ThomasVitale

#@ load("@ytt:data", "data")
#@ load("@ytt:overlay", "overlay")
#@ load("/config.star", "get_ca_certificates")

#@ if data.values.ca_cert_data != "":

#@yaml/text-templated-strings
---
apiVersion: v1
kind: Secret

ThomasVitale

#@data/values-schema
---
service:
  enabled: true

ThomasVitale

apiVersion: apps/v1
kind: Deployment
metadata:
  name: tekton-pipelines-controller
  namespace: tekton-pipelines
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: controller
      app.kubernetes.io/component: controller

ThomasVitale

package com.thomasvitale.keycloak.controller;

import com.thomasvitale.keycloak.repository.BookRepository;
import org.keycloak.KeycloakSecurityContext;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Controller;
import org.springframework.ui.Model;
import org.springframework.web.bind.annotation.GetMapping;

import javax.servlet.ServletException;

ThomasVitale

import com.sun.org.apache.regexp.internal.RE;
import org.jboss.resteasy.client.jaxrs.ResteasyClientBuilder;
import org.keycloak.admin.client.Keycloak;
import org.keycloak.admin.client.KeycloakBuilder;
import org.keycloak.admin.client.resource.UserResource;
import org.keycloak.admin.client.resource.UsersResource;
import org.keycloak.representations.idm.CredentialRepresentation;
import org.keycloak.representations.idm.UserRepresentation;

import java.util.Arrays;

ThomasVitale

# Imgpkg => https://carvel.dev/imgpkg
imgpkg copy \
  -i docker.io/thomasvitale/book-service:1.0 \
  --to-repo ghcr.io/thomasvitale/book-service \
  --cosign-signatures

# Skopeo => https://github.com/containers/skopeo
skopeo copy \
  docker://docker.io/thomasvitale/book-service:1.0 \
  docker://quay.io/thomasvitale/book-service:1.0

ThomasVitale

#@data/values
---
config-contour:
  timeouts:
    connection-idle-timeout: 30s
    stream-idle-timeout: 2m
  disablePermitInsecure: true

ThomasVitale

#@data/values
---
config-features:
  secure-pod-defaults: "enabled"

ThomasVitale

@Configuration
public class ConnectorConfig {
  
  @Bean
  public EmbeddedServletContainerFactory servletContainer() {
    TomcatEmbeddedServletContainerFactory tomcat = new TomcatEmbeddedServletContainerFactory() {
      @Override
      protected void postProcessContext(Context context) {
        SecurityConstraint securityConstraint = new SecurityConstraint();
        securityConstraint.setUserConstraint("CONFIDENTIAL");

ThomasVitale

package com.thomasvitale.application;

import com.thomasvitale.application.multitenancy.TenantContext;
import org.junit.jupiter.api.Test;

import java.util.concurrent.ExecutorService;
import java.util.concurrent.Executors;

public class ThreadTest {