Helm chart and Application versions bump

Update nuxt-client to the upcoming 0.0.9 release

Remove the clientSecret from the default values.yaml to avoid security issue (the previous one is now revoked)

Fix issue with cwl-loader for loading some CWL files

Update to the latest ZOO-Project-DRU version (including fix for GHSA-58pv-8j8x-9vj2)

Update the Postgresql docker image to version 16-trixie (16-alpine before), the image is a bit bigger in size but also safer

Add support for OGC API - Processes - Part 1: Core 2.0 conformance classes (optional, disabled by default)

Add option to skip cwl2ogc schema generation in processDescription responses (disabled by default)

Author: gfenoy

zoo-project-dru/Chart.yaml

@@ -23,13 +23,13 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.8.4
+version: 0.8.5
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "0.2.36"
+appVersion: "0.2.37"
 
 keywords:
   - workflows
@@ -73,16 +73,34 @@ dependencies:
 annotations:
   artifacthub.io/changes: |
     - kind: changed
-      description: "Update to the latest ZOO-Project-DRU version"
+      description: "Update to the latest ZOO-Project-DRU version (including fix for GHSA-58pv-8j8x-9vj2)"
       links:
         - name: GitHub Commit
-          url: https://github.com/ZOO-Project/ZOO-Project/commit/e1a799659515b81812c676f3b245532cdfa7bf24
+          url: https://github.com/ZOO-Project/ZOO-Project/commit/f4c7c44dbcc9b3333c8b6248e09f2a176c911057
+    - kind: changed
+      description: "Update Nuxt client to version 0.0.9"
+      links:
+        - name: Nuxt-Client release
+          url: https://github.com/ZOO-Project/nuxt-client/releases/tag/0.0.9
     - kind: fixed
-      description: "Add parameter to pass the ZOO_REDIS_HOST value to the websocketd deployment"
-    - kind: added
-      description: "Add /jobs/{jobId}/results/{outputId} endpoint to retrieve a unique job output"
+      description: "Fix issue with cwl-loader for loading some CWL files"
+      links:
+        - name: GitHub Issue
+          url: https://github.com/ZOO-Project/charts/issues/25
+    - kind: fixed
+      description: "Remove the clientSecret from the default values.yaml to avoid security issue (the previous one is now revoked)"
     - kind: changed
-      description: "Also update the tmpUrl configuration parameter in security_service.py"
+      description: "Update the Postgresql docker image to version 16-trixie (16-alpine before), the image is a bit bigger in size but also safer"
+    - kind: added
+      description: "Add support for OGC API - Processes - Part 1: Core 2.0 conformance classes (optional, disabled by default)"
+      links:
+        - name: OGC API - Processes - Part 1: Core 2.0
+          url: https://ogcapi.github.io/processes/2.0/core/
+    - kind: added
+      description: "Add option to skip cwl2ogc schema generation in processDescription responses (disabled by default)"
+      links:
+        - name: cwl2ogc GitHub repository
+          url: https://github.com/eoap/cwl2ogc
 
   artifacthub.io/license: Apache-2.0
 

zoo-project-dru/README.md

@@ -24,7 +24,7 @@ To install the chart with the release name `my-zoo-project-dru`:
 
 ````bash
 helm repo add zoo-project https://zoo-project.github.io/charts/
-helm install my-zoo-project-dru zoo-project/zoo-project-dru --version 0.8.4
+helm install my-zoo-project-dru zoo-project/zoo-project-dru --version 0.8.5
 ````
 
 ## Parameters
@@ -202,6 +202,8 @@ For high-availability requirements, consider external Redis cluster solutions
 |:---------------------------------|:-------------------------------------------------------------------|:-----------------------------------------------------|
 | zoo.promoteHead            | Expose endpoints using the HEAD HTTP method in the OpenAPI    | true                    |
 | zoo.detectEntrypoint         | Dynamically deploy a pod and its associated service to detect docker `ENTRYPOINT` to prepend to existing baseCommand   | false                   |
+| zoo.processesv2         | Add OGC API - Processes - Part 1: Core 2.0 conformance classes                            | false                   |
+| zoo.skipCwl2ogcSchema         | When enabled, processDescription responses omit schemas generated by cwl2ogc                            | false                   |
 | zoo.rabbitmq.definitions         | The `definition.json` file containing initial RabbitMQ settings    | "files/rabbitmq/definitions.json"                    |
 
 #### ZOO-Kernel Configuration

zoo-project-dru/files/zoo-project/oas.cfg

@@ -50,6 +50,9 @@ exceptionsUrl_1=http://www.opengis.net/def/exceptions/ogcapi-processes-2/1.0
 use_problem_json_content_type_for_exception=true
 include_links_header=true
 globalNamespace=anonymous
+{{- if .Values.zoo.skipCwl2ogcSchema }}
+cwl2ogc_schema=false
+{{- end }}
 
 [schemas]
 {{- if .Values.iam.openeoAuth.enabled }}
@@ -833,6 +836,7 @@ rootUrl=http://www.opengis.net/spec/ogcapi-processes-1/1.0/conf/
 extentionsLength=
 extentionUrl=http://www.opengis.net/spec/ogcapi-processes-2/1.0/conf/
 extentionUrl_1=http://www.opengis.net/spec/ogcapi-common-1/1.0/conf/
+extentionUrl_2=http://www.opengis.net/spec/ogcapi-processes-1/2.0/conf/
 link=core
 link_1=oas30
 link_2=json
@@ -861,7 +865,35 @@ extid_12=1
 link_13=json
 extention_13=true
 extid_13=1
+{{- if .Values.zoo.processesv2 }}
+link_14=core
+extention_14=true
+extid_14=2
+link_15=oas30
+extention_15=true
+extid_15=2
+link_16=json
+extention_16=true
+extid_16=2
+link_17=job-list
+extention_17=true
+extid_17=2
+link_18=dismiss
+extention_18=true
+extid_18=2
+link_19=callback
+extention_19=true
+extid_19=2
+link_20=ogc-process-description
+extention_20=true
+extid_20=2
+link_21=oas
+extention_21=true
+extid_21=2
+length=22
+{{- else }}
 length=14
+{{- end }}
 
 [exception]
 abstract=Exception

zoo-project-dru/values.schema.json

@@ -406,6 +406,14 @@
           "type": "boolean",
           "description": "Dynamically deploy a pod and its associated service to detect docker ENTRYPOINT to prepend to existing baseCommand"
         },
+        "processesv2": {
+          "type": "boolean",
+          "description": "Add OGC API - Processes - Part 1: Core 2.0 conformance classes."
+        },
+        "skipCwl2ogcSchema": {
+          "type": "boolean",
+          "description": "When enabled, processDescription responses omit schemas generated by cwl2ogc."
+        },
         "rabbitmq": {
           "type": "object",
           "properties": {

zoo-project-dru/values.yaml

@@ -163,14 +163,16 @@ affinity: {}
 zoo:
   promoteHead: true
   detectEntrypoint: false
+  processesv2: false
+  skipCwl2ogcSchema: false
   rabbitmq:
     definitions: "files/rabbitmq/definitions.json.tpl"
 
 zoofpm:
   image:
     repository: zooproject/zoo-project
     pullPolicy: IfNotPresent
-    tag: dru-e1a799659515b81812c676f3b245532cdfa7bf24
+    tag: dru-10445f76d7c78b35330af508d82f6ea76bc59d52
   autoscaling:
     enabled: false
   replicaCount: 1
@@ -182,7 +184,7 @@ zookernel:
   image:
     repository: zooproject/zoo-project
     pullPolicy: IfNotPresent
-    tag: dru-e1a799659515b81812c676f3b245532cdfa7bf24
+    tag: dru-10445f76d7c78b35330af508d82f6ea76bc59d52
   extraMountPoints: []
 
 notifications:
@@ -237,7 +239,7 @@ postgresql:
 
   image:
     repository: postgres
-    tag: "16-alpine"
+    tag: "16-trixie"
     pullPolicy: IfNotPresent
 
   # Resources configuration
@@ -486,7 +488,7 @@ webui:
   image:
     repository: zooproject/nuxt-client
     pullPolicy: IfNotPresent
-    tag: 0.0.6
+    tag: 0.0.9
   enforce: false
   oidc:
     issuer: https://auth.geolabs.fr/realms/zooproject
@@ -495,7 +497,6 @@ webui:
     authVerifyJwksUri: https://auth.geolabs.fr/realms/zooproject/protocol/openid-connect/certs
     scope: "openid email"
     clientId: webapp
-    clientSecret: pyCIFp3rxeCUB6n76XcxzT3kVdGzsv7g
 
 eoapi:
   enabled: false