Prepare release 1.0.0-rc.10.

VERSION.md

@@ -2,10 +2,10 @@
 
 ### Latest Release
 
-Latest release is `1.0.0-rc.9` (July 31st 2019)
+Latest release is `1.0.0-rc.10` (Nov 7th 2019)
 
 ### Next Release
 
-Next release will be `1.0.0-rc.10`.
+Next release will be `1.0.0-rc.11`.
 
 We recommend using the release candidate.

doc/release-notes.md

@@ -14,6 +14,32 @@ Official Release of the API Portal.
 
 ## 1.0.0 (release candidates)
 
+### 1.0.0-rc.10 - Notable changes
+
+Motto: **Some new features and enhancements**
+
+The latest releases have been very stable, and thus there has not been many emergency fixes to do in the last three months. On the other hand, quite some things have been going on under the hood which are now ready to be released. Further, we have seen some issues with managed Postgres services which are a little picky how you establish and tear down Postgres connections; there is now a way to influence that a little bit better, plus the Prometheus metrics with regard to this have been improved.
+
+Contributions by:
+
+* [Iblis](https://github.com/Iblis)
+* [MibenCoop](https://github.com/MibenCoop)
+* [santokhsingh](https://github.com/santokhsingh)
+* [Jabb0](https://github.com/Jabb0)
+* [DonMartin76](https://github.com/DonMartin76)
+
+Thank you so much!
+
+Here are the changes in detail:
+
+* [Approver rights currently superseding Admin rights](https://github.com/Haufe-Lexware/wicked.haufe.io/issues/225)
+* [kickstarter throws error when swagger longer than limit](https://github.com/Haufe-Lexware/wicked.haufe.io/issues/217)
+* [Support for Microsoft Teams in the Chatbot](https://github.com/Haufe-Lexware/wicked.haufe.io/issues/213)
+* [Approver Permission to view application details](https://github.com/Haufe-Lexware/wicked.haufe.io/issues/226)
+* [SamlAuth: Can't build profile if User attribute names are uris](https://github.com/Haufe-Lexware/wicked.haufe.io/issues/221)
+* [Add possibility to influence Postgres Pool parameters](https://github.com/Haufe-Lexware/wicked.haufe.io/issues/231)
+* [AuthServer Configuration: Hyphen in auth method name causes login issues](https://github.com/Haufe-Lexware/wicked.haufe.io/issues/222)
+
 ### 1.0.0-rc.9 - Notable changes
 
 **Bugfixes**

doc/wicked-in-a-box.md

@@ -33,7 +33,7 @@ Follow these steps to get a wicked environment up and running, using a fresh wic
 * `cd` into the new directory
 * Run `wicked tags list`
 
-From the offered tags, pick the newest version, e.g. `1.0.0-rc.9` (or use `latest` for the latest released build), and run
+From the offered tags, pick the newest version, e.g. `1.0.0-rc.10` (or use `latest` for the latest released build), and run
 
 * `wicked tags set <tag>`: This stores the selected version into `~/.wicked/wicked.json`
 * Run `wicked kickstart . --new`
@@ -140,7 +140,7 @@ $ wicked box start --help
 Usage: wicked-box-start [options] <configdir>
 
 Options:
-  -t, --tag <tag>                    wicked Docker tag to use (default: "1.0.0-rc.9")
+  -t, --tag <tag>                    wicked Docker tag to use (default: "1.0.0-rc.10")
   -u, --ui-port <ui-port>            port to expose the portal UI on (default: 3000)
   -g, --gateway-port <gateway-port>  port to expose Kong on (API Gateway) (default: 8000)
   -a, --admin-port <admin-port>      port to expose Kong's Admin port on (defaults to off)

wicked/Chart.yaml

@@ -1,4 +1,4 @@
 apiVersion: v1
 description: wicked.haufe.io Helm Chart
 name: wicked
-version: 1.0.0-rc.9
+version: 1.0.0-rc.10

wicked/README.md

@@ -33,7 +33,7 @@ It is also assumed that you have some knowledge of Helm, and that you have run `
 If that is set and done, you may now install wicked using the Helm chart. Move into a suitable directory, and then download the chart using `helm fetch`:
 
 ```
-$ export WICKED_VERSION=1.0.0-rc.9 # Possibly adapt to the latest version
+$ export WICKED_VERSION=1.0.0-rc.10 # Possibly adapt to the latest version
 $ helm fetch --untar https://github.com/Haufe-Lexware/wicked.haufe.io/releases/download/v${WICKED_VERSION}/wicked-${WICKED_VERSION}.tgz
 ```
 
@@ -139,6 +139,11 @@ Setting | Must Override | Default | Description
 `storage.pgUser` | - | - | **Postgres Setting for Wicked**: Specify the Postgres user for Wicked; if you are using the default Postgres installation (`deployPostgres: true`), this is the user name which will be created for Kong/Wicked, otherwise it has to exist in your existing Postgres instance (and have access rights to the above database).
 `storage.pgPassword` | - | `kong` | **Postgres Setting for Wicked**: Specify the Postgres password for Wicked; if you are using the default Postgres installation (`deployPostgres: true`), this is the password which will be used when creating the user for Wicked/Kong, otherwise it has to exist in your existing Postgres instance (and have access rights to the above database).
 `storage.pgSsl` | - | `false` | **Postgres Setting for Wicked**: Set to `true` to set the Postgres SSL mode to "require". This is especially needed when using a managed Postgres service such as Azure Database for Postgres, which requires this option and does not let the client negotiate.
+`storage.pgConnectRetries` | - | `30` | **Postgres Setting for Wicked**: The number of times the wicked API container tries to connect to Postgres before failing and quitting the process.
+`storage.pgConnectDelay` | - | `2000` | **Postgres Setting for Wicked**: The delay between connect attempts (in milliseconds).
+`storage.pgMaxClients` | - | `10` | **Postgres Setting for Wicked**: The maximum number of Postgres clients in the Postgres connection pool.
+`storage.pgConnectTimeout` | - | `10000` | **Postgres Setting for Wicked**: The Postgres connection timeout (in milliseconds).
+`storage.pgIdleTimeout` | - | `120000` | **Postgres Setting for Wicked**: The idle timeout of a Postgres connection pool connection. Specify this to be larger than 60 seconds (`60000`) for best performance and compatibility with managed Postgres services, such as AWS RDS or Azure Postgres.
 `persistence.enabled` | - | `false` | **ONLY APPLIES TO JSON STORAGE TYPE**: Set to `true` to persist the dynamic data to a Persistent Volume Claim. If set to `true`, specify the volume claim below. Not important if wicked stores data in Postgres (recommended)
 `persistence.existingClaim` | - | `""` | **ONLY APPLIES TO JSON STORAGE TYPE**: If you want to use pre-existing volume claim for the persistence, specify it here. Mutually exclusive with the option `persistence.storageClass` which is used for dynamic provisioning of volume claims.
 `persistence.storageClass` | - | `""` | **ONLY APPLIES TO JSON STORAGE TYPE**: If your cluster supports dynamic provisioning of volumes (provision volumes for volume claims automatically), specify the storage class for the volume here. Mutually exclusive with `persistence.existingClaim` (use either).

wicked/templates/portal-api-deployment.yaml

@@ -98,6 +98,16 @@ spec:
             configMapKeyRef:
               name: {{ template "fullname" . }}-apim-config
               key: PORTAL_SESSIONSTORE_TYPE
+        - name: POSTGRES_CONNECT_RETRIES
+          value: "{{ .Values.storage.pgConnectRetries }}"
+        - name: POSTGRES_CONNECT_DELAY
+          value: "{{ .Values.storage.pgConnectDelay }}"
+        - name: POSTGRES_MAX_CLIENTS
+          value: "{{ .Values.storage.pgMaxClients }}"
+        - name: POSTGRES_CONNECT_TIMEOUT
+          value: "{{ .Values.storage.pgConnectTimeout }}"
+        - name: POSTGRES_IDLE_TIMEOUT
+          value: "{{ .Values.storage.pgIdleTimeout }}"
 {{- if and (not .Values.redis.deployRedis) .Values.redis.useRedis }}
         - name: PORTAL_SESSIONSTORE_HOST
           valueFrom:

wicked/values.yaml

@@ -55,7 +55,7 @@ image:
   # need to pull your company's version of wicked.
   repository: "haufelexware/wicked."
   # The docker image tag to use; usually you don't change this.
-  tag: "1.0.0-rc.9"
+  tag: "1.0.0-rc.10"
   pullPolicy: IfNotPresent
 
 # Add imagePullSecrets like this in an override.yaml to pass in with helm install
@@ -112,6 +112,17 @@ storage:
   pgUser: ""
   pgPassword: ""
   pgSsl: false
+  # Tweaking the behaviour of the Postgres node.js driver.
+  # Number of times wicked API tries to connect to Postgres
+  pgConnectRetries: 30
+  # Delay between (failed) connection attempts
+  pgConnectDelay: 2000
+  # Maximum number of connections in the connection pool
+  pgMaxClients: 10
+  # Postgres connection timeout
+  pgConnectTimeout: 10000
+  # Postgres idle connection in connection pool timeout
+  pgIdleTimeout: 120000
 
 # Standard resources for the node components of wicked.
 resources: