fix(jitsi): Raise Jibri memory limits to fullfil Jibri's 2Gi /dev/shm requirement and update Helm chart; To update an existing installation you need to manually delete the jitsi-prosody stateful set before the update e.g. kubectl -n <your_namespace> delete --cascade=orphan statefulsets jitsi-prosody. Ensure you use the --cascade=orphan part, otherwise you have to remove and reinstall the complete deployment.

.gitlab-ci.yml

@@ -61,7 +61,8 @@ variables:
       - "yes"
       - "no"
   DEBUG_ENABLED:
-    description: "Allows to set `debug.enabled` to true for a deployment, needs to be supported by stage specific configuration containting: `debug.enabled: {{ env \"DEBUG_ENABLED\" | default false }}`"
+    description: "Allows to set `debug.enabled` to true for a deployment, needs to be supported by stage specific\
+     configuration containting: `debug.enabled: {{ env \"DEBUG_ENABLED\" | default false }}`"
     value: "no"
     options:
       - "yes"
@@ -636,7 +637,8 @@ release:
 
 renovate:
   rules:
-    - if: $RUN_RENOVATE == "yes"
+    - if: >
+        $RUN_RENOVATE == "yes"
       when: "on_success"
   # The `-full` image does not install the dependencies on the fly, that is our preferred approach
   image: "${CI_DEPENDENCY_PROXY_DIRECT_GROUP_IMAGE_PREFIX}/renovate/renovate:37.356-full"

.gitlab/lint/lint-opendesk.yml

@@ -8,7 +8,8 @@ lint-opendesk:
   extends: ".lint-common"
   image: "${OPENDESK_CI_CLI_IMAGE}"
   rules:
-    - if: $RUN_RENOVATE == "yes"
+    - if: >
+        $RUN_RENOVATE == "yes"
       when: "never"
     - when: "always"
   script:

.renovate/config.yaml

@@ -41,17 +41,17 @@ repositories:
           - "helmfile/environments/default/images.yaml"
         datasourceTemplate: "docker"
         matchStrings:
-          # yamllint disable rule:line-length
+          # yamllint disable rule:line-length rule:quoted-strings
           - ' providerResponsible: "(?<depType>.+?)"[\s\S]+? upstreamRegistry: "(?<registryUrl>.+?)"[\s\S]+? upstreamRepository: "(?<depName>.+?)"[\s\S]+? tag: "(?<currentValue>[^@]+)@(?<currentDigest>sha256:[a-f0-9]+)"'
-          # yamllint enable rule:line-length
+          # yamllint enable rule:line-length rule:quoted-strings
       - customType: "regex"
         fileMatch:
           - "helmfile/environments/default/charts.yaml"
         datasourceTemplate: "docker"
         matchStrings:
-          # yamllint disable rule:quoted-strings
+          # yamllint disable rule:line-length rule:quoted-strings
           - ' providerResponsible: "(?<depType>.+?)"[\s\S]+? upstreamRegistry: "(?<registryUrl>.+?)"[\s\S]+? upstreamRepository: "(?<depName>.+?)"[\s\S]+? version: "(?<currentValue>.+?)"'
-          # yamllint enable rule:line-length
+          # yamllint enable rule:line-length rule:quoted-strings
     # Rules for matching packages
     packageRules:
       - matchDatasources: [ "docker" ]

helmfile/environments/default/charts.yaml

@@ -120,7 +120,7 @@ charts:
     registry: "registry.opencode.de"
     repository: "bmi/opendesk/components/platform-development/charts/opendesk-jitsi"
     name: "opendesk-jitsi"
-    version: "1.7.8"
+    version: "1.7.9"
     verify: true
   mariadb:
     # providerCategory: "Platform"

helmfile/environments/default/functional.yaml

@@ -3,7 +3,8 @@
 ---
 authentication:
   twoFactor:
-    # Define a list of groups to enable 2FA for. Removing a group from the list will not disable 2FA for the removed group.
+    # Define a list of groups to enable 2FA for.
+    # Note: Removing a group from the list will not disable 2FA for the removed group.
     groups:
       - "Domain Admins"
 ...

helmfile/environments/default/resources.yaml

@@ -60,10 +60,12 @@ resources:
     requests:
       cpu: 0.1
       memory: "64Mi"
+  # The Jibri container requires 2Gi /dev/shm so we need a limit based on the expected memory consumption of the
+  # service plus the 2Gi /dev/shm
   jibri:
     limits:
       cpu: 99
-      memory: "768Mi"
+      memory: "3Gi"
     requests:
       cpu: 0.1
       memory: "384Mi"