8090  # Exposed NodePort for external access
    oc_scheduler_service : Internal TargetPort: 8080
  }
  ' Deployment for oc-scheduler managing the pods
  node "Deployment: oc-scheduler" as oc_scheduler_deployment {
    oc_scheduler_deployment : Replicas: {{ .Values.replicaCount }}
    oc_scheduler_deployment : Image: registry.dev.svc.cluster.local:5000/oc-scheduler:latest
    oc_scheduler_deployment : PullPolicy: IfNotPresent
    oc_scheduler_deployment : TargetPort: 8080
    node "Pod: oc-scheduler-1" as scheduler_1 {
      component "Container: oc-scheduler" as oc_scheduler_container1 {
        oc_scheduler_container1 : Internal Port: 8080
        oc_scheduler_container1 : MONGO_DATABASE=DC_myDC
        oc_scheduler_container1 : MONGO_URI=mongodb://mongo:27017
      }
    }
  }
  oc_scheduler_service --> oc_scheduler_deployment : Routes traffic to Deployment
  oc_scheduler_deployment --> scheduler_1 : Manages Pods
  ' MongoDB service and statefulset
  cloud "Service: mongo" as mongo_service {
    mongo_service : Type: ClusterIP
    mongo_service : Internal Port: 27017
  }
  scheduler_1 --> mongo_service : Connects to MongoDB
  ' MongoDB service and statefulset
  cloud "Service: mongo" as mongo_service {
    mongo_service : Type: ClusterIP
    mongo_service : Internal Port: 27017
  }
  ' MongoDB StatefulSet with PVC and PV
  node "StatefulSet: MongoDB" as mongo_statefulset {
    component " Pod: MongoDB" as mongo_pod{
    component "Container: MongoDB" as mongo_container {
      mongo_container : Image: mongo:latest
      mongo_container : PullPolicy: IfNotPresent
      mongo_container : Exposed Port: 27017
      mongo_container : Volume Mount: /data/db
      mongo_container : Volume Mount: /data/configdb
      mongo_container : Secret: username, password (base64)
    }
  }
    storage "PersistentVolumeClaim: mongo-pvc" as mongo_PVC {
      mongo_pvc : Access Mode: ReadWriteOnce
      mongo_pvc : Size: 1Gi
      mongo_pvc : Storage Class: {{ .Values.persistence.storageClass }}
    }
  }
  storage "PersistentVolume: PV" as mongo_PV {
        mongo_pv : Bound to PVC: mongo-pvc
      }
  mongo_service --> mongo_statefulset : Routes traffic to MongoDB StatefulSet
  mongo_pod --> mongo_PVC : Mounted Persistent Volume Claim
  mongo_pvc --> mongo_PV : Bound Persistent Volume
  workspace_1 --> mongo_service : Connects to MongoDB
 }
@enduml
--- a/env.env
+++ b/env.env
@ -1,4 +0,0 @@
 KUBERNETES_SERVICE_HOST=192.168.1.169
 KUBE_CA="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"
 KUBE_CERT="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"
 KUBE_DATA="LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU5ZS1BFb1dhd1NKUzJlRW5oWmlYMk5VZlY1ZlhKV2krSVNnV09TNFE5VTlvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFVUozblJZN0tCNEtUWUx0WnFUMS96VS84a0Z2Sk1lUGhYMm1Vc25pczBiR3FZblkyaVZEeApYVzR2SVhTYjNqcm9iZ1YwSUtDT0twUWs2OHJEbE03ckRBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo="
--- a/k8s/README.md
+++ b/k8s/README.md
@ -1,46 +0,0 @@
 ## Deploy the opencloud chart
 ```
 ./start.sh <mode: dev|prod default:dev> <branche | default:main> 
 ```
 Feel free to modify/create a new opencloud/dev-values.yaml. Provided setup should work out of the box, but is not suitable for production usage.
 ## Hostname settings
 Edit your /etc/hosts file, and add following line:
 ```
 127.0.0.1 beta.opencloud.com
 ```
 ## Done
 Everything should be operational now, go to http://beta.opencloud.com and enjoy the ride
 # Prebuilt microservices deployment procedure
 TODO
 # First steps
 Go to http://beta.opencloud.com/users
 Log in using default user/password combo ldapadmin/ldapadmin
 Create a new user, or change the default one
 Go to http://beta.opencloud.com
 Log in using your fresh credentials
 Do stuff
 You can go to http://beta.opencloud.com/mongoexpress
 ... for mongo express web client access (default login/password is test/testme)
 You can go to http://localhost/dashboard/
 ... for access to Traefik reverse proxy front-end
--- a/k8s/start.sh
+++ b/k8s/start.sh
@ -1,21 +0,0 @@
 #!/bin/bash
 mode=${1:-dev}
 branch=${2:-main}
 cd ../..
 if [ ! -d "oc-k8s" ]; then
    echo "Cloning repository: $repo_name"
    git clone "https://cloud.o-forge.io/core/oc-k8s.git"
    if [ $? -ne 0 ]; then
        echo "Error cloning oc-k8s"
        exit 1
    fi
 fi
 echo "Repository 'oc-k8s' already exists. Pulling latest changes..."
 cd "oc-k8s" && git checkout $branch && git pull
 ./create_kind_cluster.sh
 ./clone_opencloud_microservices.sh  $branch
 ./build_opencloud_microservices.sh
 ./install.sh $mode
--- a/k8s/stop.sh
+++ b/k8s/stop.sh
@ -1,20 +0,0 @@
 #!/bin/bash
 mode=${1:-dev}
 branch=${2:-main}
 cd ../..
 if [ ! -d "oc-k8s" ]; 
    echo "Cloning repository: $repo_name"
    git clone "https://cloud.o-forge.io/core/oc-k8s.git"
    if [ $? -ne 0 ]; then
        echo "Error cloning oc-k8s"
        exit 1
    fi
 fi
 echo "Repository 'oc-k8s' already exists. Pulling latest changes..."
 cd "oc-k8s" && git checkout $branch && git pull
 ./uninstall.sh $mode
 ./delete_kind_cluster.sh
--- a/vanilla/README.md
+++ b/vanilla/README.md
@ -1,7 +0,0 @@
 # RUN 
 - `./start.sh <YOUR INTERNET IP>`
 Now reach localhost:8000
 # STOP
 - `./stop.sh`
--- a/vanilla/start.sh
+++ b/vanilla/start.sh
@ -1,38 +0,0 @@
 #!/bin/bash
 echo "Stopping all services..."
 ./stop.sh > /dev/null 2>&1
 echo "Starting all services"
 cp ./traefik-dev-reverse/template_dynamic.yml ./traefik-dev-reverse/dynamic.yml
 sed -i "s/localhost/$1/g" ./traefik-dev-reverse/dynamic.yml
 docker network create oc | true
 cd ./tools && docker compose -f ./docker-compose.dev.yml up --force-recreate -d
 cd .. && docker compose -f ./traefik-dev-reverse/docker-compose.yml up --force-recreate -d
 cd ../..
 REPOS=(
    "oc-auth"
    "oc-catalog"
    "oc-datacenter"
    "oc-monitord"
    "oc-peer"
    "oc-shared"
    "oc-scheduler"
    "oc-schedulerd"
    "oc-workflow"
    "oc-workspace"
    "oc-front"
 )
 for i in "${REPOS[@]}"
 do
   echo "Building $i"
   cd ./$i 
   make dev HOST="${2:-http://localhost:8000}" &
   cd ..
 done
--- a/vanilla/stop.sh
+++ b/vanilla/stop.sh
@ -1,47 +0,0 @@
 #!/bin/bash
 docker network delete oc | true
 docker compose -f ./traefik-dev-reverse/docker-compose.yml rm -s -v -f
 TOOLS=(
    "mongo"
    "mongo-express"
    "nats"
    "loki"
    "grafana"
    "keto"
    "ldap"
 )
 for i in "${TOOLS[@]}"
 do
   echo "kill $i"
   docker kill $i | true
   docker rm $i | true
 done
 cd ../..
 REPOS=(
    "oc-auth"
    "oc-catalog"
    "oc-datacenter"
    "oc-monitord"
    "oc-peer"
    "oc-shared"
    "oc-scheduler"
    "oc-schedulerd"
    "oc-workflow"
    "oc-workspace"
    "oc-front"
 )
 for i in "${REPOS[@]}"
 do
   echo "kill $i"
   docker kill $i | true
   docker rm $i | true
   cd ./$i 
   make purge | true
   cd ..
 done
--- a/vanilla/tools/docker-compose.dev.yml
+++ b/vanilla/tools/docker-compose.dev.yml
@ -1,104 +0,0 @@
 version: '3.4'
 services:
  mongo:
    image: 'mongo:latest'
    networks: 
      - oc
    ports:
      - 27017:27017
    container_name: mongo
    volumes: 
      - oc-data:/data/db
      - oc-data:/data/configdb
  mongo-express:
    image: "mongo-express:latest"
    restart: always
    depends_on: 
      - mongo
    networks: 
      - oc
    ports:
      - 8081:8081
    environment:
      - ME_CONFIG_BASICAUTH_USERNAME=test
      - ME_CONFIG_BASICAUTH_PASSWORD=test
  nats:
    image: 'nats:latest'
    container_name: nats
    ports:
      - 4222:4222
    command:
      - "--debug"
    networks: 
      - oc
  loki:
    image: 'grafana/loki'
    container_name: loki
    labels:
        - "traefik.enable=true"
        - "traefik.http.routers.loki.entrypoints=web"
        - "traefik.http.routers.loki.rule=PathPrefix(`/tools/loki`)"
        - "traefik.http.services.loki.loadbalancer.server.port=3100"
        - "traefik.http.middlewares.loki-stripprefix.stripprefix.prefixes=/tools/loki"
        - "traefik.http.routers.loki.middlewares=loki-stripprefix"
        - "traefik.http.middlewares.loki.forwardauth.address=http://localhost:8094/oc/forward"
    ports : 
      - "3100:3100"
    networks:
      - oc
  grafana:
    image: 'grafana/grafana'
    container_name: grafana
    ports:
      - '3000:3000'
    labels:
        - "traefik.enable=true"
        - "traefik.http.routers.grafana.entrypoints=web"
        - "traefik.http.routers.grafana.rule=PathPrefix(`/tools/grafana`)"
        - "traefik.http.services.grafana.loadbalancer.server.port=3000"
        - "traefik.http.middlewares.grafana-stripprefix.stripprefix.prefixes=/tools/grafana"
        - "traefik.http.routers.grafana.middlewares=grafana-stripprefix"
        - "traefik.http.middlewares.grafana.forwardauth.address=http://localhost:8094/oc/forward"
    networks:
      - oc
    volumes:
      - ./conf/grafana_data_source.yml:/etc/grafana/provisioning/datasources/datasource.yml
    environment:
      - GF_SECURITY_ADMIN_PASSWORD=pfnirt                   # Change this to anything but admin to not have a password change page at startup
      - GF_SECURITY_ADMIN_USER=admin
      - GF_SECURITY_DISABLE_INITIAL_ADMIN_PASSWORD_CHANGE=true
  ldap:
    image: pgarrett/ldap-alpine
    container_name: ldap
    volumes:  
      - "./ldap.ldif:/ldif/ldap.ldif"
    networks:
      - oc
    ports:
      - "390:389"
    deploy:
      restart_policy:
        condition: on-failure
  keto:
    image: oryd/keto:v0.7.0-alpha.1-sqlite
    ports:
      - "4466:4466"
      - "4467:4467"
    command: serve -c /home/ory/keto.yml
    restart: on-failure
    volumes:
      - type: bind
        source: .
        target: /home/ory
    container_name: keto
    networks: 
      - oc
 volumes:
  oc-data:
 networks: 
  oc:
    external: true
--- a/vanilla/tools/keto.yml
+++ b/vanilla/tools/keto.yml
@ -1,18 +0,0 @@
 version: v0.6.0-alpha.1
 log:
  level: debug
 namespaces:
  - id: 0
    name: open-cloud
 dsn: memory
 serve:
  read:
    host: 0.0.0.0
    port: 4466
  write:
    host: 0.0.0.0
    port: 4467
--- a/vanilla/tools/ldap.ldif
+++ b/vanilla/tools/ldap.ldif
@ -1,24 +0,0 @@
 dn: uid=admin,ou=Users,dc=example,dc=com
 objectClass: inetOrgPerson
 cn: Admin
 sn: Istrator
 uid: admin
 userPassword: admin
 mail: admin@example.com
 ou: Users
 dn: ou=AppRoles,dc=example,dc=com
 objectClass: organizationalunit
 ou: AppRoles
 description: AppRoles
 dn: ou=App1,ou=AppRoles,dc=example,dc=com
 objectClass: organizationalunit
 ou: App1
 description: App1
 dn: cn=traveler,ou=App1,ou=AppRoles,dc=example,dc=com
 objectClass: groupofnames
 cn: traveler
 description: traveler
 member: uid=admin,ou=Users,dc=example,dc=com
--- a/vanilla/traefik-dev-reverse/docker-compose.yml
+++ b/vanilla/traefik-dev-reverse/docker-compose.yml
@ -1,13 +0,0 @@
 version: '3.8'
 services:
  traefik:
    image: traefik:v3.0
    container_name: traefik
    restart: always
    ports:
      - "8000:8000"  # Expose Traefik on port 8000
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock"
      - "./traefik.yml:/etc/traefik/traefik.yml"
      - "./dynamic.yml:/etc/traefik/dynamic.yml"
--- a/vanilla/traefik-dev-reverse/dynamic.yml
+++ b/vanilla/traefik-dev-reverse/dynamic.yml
@ -1,164 +0,0 @@
 http:
  routers:
    workspace-router:
      rule: "PathPrefix(`/workspace`)"
      entryPoints:
        - "web"
      service: workspace-service
      middlewares:
        - replace-workspace
    workflow-router:
      rule: "PathPrefix(`/workflow`)"
      entryPoints:
        - "web"
      service: workflow-service
      middlewares:
        - replace-workflow
    shared-router:
      rule: "PathPrefix(`/shared`)"
      entryPoints:
        - "web"
      service: shared-service
      middlewares:
        - replace-shared
    scheduler-router:
      rule: "PathPrefix(`/scheduler`)"
      entryPoints:
        - "web"
      service: scheduler-service
      middlewares:
        - replace-scheduler
    peer-router:
      rule: "PathPrefix(`/peer`)"
      entryPoints:
        - "web"
      service: peer-service
      middlewares:
        - replace-peer
    datacenter-router:
      rule: "PathPrefix(`/datacenter`)"
      entryPoints:
        - "web"
      service: datacenter-service
      middlewares:
        - replace-datacenter
    catalog-router:
      rule: "PathPrefix(`/catalog`)"
      entryPoints:
        - "web"
      service: catalog-service
      middlewares:
        - replace-catalog
    auth-router:
      rule: "PathPrefix(`/auth`)"
      entryPoints:
        - "web"
      service: auth-service
      middlewares:
        - replace-auth
    front-router:
      rule: "PathPrefix(`/`)"
      entryPoints:
        - "web"
      service: front-service
      middlewares:
        - replace-front
  services:
    workspace-service:
      loadBalancer:
        servers:
          - url: "http://192.168.1.169:8089"
    workflow-service:
      loadBalancer:
        servers:
          - url: "http://192.168.1.169:8088"
    shared-service:
      loadBalancer:
        servers:
          - url: "http://192.168.1.169:8091"
    scheduler-service:
      loadBalancer:
        servers:
          - url: "http://192.168.1.169:8090"
    peer-service:
      loadBalancer:
        servers:
          - url: "http://192.168.1.169:8093"
    datacenter-service:
      loadBalancer:
        servers:
          - url: "http://192.168.1.169:8092"
    catalog-service:
      loadBalancer:
        servers:
          - url: "http://192.168.1.169:8087"
    auth-service:
      loadBalancer:
        servers:
          - url: "http://192.168.1.169:8094"
    front-service:
      loadBalancer:
        servers:
          - url: "http://192.168.1.169:8080"
  middlewares:
    workspace: 
      forwardauth: 
        address: "http://192.168.1.169:8094/oc/forward"
    workflow: 
      forwardauth: 
        address: "http://192.168.1.169:8094/oc/forward"
    shared: 
      forwardauth: 
        address: "http://192.168.1.169:8094/oc/forward"
    scheduler: 
      forwardauth: 
        address: "http://192.168.1.169:8094/oc/forward"
    peer: 
      forwardauth: 
        address: "http://192.168.1.169:8094/oc/forward"
    datacenter: 
      forwardauth: 
        address: "http://192.168.1.169:8094/oc/forward"
    catalog: 
      forwardauth: 
        address: "http://192.168.1.169:8094/oc/forward"
    auth: 
      forwardauth: 
        address: "http://192.168.1.169:8094/oc/forward"
    replace-workspace:
      replacePathRegex:
        regex: "^/workspace(.*)"
        replacement: "/oc$1"
    replace-workflow:
      replacePathRegex:
        regex: "^/workflow(.*)"
        replacement: "/oc$1"
    replace-shared:
      replacePathRegex:
        regex: "^/shared(.*)"
        replacement: "/oc$1"
    replace-scheduler:
      replacePathRegex:
        regex: "^/scheduler(.*)"
        replacement: "/oc$1"
    replace-peer:
      replacePathRegex:
        regex: "^/peer(.*)"
        replacement: "/oc$1"
    replace-datacenter:
      replacePathRegex:
        regex: "^/datacenter(.*)"
        replacement: "/oc$1"
    replace-catalog:
      replacePathRegex:
        regex: "^/catalog(.*)"
        replacement: "/oc$1"
    replace-auth:
      replacePathRegex:
        regex: "^/auth(.*)"
        replacement: "/oc$1"
    replace-front:
      stripprefix:
        prefixes: "/"
--- a/vanilla/traefik-dev-reverse/template_dynamic.yml
+++ b/vanilla/traefik-dev-reverse/template_dynamic.yml
@ -1,164 +0,0 @@
 http:
  routers:
    workspace-router:
      rule: "PathPrefix(`/workspace`)"
      entryPoints:
        - "web"
      service: workspace-service
      middlewares:
        - replace-workspace
    workflow-router:
      rule: "PathPrefix(`/workflow`)"
      entryPoints:
        - "web"
      service: workflow-service
      middlewares:
        - replace-workflow
    shared-router:
      rule: "PathPrefix(`/shared`)"
      entryPoints:
        - "web"
      service: shared-service
      middlewares:
        - replace-shared
    scheduler-router:
      rule: "PathPrefix(`/scheduler`)"
      entryPoints:
        - "web"
      service: scheduler-service
      middlewares:
        - replace-scheduler
    peer-router:
      rule: "PathPrefix(`/peer`)"
      entryPoints:
        - "web"
      service: peer-service
      middlewares:
        - replace-peer
    datacenter-router:
      rule: "PathPrefix(`/datacenter`)"
      entryPoints:
        - "web"
      service: datacenter-service
      middlewares:
        - replace-datacenter
    catalog-router:
      rule: "PathPrefix(`/catalog`)"
      entryPoints:
        - "web"
      service: catalog-service
      middlewares:
        - replace-catalog
    auth-router:
      rule: "PathPrefix(`/auth`)"
      entryPoints:
        - "web"
      service: auth-service
      middlewares:
        - replace-auth
    front-router:
      rule: "PathPrefix(`/`)"
      entryPoints:
        - "web"
      service: front-service
      middlewares:
        - replace-front
  services:
    workspace-service:
      loadBalancer:
        servers:
          - url: "http://localhost:8089"
    workflow-service:
      loadBalancer:
        servers:
          - url: "http://localhost:8088"
    shared-service:
      loadBalancer:
        servers:
          - url: "http://localhost:8091"
    scheduler-service:
      loadBalancer:
        servers:
          - url: "http://localhost:8090"
    peer-service:
      loadBalancer:
        servers:
          - url: "http://localhost:8093"
    datacenter-service:
      loadBalancer:
        servers:
          - url: "http://localhost:8092"
    catalog-service:
      loadBalancer:
        servers:
          - url: "http://localhost:8087"
    auth-service:
      loadBalancer:
        servers:
          - url: "http://localhost:8094"
    front-service:
      loadBalancer:
        servers:
          - url: "http://localhost:8080"
  middlewares:
    workspace: 
      forwardauth: 
        address: "http://localhost:8094/oc/forward"
    workflow: 
      forwardauth: 
        address: "http://localhost:8094/oc/forward"
    shared: 
      forwardauth: 
        address: "http://localhost:8094/oc/forward"
    scheduler: 
      forwardauth: 
        address: "http://localhost:8094/oc/forward"
    peer: 
      forwardauth: 
        address: "http://localhost:8094/oc/forward"
    datacenter: 
      forwardauth: 
        address: "http://localhost:8094/oc/forward"
    catalog: 
      forwardauth: 
        address: "http://localhost:8094/oc/forward"
    auth: 
      forwardauth: 
        address: "http://localhost:8094/oc/forward"
    replace-workspace:
      replacePathRegex:
        regex: "^/workspace(.*)"
        replacement: "/oc$1"
    replace-workflow:
      replacePathRegex:
        regex: "^/workflow(.*)"
        replacement: "/oc$1"
    replace-shared:
      replacePathRegex:
        regex: "^/shared(.*)"
        replacement: "/oc$1"
    replace-scheduler:
      replacePathRegex:
        regex: "^/scheduler(.*)"
        replacement: "/oc$1"
    replace-peer:
      replacePathRegex:
        regex: "^/peer(.*)"
        replacement: "/oc$1"
    replace-datacenter:
      replacePathRegex:
        regex: "^/datacenter(.*)"
        replacement: "/oc$1"
    replace-catalog:
      replacePathRegex:
        regex: "^/catalog(.*)"
        replacement: "/oc$1"
    replace-auth:
      replacePathRegex:
        regex: "^/auth(.*)"
        replacement: "/oc$1"
    replace-front:
      stripprefix:
        prefixes: "/"
--- a/vanilla/traefik-dev-reverse/traefik.yml
+++ b/vanilla/traefik-dev-reverse/traefik.yml
@ -1,8 +0,0 @@
 entryPoints:
  web:
    address: ":8000"  # Single entry point for all requests
 providers:
  file:
    filename: "/etc/traefik/dynamic.yml"
    watch: true
Author	SHA1	Message	Date
na	864ff3baba	chore: Remove unused Helm charts and Kubernetes components	2024-09-12 16:17:52 +02:00
na	d2f602bf79	Update Deployment and statefulSet	2024-09-07 01:37:07 +02:00
		`@ -1 +0,0 @@`
			[{"_id":"0b6a375f-be3e-49a9-9827-3c2d5eddb057","abstractobject":{"id":"0b6a375f-be3e-49a9-9827-3c2d5eddb057","name":"test","is_draft":false,"creator_id":"c0cece97-7730-4c2a-8c20-a30944564106","creation_date":{"$date":"2025-01-27T10:41:47.741Z"},"update_date":{"$date":"2025-01-27T10:41:47.741Z"},"updater_id":"c0cece97-7730-4c2a-8c20-a30944564106","access_mode":0},"description":"Proto Collaborative area example","collaborative_area":{},"workflows":["58314c99-c595-4ca2-8b5e-822a6774efed"],"allowed_peers_group":{"c0cece97-7730-4c2a-8c20-a30944564106":["*"]},"workspaces":[]}]
		`@ -1 +0,0 @@`
			[{"_id":"c0cece97-7730-4c2a-8c20-a30944564106","failed_execution":null,"abstractobject":{"update_date":{"$date":"2025-03-27T09:13:13.230Z"},"access_mode":0,"id":"c0cece97-7730-4c2a-8c20-a30944564106","name":"local","is_draft":false,"creation_date":{"$date":"2025-03-27T09:13:13.230Z"}},"url":"http://localhost:8000","wallet_address":"my-wallet","public_key":"-----BEGIN RSA PUBLIC KEY-----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\n-----END RSA PUBLIC KEY-----\n","state":1}]
		`@ -1 +0,0 @@`
			[{"_id":"04bc70b5-8d7b-44e6-9015-fadfa0fb102d","abstractinstanciatedresource":{"abstractresource":{"type":"storage","abstractobject":{"id":"04bc70b5-8d7b-44e6-9015-fadfa0fb102d","name":"IRT risk database","is_draft":false,"creator_id":"c0cece97-7730-4c2a-8c20-a30944564106","creation_date":"2021-09-30T14:00:00.000Z","update_date":"2021-09-30T14:00:00.000Z","updater_id":"c0cece97-7730-4c2a-8c20-a30944564106","access_mode":1},"logo":"https://cloud.o-forge.io/core/deperecated-oc-catalog/raw/branch/main/scripts/local_imgs/IRT risk database.png","description":"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.","short_description":"S3 compliant IRT file storage","owners":[{"name":"IRT"}]},"instances":[{"env":[{"attr":"source","readonly":true}],"resourceinstance":{"abstractobject":{"id":"7fdccb9c-7090-40a5-bacd-7435bc56c90d","name":"IRT local file storage Marseille"},"location":{"latitude":50.62925,"longitude":3.057256},"country":250,"partnerships":[{"resourcepartnership":{"namespace":"default","peer_groups":{"c0cece97-7730-4c2a-8c20-a30944564106":[""]},"pricing_profiles":[{"pricing":{"price":50,"currency":"EUR","buying_strategy":0,"time_pricing_strategy":0}}]}}]},"source":"/mnt/vol","local":false,"security_level":"public","size":50,"size_type":3,"redundancy":"RAID5","throughput":"r:200,w:150"}]},"storage_type":5,"acronym":"DC_myDC"},{"_id":"e726020a-b68e-4abc-ab36-c3640ea3f557","abstractinstanciatedresource":{"abstractresource":{"type":"storage","abstractobject":{"id":"e726020a-b68e-4abc-ab36-c3640ea3f557","name":"IRT local file storage","is_draft":false,"creator_id":"c0cece97-7730-4c2a-8c20-a30944564106","creation_date":"2021-09-30T14:00:00.000Z","update_date":"2021-09-30T14:00:00.000Z","updater_id":"c0cece97-7730-4c2a-8c20-a30944564106","access_mode":1},"logo":"https://cloud.o-forge.io/core/deperecated-oc-catalog/raw/branch/main/scripts/local_imgs/IRT local file storage.png","description":"Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.","short_description":"S3 compliant IRT file storage","owners":[{"name":"IRT"}]},"instances":[{"resourceinstance":{"env":[{"attr":"source","readonly":true}],"abstractobject":{"id":"7fdccb9c-7090-40a5-bacd-7435bc56c90d","name":"IRT local file storage Marseille"},"location":{"latitude":50.62925,"longitude":3.057256},"country":250,"partnerships":[{"resourcepartnership":{"namespace":"default","peer_groups":{"c0cece97-7730-4c2a-8c20-a30944564106":[""]},"pricing_profiles":[{"pricing":{"price":50,"currency":"EUR","buying_strategy":0,"time_pricing_strategy":0}}]}}]},"source":"/mnt/vol","local":true,"security_level":"public","size":500,"size_type":0,"encryption":true,"redundancy":"RAID5S","throughput":"r:300,w:350"}]},"storage_type":5,"acronym":"DC_myDC"}]