Add support for SAML configuration

Author: Steve Salas

README.md

@@ -54,10 +54,12 @@ Follow the [Code Dx Kubernetes Backup & Restore](./setup/core/docs/config/backup
 
 ## Upgrading
 
-The codedx-kubernetes repository gets updated with each new Code Dx release, so you can download the latest repository files and re-run either the guided setup or the setup commands you previously saved (run-setup.ps1 and run-prereqs.ps1, if you saved a run-prereqs.ps1 file). If your setup.ps1 command references specific Docker image names (e.g., `-imageCodeDxTomcat codedx/codedx-tomcat:v5.0.8`), update those parameters to install the Docker image versions associated with a specific Code Dx release.
+The codedx-kubernetes repository gets updated with each new Code Dx release, so you can download the latest repository files and re-run the setup commands you previously saved. If your setup.ps1 command references specific Docker image names (e.g., `-imageCodeDxTomcat codedx/codedx-tomcat:v5.0.8`), update those parameters to install the Docker image versions associated with a specific Code Dx release.
 
 >Note: Refer to the changelog for a specific codedx-kubernetes release for any important notes regarding backward compatibility.
 
+You can run the setup script commands multiple times. On subsequent runs with modified setup parameters, depending on what you changed, you may need to restart a system component like the Code Dx web application pod. For example, restarting the Code Dx web application pod is necessary when changing a codedx.props setting with a custom values.yaml file so that Code Dx can observe the new file contents.
+
 ## Guided Setup Steps
 
 Below is a graph that shows every step of the guided setup script - you only have to visit the steps that apply to your Code Dx deployment.

guided-setup-check-prereqs.ps1

@@ -9,7 +9,7 @@ $VerbosePreference = 'Continue'
 
 Set-PSDebug -Strict
 
-'./setup/core/common/codedx.ps1' | ForEach-Object {
+'./setup/core/common/prereqs.ps1' | ForEach-Object {
 	Write-Debug "'$PSCommandPath' is including file '$_'"
 	$path = join-path $PSScriptRoot $_
 	if (-not (Test-Path $path)) {

guided-setup.ps1

@@ -13,12 +13,14 @@ Write-Host 'Loading...' -NoNewline
 
 './setup/powershell-algorithms/data-structures.ps1',
 './setup/core/common/question.ps1',
+'./setup/core/common/prereqs.ps1',
 './setup/steps/step.ps1',
 './setup/steps/welcome.ps1',
 './setup/steps/k8s.ps1',
 './setup/steps/ingress.ps1',
 './setup/steps/image.ps1',
 './setup/steps/orchestration.ps1',
+'./setup/steps/authentication.ps1',
 './setup/steps/cpu.ps1',
 './setup/steps/memory.ps1',
 './setup/steps/volume.ps1',
@@ -88,6 +90,7 @@ $s = @{}
 [IngressKind],[NginxIngressNamespace],[NginxIngressAddress],
 [LetsEncryptNamespace],[LetsEncryptClusterIssuer],[LetsEncryptEmail],[IngressCertificateArn],
 [DnsName],
+[AuthenticationType],[LdapInstructions],[SamlAuthenticationDnsName],[SamlIdpMetadata],[SamlAppName],[SamlKeystorePwd],[SamlPrivateKeyPwd],
 [DefaultCPU],[NginxCPU],[CodeDxCPU],[MasterDatabaseCPU],[SubordinateDatabaseCPU],[ToolServiceCPU],[MinIOCPU],[WorkflowCPU],
 [DefaultMemory],[NginxMemory],[CodeDxMemory],[MasterDatabaseMemory],[SubordinateDatabaseMemory],[ToolServiceMemory],[MinIOMemory],[WorkflowMemory],
 [DefaultEphemeralStorage],[NginxEphemeralStorage],[CodeDxEphemeralStorage],[MasterDatabaseEphemeralStorage],[SubordinateDatabaseEphemeralStorage],[ToolServiceEphemeralStorage],[MinIOEphemeralStorage],[WorkflowEphemeralStorage],
@@ -144,11 +147,16 @@ Add-StepTransitions $graph $s[[UseDefaultDockerImages]] $s[[IngressKind]]
 Add-StepTransitions $graph $s[[IngressKind]] $s[[NginxIngressNamespace]],$s[[NginxIngressAddress]],$s[[LetsEncryptNamespace]]
 Add-StepTransitions $graph $s[[IngressKind]] $s[[NginxIngressNamespace]],$s[[LetsEncryptNamespace]],$s[[LetsEncryptClusterIssuer]],$s[[LetsEncryptEmail]]
 Add-StepTransitions $graph $s[[IngressKind]] $s[[IngressCertificateArn]]
-Add-StepTransitions $graph $s[[IngressKind]] $s[[DnsName]],$s[[DefaultCPU]]
-Add-StepTransitions $graph $s[[IngressKind]] $s[[DefaultCPU]]
+Add-StepTransitions $graph $s[[IngressKind]] $s[[DnsName]],$s[[AuthenticationType]]
+Add-StepTransitions $graph $s[[IngressKind]] $s[[AuthenticationType]]
 
-Add-StepTransitions $graph $s[[LetsEncryptEmail]] $s[[DnsName]],$s[[DefaultCPU]]
-Add-StepTransitions $graph $s[[IngressCertificateArn]] $s[[DefaultCPU]]
+Add-StepTransitions $graph $s[[LetsEncryptEmail]] $s[[DnsName]],$s[[AuthenticationType]]
+Add-StepTransitions $graph $s[[IngressCertificateArn]] $s[[AuthenticationType]]
+
+Add-StepTransitions $graph $s[[AuthenticationType]] $s[[LdapInstructions]],$s[[DefaultCPU]]
+Add-StepTransitions $graph $s[[AuthenticationType]] $s[[SamlAuthenticationDnsName]],$s[[SamlIdpMetadata]],$s[[SamlAppName]],$s[[SamlKeystorePwd]],$s[[SamlPrivateKeyPwd]],$s[[DefaultCPU]]
+Add-StepTransitions $graph $s[[AuthenticationType]] $s[[SamlIdpMetadata]]
+Add-StepTransitions $graph $s[[AuthenticationType]] $s[[DefaultCPU]]
 
 Add-StepTransitions $graph $s[[DefaultCPU]] $s[[NginxCPU]],$s[[CodeDxCPU]]
 Add-StepTransitions $graph $s[[DefaultCPU]] $s[[CodeDxCPU]]