fix(nubus): Keep provisioning and consumers behind a feature-flag for easier merging

This commit should be reverted once we are confident that provisioning
and the consumers work as expected.

helmfile/environments/default/images.yaml

@@ -553,7 +553,9 @@ images:
     # upstreamMirrorStartFrom: ["0", "3", "2"]
     registry: "registry.opencode.de"
     repository: "bmi/opendesk/components/supplier/univention/images-mirror/selfservice-invitation"
-    tag: "0.7.1@sha256:45c246ba98494c3dc17a5ea1144e5ec292501f8b9833df7d4a5c590e772bc0a1"
+    # Image for the disabled selfservice-consumer, Will be activated in a future MR
+    # tag: "0.7.1@sha256:45c246ba98494c3dc17a5ea1144e5ec292501f8b9833df7d4a5c590e772bc0a1"
+    tag: "0.6.5@sha256:5630c9df3da4134789d2ebafad7de9062375d21547a2074827b680debd7a909e"
   nubusSelfserviceListener:
     # providerCategory: "Supplier"
     # providerResponsible: "Univention"

helmfile/environments/default/persistence.yaml

@@ -19,6 +19,7 @@ persistence:
     nubus:
       ldapServerData: "1Gi"
       ldapServerShared: "1Gi"
+      portalListener: "1Gi"
       portalConsumer: "1Gi"
       selfserviceListener: "1Gi"
     xwiki: "1Gi"

helmfile/environments/default/replicas.yaml

@@ -94,6 +94,8 @@ replicas:
   # -- scalable: true
   umsPortalFrontend: 1
   # -- scalable: tbd
+  umsPortalListener: 1
+  # -- scalable: tbd
   umsPortalConsumer: 1
   # -- scalable: true
   umsPortalServer: 1

helmfile/environments/default/resources.yaml

@@ -471,6 +471,20 @@ resources:
     requests:
       cpu: 0.1
       memory: "256Mi"
+  umsPortalListener:
+    limits:
+      cpu: 99
+      memory: "1Gi"
+    requests:
+      cpu: 0.1
+      memory: "256Mi"
+  umsPortalListenerDependencies:
+    limits:
+      cpu: 99
+      memory: "1Gi"
+    requests:
+      cpu: 0.1
+      memory: "256Mi"
   umsPortalConsumer:
     limits:
       cpu: 99

helmfile/environments/default/secrets.gotmpl

@@ -36,6 +36,7 @@ secrets:
       sysIdpUserPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "nubus" "sysIdpUser" | sha1sum | quote }}
     storeDavUsers:
       portalServer: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-server" "store-dav" | sha1sum | quote }}
+      portalListener: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-listener" "store-dav" | sha1sum | quote }}
       portalConsumer: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "portal-consumer" "store-dav" | sha1sum | quote }}
     provisioning:
       apiNatsPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "api" "nats" | sha1sum | quote }}

helmfile/environments/default/selinux.yaml

@@ -77,6 +77,7 @@ seLinuxOptions:
   umsNotificationsApi: ~
   umsOpenPolicyAgent: ~
   umsPortalFrontend: ~
+  umsPortalListener: ~
   umsPortalConsumer: ~
   umsPortalServer: ~
   umsProvisioningDispatcher: ~

helmfile/environments/test/values.yaml.gotmpl

@@ -21,6 +21,7 @@ persistence:
     nubus:
       ldapServerData: "42Gi"
       ldapServerShared: "42Gi"
+      portalListener: "42Gi"
       portalConsumer: "42Gi"
       selfserviceListener: "42Gi"
     postfix: "42Gi"
@@ -91,6 +92,7 @@ replicas:
   umsLdapServer: 42
   umsNotificationsApi: 42
   umsPortalFrontend: 42
+  umsPortalListener: 42
   umsPortalConsumer: 42
   umsPortalServer: 42
   umsSelfserviceListener: 42