diff --git a/.gitlab/common/common.yml b/.gitlab/common/common.yml
index 27936440..692707e1 100644
--- a/.gitlab/common/common.yml
+++ b/.gitlab/common/common.yml
@@ -2,8 +2,8 @@
# SPDX-License-Identifier: Apache-2.0
---
variables:
- OPENDESK_CI_CLI_IMAGE: "registry.opencode.de/bmi/opendesk/tooling/opendesk-ci-cli:2.5.0\
- @sha256:630e102edc70c9e730a46180e79ff278fd8b5039eb336110e0df89fe415225ef"
+ OPENDESK_CI_CLI_IMAGE: "registry.opencode.de/bmi/opendesk/tooling/opendesk-ci-cli:2.5.1\
+ @sha256:570440f48c46e69a1b989c44cc9e9c243fbfdd11f4bc2a39b76138bc19f5d69d"
OPENDESK_LINT_IMAGE: "registry.opencode.de/bmi/opendesk/components/platform-development/images/ci-lint:1.0.6\
@sha256:0a8997876a0c3f5a3c73eb6bd75c5cde63757bc31b983bfd92cfcb17389d536f"
diff --git a/README.md b/README.md
index 67b686ac..4b465374 100644
--- a/README.md
+++ b/README.md
@@ -8,7 +8,6 @@ SPDX-License-Identifier: Apache-2.0
* [Overview](#overview)
-* [Disclaimer](#disclaimer)
* [Requirements](#requirements)
* [Getting started](#getting-started)
* [Advanced customization](#advanced-customization)
@@ -28,17 +27,17 @@ openDesk is a Kubernetes based, open-source and cloud-native digital workplace s
openDesk currently features the following functional main components:
-| Function | Functional Component | Component/api/v4/projects/`.
-To select the current testset, use the variable `TESTS_TESTSET`. Default: `Smoke`.
-If the branch of the test pipeline is not `main` this can be set with the `.gitlab-ci.yml` variable
+To select the current test set, use the variable `TESTS_TESTSET`. Default: `Smoke`.
+If the branch of the test pipeline is not `main`, this can be set with the `.gitlab-ci.yml` variable
`TESTS_BRANCH` while creating a new pipeline.
-The variable `testprofile` within the job is set to `Namespace`, which tells the e2e tests to use environment specific settings that will be read from the cluster and namespace specific file in the opendesk-env repository.
\ No newline at end of file
+The variable `testprofile` within the job is set to `Namespace`, which tells the e2e tests to use environment-specific settings that will be read from the cluster and namespace-specific file to be found in the project internal `opendesk-env` repository.
diff --git a/docs/components.md b/docs/components.md
index aae47a0d..1562be05 100644
--- a/docs/components.md
+++ b/docs/components.md
@@ -5,7 +5,7 @@ SPDX-License-Identifier: Apache-2.0
-->
Components
-This section covers the internal system requirements as well as external service requirements for productive use.
+This section covers the internal system requirements and external service requirements for productive use.
* [Overview](#overview)
@@ -21,88 +21,88 @@ This section covers the internal system requirements as well as external service
# Overview
-openDesk consists out of a variety of open-source projects. Here is a list with the description and type.
+openDesk consists of a variety of open-source projects. Here is a list with the description and type.
Components of type `Eval` are used for development and evaluation purposes only,
they need to be replaced in production deployments.
-| Component | Description | Type |
+| Component | Description | Type |
|-----------------------------|--------------------------------|------------|
-| Certificates | TLS certificates | Eval |
-| ClamAV (Distributed) | Antivirus engine | Eval |
-| ClamAV (Simple) | Antivirus engine | Eval |
-| Collabora | Weboffice | Functional |
-| CryptPad | Weboffice | Functional |
-| dkimpy-milter | DKIM milter for Postfix | Eval |
-| Element | Secure communications platform | Functional |
-| Jitsi | Videoconferencing | Functional |
-| MariaDB | Database | Eval |
-| Memcached | Cache Database | Eval |
-| MinIO | Object Storage | Eval |
-| Nextcloud | File share | Functional |
-| Nubus (UMS) | Identity Management & Portal | Functional |
-| OpenProject | Project management | Functional |
-| OX Appsuite | Groupware | Functional |
-| OX Dovecot | Mail backend (IMAP) | Functional |
-| Postfix | MTA | Eval |
-| PostgreSQL | Database | Eval |
-| Redis | Cache Database | Eval |
-| XWiki | Knowledge Management | Functional |
+| Certificates | TLS certificates | Eval |
+| ClamAV (Distributed) | Antivirus engine | Eval |
+| ClamAV (Simple) | Antivirus engine | Eval |
+| Collabora | Weboffice | Functional |
+| CryptPad | Weboffice | Functional |
+| dkimpy-milter | DKIM milter for Postfix | Eval |
+| Element | Secure communications platform | Functional |
+| Jitsi | Videoconferencing | Functional |
+| MariaDB | Database | Eval |
+| Memcached | Cache Database | Eval |
+| MinIO | Object Storage | Eval |
+| Nextcloud | File share | Functional |
+| Nubus (UMS) | Identity Management & Portal | Functional |
+| OpenProject | Project management | Functional |
+| OX Appsuite | Groupware | Functional |
+| OX Dovecot | Mail backend (IMAP) | Functional |
+| Postfix | MTA | Eval |
+| PostgreSQL | Database | Eval |
+| Redis | Cache Database | Eval |
+| XWiki | Knowledge Management | Functional |
# Component integration
-Some use cases require inter component integration.
+Some use cases require inter-component integration.
```mermaid
flowchart TD
- OX-AppSuite_Frontend-->|Silent Login, Filepicker, Central Navigation|Intercom_Service
- Element-->|Silent Login, Central Navigation|Intercom_Service
- Intercom_Service-->|Silent Login, Token Exchange|IdP
- Intercom_Service-->|Filepicker|Nextcloud
- Intercom_Service-->|Central Navigation|Portal
- OX-AppSuite_Backend-->|Filepicker|Nextcloud
- Nextcloud-->|Central Navigation|Portal
- OpenProject-->|Central Navigation|Portal
- OpenProject-->|File Store|Nextcloud
- XWiki-->|Central Navigation|Portal
- Nextcloud-->|Central Contacts|OX-AppSuite_Backend
- OX-AppSuite_Frontend-->|Filepicker|OX-AppSuite_Backend
+ OX-AppSuite_Frontend-->|Silent Login, Filepicker, Central Navigation|Intercom_Service
+ Element-->|Silent Login, Central Navigation|Intercom_Service
+ Intercom_Service-->|Silent Login, Token Exchange|IdP
+ Intercom_Service-->|Filepicker|Nextcloud
+ Intercom_Service-->|Central Navigation|Portal
+ OX-AppSuite_Backend-->|Filepicker|Nextcloud
+ Nextcloud-->|Central Navigation|Portal
+ OpenProject-->|Central Navigation|Portal
+ OpenProject-->|File Store|Nextcloud
+ XWiki-->|Central Navigation|Portal
+ Nextcloud-->|Central Contacts|OX-AppSuite_Backend
+ OX-AppSuite_Frontend-->|Filepicker|OX-AppSuite_Backend
```
Most details can be found in the upstream documentation that is linked in the respective sections.
## Intercom Service / Silent Login
-The Intercom Service is deployed in context of Nubus/UMS. Its role is to enable cross-application integration
+The Intercom Service is deployed in the context of Nubus/UMS. Its role is to enable cross-application integration
based on the user's browser interaction as handling authentication when the frontend of an application has to call
the API from another application is often a challenge.
-To establish a session with the Intercom Service an application can use the silent login feature within an iframe.
+To establish a session with the Intercom Service, applications can use the silent login feature within an iframe.
-Currently only OX AppSuite and Element are using the frontend based integration.
+Currently, only OX AppSuite and Element are using the frontend-based integration.
**Links**
- [Intercom Service upstream documentation](https://docs.software-univention.de/intercom-service/latest/index.html).
## Filepicker
-The Nextcloud filepicker is integrated into the OX AppSuite supporting the following use cases against the respective openDesk instance's Nextcloud:
-- Attaching files from Nextcloud to emails.
-- Adding links of Nextcloud files to emails.
-- Saving attachments from emails into Nextcloud.
-- Attaching files from Nextcloud to calendar entries.
+The Nextcloud Filepicker is integrated into the OX AppSuite, supporting the following use cases against the respective openDesk instance's Nextcloud:
+- Attach files from Nextcloud to emails.
+- Create and add links to Nextcloud files into emails.
+- Save attachments from emails into Nextcloud.
+- Attach files from Nextcloud to calendar entries.
-The filepicker is using frontend and backend based integration:
-- For frontend based integration the OX AppSuite frontend uses the Intercom Service.
-- Backend based integration is coming from OX AppSuite middleware. The middleware is communicating directly with Nextcloud,
-which is used when adding a file to an email or storing a file into Nextcloud, to avoid passing these files through the user's browser.
+The Filepicker uses frontend and backend-based integration:
+- For frontend-based integration, the OX AppSuite frontend uses the Intercom Service.
+- Backend-based integration is coming from OX AppSuite middleware. The middleware communicates directly with Nextcloud
+when adding a file to an email or storing a file into Nextcloud to avoid passing these files through the user's browser.
**Links**
- [OX AppSuite Nextcloud Integration upstream documentation](https://gitlab.open-xchange.com/extensions/nextcloud-integration/-/tree/main/documentation).
## Central Navigation
-Central navigation is based on an API endpoint in the Nubus portal that returns a JSON containing the contents of the portal for
+Central navigation is based on an API endpoint in the Nubus portal that returns a JSON containing the portal's contents for
a given user. The response from the API endpoint is used in the openDesk applications to render the central navigation.
The API can be called by
@@ -120,8 +120,8 @@ curl 'https://portal./univention/portal/navigation.json?base=https%3A//p
## Central Contacts
-OX App Suite is managing contacts in openDesk. Therefore Nextcloud's PHP backend is using the OX AppSuite's middleware Contacts API to
-- create a new contact in the user's contacts folder when a file is shared with a yet unknown email address.
+OX App Suite is managing contacts in openDesk. Therefore, Nextcloud's PHP backend is using the OX AppSuite's middleware Contacts API to
+- create a new contact in the user's contacts folder when a file is shared with an unknown email address.
- retrieve contacts from the user's contacts folder to support search-as-you-type when starting to share a file.
**Links:**
@@ -133,9 +133,9 @@ OX App Suite is managing contacts in openDesk. Therefore Nextcloud's PHP backend
While OpenProject allows you to attach files to work packages directly, it is often preferred that the files are
stored within Nextcloud or to link an existing file from your openDesk Nextcloud to a work package.
-Therefore openDesk pre-configures the trust between the openDesk instance's OpenProject and Nextcloud during the `openproject-boostrap` deployment step. As prerequisite for that openDesk's Nextcloud contains the `integration_openproject` app.
+Therefore, openDesk pre-configures the trust between the openDesk instance's OpenProject and Nextcloud during the `openproject-boostrap` deployment step. As a prerequisite for that, openDesk's Nextcloud contains the `integration_openproject` app.
-The file store still needs to be enabled on a per-project level in OpenProject's project admin section.
+The file store must still be enabled per project in OpenProject's project admin section.
**Links:**
- [OpenProject's documentation on Nextcloud integration](https://www.openproject.org/docs/system-admin-guide/integrations/nextcloud/)
@@ -145,42 +145,41 @@ The file store still needs to be enabled on a per-project level in OpenProject's
An overview of
- components that consume the LDAP service.
- - The components accessing the LDAP using a component specific LDAP search account.
-- components using Univention Keycloak as identity provider (IdP).
- - If not otherwise denoted the components make use of OAuth2 / OIDC flows.
- - All components have a client configured in Keycloak, except for Jitsi which is using authentication with the
- [Authorization Code Flow](https://openid.net/specs/openid-connect-core-1_0.html#CodeFlowAuth) that does not
- require an OIDC client to be configured in Keycloak.
+ - The components access the LDAP using a component-specific LDAP search account.
+- components using Univention Keycloak as an identity provider (IdP).
+ - The components should use OAuth2 / OIDC flows if not otherwise denoted.
+ - All components have a client configured in Keycloak, except for Jitsi, which is using authentication with the
+ [Authorization Code Flow](https://openid.net/specs/openid-connect-core-1_0.html#CodeFlowAuth) that does not
+ require an OIDC client to be configured in Keycloak.
Some components trust others to handle authentication for them.
```mermaid
flowchart TD
- K[IdP]-->L[LDAP]
- N[Nextcloud]-->L
- O[OpenProject] --> L
- A[OX AppSuite]-->L
- D[OX Dovecot]-->L
- P[Portal/Admin]-->L
- X[XWiki]-->L
- A-->K
- N-->K
- D-->K
- O-->K
- X-->K
- P-->|SAML|K
- E[Element]-->K
- J[Jitsi]-->K
- I[IntercomService]-->K
- C[Collabora]-->N
- R[CryptPad]-->N
- F[Postfix]-->D
+ K[IdP]-->L[LDAP]
+ N[Nextcloud]-->L
+ O[OpenProject] --> L
+ A[OX AppSuite]-->L
+ D[OX Dovecot]-->L
+ P[Portal/Admin]-->L
+ X[XWiki]-->L
+ A-->K
+ N-->K
+ D-->K
+ O-->K
+ X-->K
+ P-->|SAML|K
+ E[Element]-->K
+ J[Jitsi]-->K
+ I[IntercomService]-->K
+ C[Collabora]-->N
+ R[CryptPad]-->N
+ F[Postfix]-->D
```
# Provisioning
-Currently, active provisioning is only done for OX AppSuite. The OX-Connector is synchronizing, creating, modifying and
-deleting activities for the following objects to the OX AppSuite using the AppSuite's SOAP API:
+Currently, active provisioning is only done for OX AppSuite. The OX-Connector synchronizes the following objects to the OX AppSuite using the AppSuite's SOAP API:
- Contexts
- Users
diff --git a/docs/debugging.md b/docs/debugging.md
index aa6037a5..60d656b9 100644
--- a/docs/debugging.md
+++ b/docs/debugging.md
@@ -17,53 +17,55 @@ SPDX-License-Identifier: Apache-2.0
# Disclaimer
-This document collects information how to deal with debugging an openDesk deployment.
+This document collects information on how to deal with debugging an openDesk deployment.
-It will be extended over time as we have to deal with debugging cases.
+It will be extended over time as we deal with debugging cases.
We for sure do not want to reinvent the wheel, so we might link to external sources that contain helpful
information where available.
-**Note:** You should never enable debug in production environments! By looking up `debug.enable` in the deployment you
-will find the various places changes are applied when enabling debugging. So outside of development and test
-environments you may want to make use of them in a very thoughtful and selective manner if needed.
+> **Warning**` is configured.
and set the log level for components to "Debug".
-**Note**: When enabling debug and running upgrades you must manually delete all jobs before the upgrade. As with debug
-we keep the jobs and some job fields are immutable it could otherwise lead into an upgrade failure.
+> **Note**/root`
+- After the deployment has been reloaded, open the shell of the debugging container.
+- When you've succeeded, you will see the processes of both/all containers in the Pod when doing a `ps aux`.
+- To access other containers' filesystems, select the PID of a process from the other container and do a `cd /proc//root`.
## Temporary/ephemeral containers
-Interesting read we picked most of the details below from: https://iximiuz.com/en/posts/kubernetes-ephemeral-containers/
+An interesting read we picked most of the details below from: https://iximiuz.com/en/posts/kubernetes-ephemeral-containers/
-Sometimes you do not want to add a container permanently to your existing deployment. In that case you could use [ephemeral containers](https://kubernetes.io/docs/concepts/workloads/pods/ephemeral-containers/).
+Sometimes, you do not want to add a container permanently to your existing deployment. In that case, you could use [ephemeral containers](https://kubernetes.io/docs/concepts/workloads/pods/ephemeral-containers/).
-For the commands further down this section we set some environment variables first:
-- `NAMESPACE`: The namespace the Pod you want to inspects is running in.
-- `DEPLOYMENT_NAME`: The name of the deployment responsible for spawning the Pod you want to inspect within the pre-mentioned namespace.
+For the commands further down this section, we set some environment variables first:
+- `NAMESPACE`: The namespace in which the Pod you want to inspect is running.
+- `DEPLOYMENT_NAME`: The deployment's name responsible for spawning the Pod you want to inspect within the pre-mentioned namespace.
- `POD_NAME`: The name of the Pod you want to inspect within the pre-mentioned namespace.
-- `EPH_CONTAINER_NAME`: Chose the name for the container, "debugging" seem obvious.
-- `DEBUG_IMAGE`: The image you want to make use of for debugging purposes.
+- `EPH_CONTAINER_NAME`: Choose the name for the container, and "debugging" seems obvious.
+- `DEBUG_IMAGE`: The image you want to use for debugging purposes.
e.g.
-```
+```shell
export EPH_CONTAINER_NAME=debugging
export NAMESPACE=my_test_deployment
export DEPLOYMENT_NAME=opendesk-nextcloud-php
export POD_NAME=opendesk-nextcloud-php-6686d47cfb-7642f
-export DEBUG_IMAGE=registry.opencode.de/bmi/opendesk/components/platform-development/images/opendesk-debugging-image:1.0.0
+export DEBUG_IMAGE=registry.opencode.de/bmi/opendesk/components/platform-development/images/opendesk-debugging-image:latest
```
You still need to ensure that your deployment supports process namespace sharing:
-```
+```shell
kubectl -n ${NAMESPACE} patch deployment ${DEPLOYMENT_NAME} --patch '
spec:
template:
@@ -120,12 +122,12 @@ spec:
shareProcessNamespace: true'
```
-Now you can add the ephemeral container with:
-```
+Now, you can add the ephemeral container with:
+```shell
kubectl -n ${NAMESPACE} debug -it --attach=false -c ${EPH_CONTAINER_NAME} --image={DEBUG_IMAGE} ${POD_NAME}
```
and open its interactive terminal with
-```
+```shell
kubectl -n ${NAMESPACE} attach -it -c ${EPH_CONTAINER_NAME} ${POD_NAME}
```
@@ -133,9 +135,9 @@ kubectl -n ${NAMESPACE} attach -it -c ${EPH_CONTAINER_NAME} ${POD_NAME}
## MariaDB
-When using the openDesk bundled MariaDB you can explore database(s) using the MariaDB interactive terminal from the pod's command line: `mariadb -u root -p`. As password provide the value for `MARIADB_ROOT_PASSWORD` set in the pod's environment.
+When using the openDesk bundled MariaDB, you can explore the database(s) using the MariaDB interactive terminal from the Pod's command line: `mariadb -u root -p`. On the password prompt, provide the value for `MARIADB_ROOT_PASSWORD` found in the Pod's environment.
-While you will find all details for the CLI tool in [the online documentation](https://mariadb.com/kb/en/mariadb-command-line-client/), some quick commands are:
+While you will find all the details for the CLI tool in [the online documentation](https://mariadb.com/kb/en/mariadb-command-line-client/), some quick commands are:
- `help`: Get help on the psql command set
- `show databases`: Lists all databases
@@ -145,28 +147,27 @@ While you will find all details for the CLI tool in [the online documentation](h
## Nextcloud
-`occ` is the CLI for Nextcloud, all the details can be found in the [upstream documentation](https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/occ_command.html).
+`occ` is the CLI for Nextcloud; all the details can be found in the [upstream documentation](https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/occ_command.html).
You can run occ commands in the `opendesk-nextcloud-php` pod like this: `php /var/www/html/occ config:list`
## OpenProject
-OpenProject is a Ruby on Rails application. Therefore you can make use of the Rails console from the pod's command line `bundle exec rails console`
-
+OpenProject is a Ruby on Rails application. Therefore, you can make use of the Rails console from the Pod's command line `bundle exec rails console`
and run debug code like this:
```
uri = URI('https://nextcloud.url/apps/integration_openproject/check-config')
Net::HTTP.start(uri.host, uri.port,
- :use_ssl => uri.scheme == 'https') do |http|
- request = Net::HTTP::Get.new uri
- response = http.request request # Net::HTTPResponse object
+ :use_ssl => uri.scheme == 'https') do |http|
+ request = Net::HTTP::Get.new uri
+ response = http.request request # Net::HTTPResponse object
end
```
## PostgreSQL
-When using the openDesk bundled PostgreSQL you can explore database(s) using the PostgreSQL interactive terminal from the pod's command line: `psql -U postgres`.
+Using the openDesk bundled PostgreSQL, you can explore database(s) using the PostgreSQL interactive terminal from the Pod's command line: `psql -U postgres`.
While you will find all details in the [psql subsection](https://www.postgresql.org/docs/current/app-psql.html)) of the PostgreSQL documentation, some quick commands are:
diff --git a/docs/development.md b/docs/development.md
index f51ed6c2..990082d6 100644
--- a/docs/development.md
+++ b/docs/development.md
@@ -7,7 +7,7 @@ SPDX-License-Identifier: Apache-2.0
Developing openDesk deployment automation
Active development on the deployment is currently only available for project members.
-But contributions will be possible soon once the CLA process is sorted out.
+However, contributions will be possible using the CLA process.
* [Overview](#overview)
* [Default branch, `develop` and other branches](#default-branch-develop-and-other-branches)
@@ -17,31 +17,31 @@ But contributions will be possible soon once the CLA process is sorted out.
* [Renovate](#renovate)
* [Mirroring](#mirroring)
* [Get new artifacts mirrored](#get-new-artifacts-mirrored)
-* [Creating new charts / images](#creating-new-charts--images)
+* [Creating new charts/images](#creating-new-chartsimages)
# Overview
-The following sketch provides an high level overview to get a basic understanding of the deployment relevant
-structure of this repository. An understanding of that structure is vital if you want to contribute to
-the development of the deployment automation of openDesk.
+The following sketch provides a high-level overview to get a basic understanding of the deployment-relevant
+structure of this repository. Understanding that structure is vital if you want to contribute to
+developing the openDesk platform.
```mermaid
flowchart TD
- J[helmfile.yaml\nor a helmfile outside of this repository]-->A
- J-->K[./helmfile/environemnts/*your_environment*/values.yaml.gotmpl\nor any an environment values file]
- A[./helmfile_generic.yaml]-->B[./helmfile/apps/*all_configured_apps*/helmfile.yaml\nReferences the relevant app Helm\ncharts using details from 'charts.yaml']
- B-->C[./values-*all_configured_components*.yaml.gotmpl\nValues to template the charts\nwith references to the `images.yaml`]
- A-->D[./helmfile/environments/default/*\nwith just some examples below]
- D-->F[charts.yaml]
- D-->G[images.yaml]
- D-->H[global.*]
- D-->I[secrets.yaml\nreplicas.yaml\nresources.yaml\n...]
- A-->|overwrite defaults with your\ndeployment/environment specific values|E[./helmfile/environments/default/values.yaml.gotmpl]
+ J[helmfile.yaml\nor a helmfile outside of this repository]-->A
+ J-->K[./helmfile/environemnts/*your_environment*/values.yaml.gotmpl\nor any an environment values file]
+ A[./helmfile_generic.yaml]-->B[./helmfile/apps/*all_configured_apps*/helmfile.yaml\nReferences the relevant app Helm\ncharts using details from 'charts.yaml']
+ B-->C[./values-*all_configured_components*.yaml.gotmpl\nValues to template the charts\nwith references to the `images.yaml`]
+ A-->D[./helmfile/environments/default/*\nwith just some examples below]
+ D-->F[charts.yaml]
+ D-->G[images.yaml]
+ D-->H[global.*]
+ D-->I[secrets.yaml\nreplicas.yaml\nresources.yaml\n...]
+ A-->|overwrite defaults with your\ndeployment/environment specific values|E[./helmfile/environments/default/values.yaml.gotmpl]
```
-The `helmfile.yaml` file in the root folder serves as the foundation
+The `helmfile.yaml` file in the root folder is the foundation
for the entire deployment. It references the `helmfile_generic.yaml`
-file, which includes app-specific `helmfile.yaml` files, as well as
+file, which includes app-specific `helmfile.yaml` files and
global values files located in `./environments/default`.
`helmfile.yaml` also refers to three predefined environments: `dev`,
@@ -51,27 +51,26 @@ The `helmfile_generic.yaml` file is designed to be referenced from
external repositories, where custom environments may be defined. An
example is demonstrated in the `helmfile.yaml` file.
-Before you look into any app specific configuration it is recommended to review the contents of `./environments/default` to get an understanding of what
-details are maintained in there, as they are usually referenced by the app configurations.
+Before you investigate any app-specific configuration, it is recommended that you review the contents of `./helmfile/environments/default` to understand what configuration details are set there, as the app deployments reference them.
# Default branch, `develop` and other branches
The `main` branch is configured to be the default branch, as visitors of the project on Open CoDE should see that
branch by default.
-Please use the `develop` branch to diverge your own branch(es) from. See the [workflow guide](./workflow.md)
+Please use the `develop` branch to diverge your branch(es) from. See the [workflow guide](./workflow.md)
for more details on naming conventions.
-There is a CI bot that automatically creates a merge request once you initially pushed your branch to Open CoDE.
-The merge request will of course target the `develop` branch, be in status `draft` and have you as assignee.
+There is a CI bot that automatically creates a merge request once you initially push your branch to Open CoDE.
+Of course, the merge request will target the `develop` branch, be in status `draft`, and you are set as the assignee.
-In case you do not plan to actually merge from the branch you have pushed, please close or delete the auto-created MR.
+If you do not plan to merge from the branch you have pushed, please close the auto-created MR.
# External artifacts - `charts.yaml` and `images.yaml`
-The `charts.yaml` and `images.yaml` are the central place to reference external artifacts that are used for the deployment.
+The `charts.yaml` and `images.yaml` files are the central place to reference external artifacts used for the deployment.
-Beside the deployment automation itself some tools work with the contents of the files:
+Besides the deployment automation itself, some tools work with the contents of the files:
- **Linting**: Ensures consistency of the file contents for the other tools.
- **Renovate**: Automatically create MRs that update the components to their latest version.
@@ -81,35 +80,35 @@ Please find details on these tools below.
## Linting
-In the project's CI there is a step dedicated to lint the two yaml files, as we want them to be in
+In the project's CI, there is a step dedicated to lint the two yaml files, as we want them to be in
- alphabetical order regarding the components and
- in a logical order regarding the non-commented lines (registry > repository > tag).
-In the linting step the [openDesk CI CLI](https://gitlab.opencode.de/bmi/opendesk/tooling/opendesk-ci-cli) is used to apply the
-just mentioned sorting and the result is compared with the unsorted version. If there is a delta the linting fails and you probably
-want to fix it by running the CLI tool locally.
+In the linting step, the [openDesk CI CLI](https://gitlab.opencode.de/bmi/opendesk/tooling/opendesk-ci-cli) is used to apply the
+just mentioned sorting, and the result is compared with the unsorted version. If there is a delta, the linting fails, and you can fix it by running the CLI tool locally, verifying and applying the result to your branch.
-**Note**: Please ensure that in component blocks you use comments only at the beginning of the block or at its end. Ideally you just stick
+> **Note**_USERNAME`
- - `MIRROR_CREDENTIALS_SRC__PASSWORT`
+- `# upstreamRegistryCredentialId`: *optional*: In case the source registry is not public, the access credentials have to be specified as ENV variables containing the value of this key in their name, so you want to specify that key all uppercase:
+ - `MIRROR_CREDENTIALS_SRC__USERNAME`
+ - `MIRROR_CREDENTIALS_SRC__PASSWORT`
- `# upstreamRepository` *required*: To identify the source repository
-- `# upstreamMirrorTagFilterRegEx` *required*: If this annotation is set it activates the mirror for the component. Only tags are being mirrored that match the given regular expression. **Note:** You have to use single quotes for this attribute's value in case you use backslash leading regex notation like `\d`.
-- `# upstreamMirrorStartFrom` *optional*: Array of numeric values in case you want to mirror only artifacts beginning with a specific version. You must use capturing groups
- in `# upstreamMirrorTagFilterRegEx` to identify the single numeric elements of the version within the tag and use per capturing group (left to right) one numeric array
- element here to define the version the mirror should start with.
+- `# upstreamMirrorTagFilterRegEx` *required*: If this annotation is set, the mirror for the component will be activated. Only tags that match the given regular expression are being mirrored. **Note:** You must use single quotes for this attribute's value if you use backslash leading regex notation like `\d`.
+- `# upstreamMirrorStartFrom` *optional*: Array of numeric values in case you want to mirror only artifacts beginning with a specific version. You must use capturing group
+ in `# upstreamMirrorTagFilterRegEx` to identify the single numeric elements of the version within the tag and use per capturing group (left to right) one numeric array
+ element here to define the version the mirror should start with.
### Get new artifacts mirrored
-If you want new images or charts to be mirrored that are not yet included in one of the yaml files there are two options:
+If you want new images or charts mirrored that are not yet included in one of the yaml files, you can add them in your branch, including the aforementioned mirror annotations, and ask somebody from the platform development team to trigger the mirror's CI based on your branch.
-You include them in your branch with all required annotations and either
-1. ask somebody from the platform development team to trigger the mirror's CI based on your branch or
-2. you get your branch merged to `develop` already.
+Once your branch is merged into develop, your artifacts are mirrored hourly.
-# Creating new charts / images
+# Creating new charts/images
-When you create new Helm charts please check out the
+When you create new Helm charts, please check out the
[openDesk Best Practices](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-best-practises)
for Helm charts.
You may also want to make use of our [standard CI](https://gitlab.opencode.de/bmi/opendesk/tooling/gitlab-config) to
-easily get Charts and Images that are signed, linted, scanned and released.
+quickly get Helm charts and container images that are signed, linted, scanned, and released.
Check out the `.gitlab-ci.yaml` files in the project's [Charts](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts) or [Images](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/images) to get an idea how little you need to do yourself.
diff --git a/docs/enhanced-configuration.md b/docs/enhanced-configuration.md
index 6c140e70..288984b3 100644
--- a/docs/enhanced-configuration.md
+++ b/docs/enhanced-configuration.md
@@ -9,6 +9,7 @@ SPDX-License-Identifier: Apache-2.0
The following enhanced configuration use cases are described in separate documents.
-- [Separate mail & Matrix domain](enhanced-configuration/separate-mail-matrix-domain.md)
-- [Federation with external identity provider](enhanced-configuration/idp-federation.md)
-- [Matrix federation](enhanced-configuration/matrix-federation.md)
+- [Separate mail & Matrix domain](./enhanced-configuration/separate-mail-matrix-domain.md)
+- [Federation with external identity provider](./enhanced-configuration/idp-federation.md)
+- [Matrix federation](./enhanced-configuration/matrix-federation.md)
+- [Groupware migration from M365 to openDesk](./enhanced-configuration/groupware-migration.md)
diff --git a/docs/enhanced-configuration/groupware-migration.md b/docs/enhanced-configuration/groupware-migration.md
new file mode 100644
index 00000000..2c3e6f5b
--- /dev/null
+++ b/docs/enhanced-configuration/groupware-migration.md
@@ -0,0 +1,185 @@
+r
+
+Migration from M365 with audriga migration service and master authentication
+
+* [Context](#context)
+* [Prerequisites](#prerequisites)
+ * [Prepare M365 tenant for access](#prepare-m365-tenant-for-access)
+ * [Provisioning user accounts in openDesk](#provisioning-user-accounts-in-opendesk)
+ * [Deploy openDesk with master authentication](#deploy-opendesk-with-master-authentication)
+* [Migration configuration](#migration-configuration)
+ * [Select the source provider and configure your openDesk instance](#select-the-source-provider-and-configure-your-opendesk-instance)
+ * [Adding accounts](#adding-accounts)
+ * [Add user accounts individually](#add-user-accounts-individually)
+ * [Add multiple user accounts via CSV file](#add-multiple-user-accounts-via-csv-file)
+ * [Start the migration](#start-the-migration)
+ * [Monitor migration status](#monitor-migration-status)
+
+# Context
+
+Most organizations already have email accounts on various platforms that need to be migrated to openDesk. This document describes the migration from M365 accounts to openDesk using the [audriga Migration Service](https://www.audriga.com) in combination with the master authentication option in openDesk. Other source platforms are also supported, and their migrations work in a similar manner.
+
+The migration can be configured on audriga's self-service website, accessed with most common web browsers (e.g. IE, Firefox, Safari or Chrome). No software needs to be installed on your machine. The service connects to your mailbox similarly to what your email client does. Emails, attachments, folders, and, depending on the source systems, contacts, tasks, notes, and calendar data are being copied to your destination account. See [M365 to OX Migration Guide](https://audriga.com/fileadmin/guides/en/MS365-OX.pdf) for the scope and limitations of the process.
+
+The data in the source mailbox will not be deleted or altered. To configure a migration, only three simple steps in audriga's self-service portal have to be completed. After the migration has started, its status can be continuously monitored on the website.
+
+It may not be possible to complete especially large or complex migrations with only this guide. If you identify issues related to I/O, bandwidth, timeline constraints, or anything else that makes the migration more complicated than you feel comfortable handling on your own using the self-service, please get in touch with contact [audriga's support](mailto:support@audriga.com).
+
+# Prerequisites
+
+## Prepare M365 tenant for access
+
+The following instructions provide information on how to authenticate Microsoft 365 / Exchange Online accounts in the audriga migration service with "modern authentication" using a service account without the need to provide a username and password for each mailbox that will be migrated.
+
+You will have to select an existing user account that will be used as a service account for the migration. You have to register the audriga application and create an M365 email group known only to you as described in the following steps:
+
+***1. Select one account to serve as a service account***
+
+Please note that the account that shall serve as the service account requires a Microsoft 365/Exchange online license (mailbox).
+
+> **Notes** > Azure Active Directory > Groups > New Group
+- Choose a group name and group email address that includes the word "audriga" in lowercase ("Audriga" will not work), like *audriga-migration@your-maildomain.tld*
+- Choose the group type "Microsoft 365"
+- Appoint your service account (see 1.) as the owner of this group
+
+
+## Provisioning user accounts in openDesk
+
+In openDesk, you have to have all user accounts with mailboxes pre-defined before running the migration. You can either manually create your accounts using an IAM administrator or use the [user import tool](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/images/user-import) to batch import user accounts to your openDesk deployment.
+
+## Deploy openDesk with master authentication
+
+With openDesk 1.0 Enterprise, you can set openDesk's email components (OX AppSuite and OX Dovecot) into master authentication mode to run the migration as described in this document using the following two settings for your deployment:
+
+```
+secrets:
+ oxAppsuite:
+ adminPassword: "your_temporary_master_password"
+functional:
+ migration:
+ oxAppsuite:
+ enabled: true
+```
+
+1. You must specify the master password referenced in the document's following sections.
+2. You need to enable the actual master authentication mode.
+
+Updating your deployment with these settings will allow you to continue with the migration scenario. Once the migration is completed, you can remove `secrets.oxAppsuite.adminPassword` and need to turn off the migration mode by setting `functional.migration.oxAppsuite.enabled` to `false` or removing that setting, as `false` is the default before you update your deployment once again.
+
+> **Note**Matrix federation
-* [Use case](#use-case)
+* [Context](#context)
* [Example configuration](#example-configuration)
* [Disable federation](#disable-federation)
* [Separate Matrix domain](#separate-matrix-domain)
-# Use case
+# Context
The Element chat application and its server component Synapse are based on the Matrix protocol,
that supports federation with other Matrix servers to communicate with the users with accounts on these servers.
-By default, you can chat with users that have an account within your openDesk installation and federate with other
+By default, you can chat with users who have an account within your openDesk installation and federate with other
matrix-based servers.
-Federation support can be disabled.
+Federation support can be turned off.
# Example configuration
@@ -28,36 +28,35 @@ Please ensure when you come across such a value,
even if it is part of a URL hostname or path, that you adapt it where needed to your setup:
- `opendesk.domain.tld`: the mandatory `DOMAIN` setting for your deployment resulting in
-`https://chat.opendesk.domain.tld` to access the Element chat.
+`https://chat.opendesk.domain.tld` for access to the Element chat.
- `my_organization.tld`: an optional alternative domain used for mail and/or Matrix.
-If not used it is also set to `opendesk.domain.tld`.
+It is also set to `opendesk.domain.tld` if not used.
## Disable federation
-The following setting can disable federation:
+The following setting can turn off federation:
```yaml
functional:
- externalServices:
- matrix:
- federation:
- enabled: false
+ externalServices:
+ matrix:
+ federation:
+ enabled: false
```
## Separate Matrix domain
If you want to federate with other Matrix instances and use a separate Matrix domain, you need to provide a JSON file on
-the Matrix domain to use delegation.
-This is not included inside openDesk.
+the Matrix domain to use delegation. It is not part of your openDesk deployment.
Domain path: `https://my_organization.tld/.well-known/matrix/server`
Content:
```JSON
{
- "m.server": "matrix-federation.opendesk.domain.tld:443"
+ "m.server": "matrix-federation.opendesk.domain.tld:443"
}
```
More detailed information can be found in Matrix/Synapse documentation:
-[Matrix Delegation](https://matrix-org.github.io/synapse/v1.98/delegate.html)
+[Matrix Delegation](https://element-hq.github.io/synapse/latest/delegate.html)
diff --git a/docs/enhanced-configuration/separate-mail-matrix-domain.md b/docs/enhanced-configuration/separate-mail-matrix-domain.md
index d9e27086..cb96254f 100644
--- a/docs/enhanced-configuration/separate-mail-matrix-domain.md
+++ b/docs/enhanced-configuration/separate-mail-matrix-domain.md
@@ -3,9 +3,9 @@ SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlic
SPDX-License-Identifier: Apache-2.0
-->
-Separate domains for mail and or matrix
+Separate domains for mail and or Matrix
-* [Use case](#use-case)
+* [Context](#context)
* [Example configuration](#example-configuration)
* [Mail domain](#mail-domain)
* [Matrix domain](#matrix-domain)
@@ -14,24 +14,24 @@ SPDX-License-Identifier: Apache-2.0
* [Content Security Policy](#content-security-policy)
* [.well-known](#well-known)
-# Use case
+# Context
-As communication over mail and chat can go beyond the borders of your openDesk installation you may want to use different domains for the mail and/or matrix.
+As communication over mail and chat can go beyond the borders of your openDesk installation, you may want to use different domains for the mail and/or Matrix.
# Example configuration
-The following values are used in this example documentation. Please ensure when you come across such a value even if it is part of a URL hostname or path that you adapt it where needed to your setup:
+The following values are used in this example documentation. Please ensure when you come across such a value, even if it is part of a URL hostname or path, that you adapt it where needed to your setup:
- `opendesk.domain.tld`: the mandatory `DOMAIN` setting for your deployment resulting in `https://mail.opendesk.domain.tld` to access emails and `https://chat.opendesk.domain.tld` to access the Element chat that is based on the Matrix protocol.
- `my_organization.tld`: the alternative domain used for mail and/or Matrix.
## Mail domain
-By default all email addresses in openDesk are created based on the `DOMAIN` you specified for your deployment. In our example resulting in the users having `@opendesk.domain.tld` as mail addresses. In case you prefer the users to send and receive emails with another domain you can set that one using the optional `MAIL_DOMAIN` in the deployment:
+By default, all email addresses in openDesk are created based on the `DOMAIN` you specified for your deployment. In our example, the users have `@opendesk.domain.tld` as their mail addresses. In case you prefer the users to send and receive emails with another domain, you can set that one using the optional `MAIL_DOMAIN` in the deployment:
```yaml
global:
- mailDomain: "my_organization.tld"
+ mailDomain: "my_organization.tld"
```
or via environment variable
@@ -40,21 +40,21 @@ or via environment variable
export MAIL_DOMAIN=my_organization.tld
```
-This of course requires the MX record for the domain to point to the mail host for your openDesk deployment. Optionally add the SPF and DMARC records.
+Of course, this requires the domain's MX record to point to the mail host for your openDesk deployment. You can optionally add the SPF and DMARC records.
-| Record name | Type | Value |
+| Record name | Type | Value |
| -------------------------- | ---- | ------------------------------------------------ |
-| my_organization.tld | MX | `10 mail.opendesk.domain.tld` |
-| my_organization.tld | TXT | `v=spf1 +a +mx +a:mail.opendesk.domain.tld ~all` |
-| _dmarc.my_organization.tld | TXT | `v=DMARC1; p=quarantine` |
+| my_organization.tld | MX | `10 mail.opendesk.domain.tld` |
+| my_organization.tld | TXT | `v=spf1 +a +mx +a:mail.opendesk.domain.tld ~all` |
+| _dmarc.my_organization.tld | TXT | `v=DMARC1; p=quarantine` |
## Matrix domain
-Similar to the specific domain for email addresses you may want to specify a domain that differs from your deployment's default `DOMAIN` to define your users Matrix IDs. Use the `MATRIX_DOMAIN` to do so:
+Similar to the specific domain for email addresses, you may want to specify a domain that differs from your deployment's default `DOMAIN` to define your user's Matrix IDs. Use the `MATRIX_DOMAIN` to do so:
```yaml
global:
- matrixDomain: "my_organization.tld"
+ matrixDomain: "my_organization.tld"
```
or via environment variable
@@ -67,17 +67,17 @@ export MATRIX_DOMAIN=my_organization.tld
The following changes apply to the standard DNS:
-| Record name | Type | Value | Comment |
-| -------------------------------- | ---- | -------------------------------------- | ---------------------------------------------------------------------------------- |
-| _matrix._tcp.my_organization.tld | SRV | `1 10 PORT matrix.opendesk.domain.tld` | `PORT` is your NodePort/LoadBalancer port of `opendesk-synapse-federation` service |
+| Record name | Type | Value | Comment |
+| -------------------------------- | ---- | -------------------------------------- | -------------------------------------------------------------------------------------- |
+| _matrix._tcp.my_organization.tld | SRV | `1 10 PORT matrix.opendesk.domain.tld` | `PORT` is your NodePort/LoadBalancer port of the `opendesk-synapse-federation` service |
-*Note:* `matrix.opendesk.domain.tld` in the "Value" column can also be the IP address where synapse TLS port is listening to.
+*Note:* `matrix.opendesk.domain.tld` in the "Value" column can also be the IP address synapse TLS port listens to.
### Webserver
#### Content Security Policy
-The webserver of `my_organization.tld` should add `*.opendesk.domain.tld` to its CSP header.
+The `my_organization.tld` webserver should add `*.opendesk.domain.tld` to its CSP header.
#### .well-known
@@ -89,11 +89,11 @@ you need to create a JSON file with the following contents that is served from
```json
{
- "m.homeserver": {
- "base_url": "https://matrix.opendesk.domain.tld"
+ "m.homeserver": {
+ "base_url": "https://matrix.opendesk.domain.tld"
}
}
```
-This ensures clients know where to find the Matrix protocol endpoint when users specify `my_organization.tld`
+The above configuration ensures clients know where to find the Matrix protocol endpoint when users specify `my_organization.tld`
as their homeserver.
diff --git a/docs/external-services.md b/docs/external-services.md
index c961af00..6bc6c795 100644
--- a/docs/external-services.md
+++ b/docs/external-services.md
@@ -5,7 +5,7 @@ SPDX-License-Identifier: Apache-2.0
External services
-This document will cover the additional configuration to use external services like databases, caches or buckets.
+This document will cover the additional configuration for external services like databases, caches, or buckets.
* [Database](#database)
@@ -15,96 +15,96 @@ This document will cover the additional configuration to use external services l
# Database
-When deploying this suite to production, you need to configure the applications to use your production grade database
+When deploying this suite to production, you need to configure the applications to use your production-grade database
service.
-| Component | Name | Type | Parameter | Key | Default |
+| Component | Name | Type | Parameter | Key | Default |
|-------------|--------------------|------------|-----------|------------------------------------------|----------------------------|
-| Element | Synapse | PostgreSQL | | | |
-| | | | Name | `databases.synapse.name` | `matrix` |
-| | | | Host | `databases.synapse.host` | `postgresql` |
-| | | | Port | `databases.synapse.port` | `5432` |
-| | | | Username | `databases.synapse.username` | `matrix_user` |
-| | | | Password | `databases.synapse.password` | |
-| Keycloak | Keycloak | PostgreSQL | | | |
-| | | | Name | `databases.keycloak.name` | `keycloak` |
-| | | | Host | `databases.keycloak.host` | `postgresql` |
-| | | | Port | `databases.keycloak.port` | `5432` |
-| | | | Username | `databases.keycloak.username` | `keycloak_user` |
-| | | | Password | `databases.keycloak.password` | |
-| | Keycloak Extension | PostgreSQL | | | |
-| | | | Name | `databases.keycloakExtension.name` | `keycloak_extensions` |
-| | | | Host | `databases.keycloakExtension.host` | `postgresql` |
-| | | | Port | `databases.keycloakExtension.port` | `5432` |
-| | | | Username | `databases.keycloakExtension.username` | `keycloak_extensions_user` |
-| | | | Password | `databases.keycloakExtension.password` | |
-| UMS | Notifications API | PostgreSQL | | | |
-| | | | Name | `databases.umsNotificationsApi.name` | `notificationsapi` |
-| | | | Host | `databases.umsNotificationsApi.host` | `postgresql` |
-| | | | Port | `databases.umsNotificationsApi.port` | `5432` |
-| | | | Username | `databases.umsNotificationsApi.username` | `notificationsapi_user` |
-| | | | Password | `databases.umsNotificationsApi.password` | |
-| | Self Service | PostgreSQL | | | |
-| | | | Name | `databases.umsSelfservice.name` | `selfservice` |
-| | | | Host | `databases.umsSelfservice.host` | `postgresql` |
-| | | | Port | `databases.umsSelfservice.port` | `5432` |
-| | | | Username | `databases.umsSelfservice.username` | `selfservice_user` |
-| | | | Password | `databases.umsSelfservice.password` | |
-| Nextcloud | Nextcloud | MariaDB | | | |
-| | | | Name | `databases.nextcloud.name` | `nextcloud` |
-| | | | Host | `databases.nextcloud.host` | `mariadb` |
-| | | | Username | `databases.nextcloud.username` | `nextcloud_user` |
-| | | | Password | `databases.nextcloud.password` | |
-| OpenProject | OpenProject | PostgreSQL | | | |
-| | | | Name | `databases.openproject.name` | `openproject` |
-| | | | Host | `databases.openproject.host` | `postgresql` |
-| | | | Port | `databases.openproject.port` | `5432` |
-| | | | Username | `databases.openproject.username` | `openproject_user` |
-| | | | Password | `databases.openproject.password` | |
-| OX Appsuite | OX Appsuite | MariaDB | | | |
-| | | | Name | `databases.oxAppsuite.name` | `CONFIGDB` |
-| | | | Host | `databases.oxAppsuite.host` | `mariadb` |
-| | | | Username | `databases.oxAppsuite.username` | `root` |
-| | | | Password | `databases.oxAppsuite.password` | |
-| XWiki | XWiki | MariaDB | | | |
-| | | | Name | `databases.xwiki.name` | `xwiki` |
-| | | | Host | `databases.xwiki.host` | `mariadb` |
-| | | | Username | `databases.xwiki.username` | `xwiki_user` |
-| | | | Password | `databases.xwiki.password` | |
+| Element | Synapse | PostgreSQL | | | |
+| | | | Name | `databases.synapse.name` | `matrix` |
+| | | | Host | `databases.synapse.host` | `postgresql` |
+| | | | Port | `databases.synapse.port` | `5432` |
+| | | | Username | `databases.synapse.username` | `matrix_user` |
+| | | | Password | `databases.synapse.password` | |
+| Keycloak | Keycloak | PostgreSQL | | | |
+| | | | Name | `databases.keycloak.name` | `keycloak` |
+| | | | Host | `databases.keycloak.host` | `postgresql` |
+| | | | Port | `databases.keycloak.port` | `5432` |
+| | | | Username | `databases.keycloak.username` | `keycloak_user` |
+| | | | Password | `databases.keycloak.password` | |
+| | Keycloak Extension | PostgreSQL | | | |
+| | | | Name | `databases.keycloakExtension.name` | `keycloak_extensions` |
+| | | | Host | `databases.keycloakExtension.host` | `postgresql` |
+| | | | Port | `databases.keycloakExtension.port` | `5432` |
+| | | | Username | `databases.keycloakExtension.username` | `keycloak_extensions_user` |
+| | | | Password | `databases.keycloakExtension.password` | |
+| UMS | Notifications API | PostgreSQL | | | |
+| | | | Name | `databases.umsNotificationsApi.name` | `notificationsapi` |
+| | | | Host | `databases.umsNotificationsApi.host` | `postgresql` |
+| | | | Port | `databases.umsNotificationsApi.port` | `5432` |
+| | | | Username | `databases.umsNotificationsApi.username` | `notificationsapi_user` |
+| | | | Password | `databases.umsNotificationsApi.password` | |
+| | Self Service | PostgreSQL | | | |
+| | | | Name | `databases.umsSelfservice.name` | `selfservice` |
+| | | | Host | `databases.umsSelfservice.host` | `postgresql` |
+| | | | Port | `databases.umsSelfservice.port` | `5432` |
+| | | | Username | `databases.umsSelfservice.username` | `selfservice_user` |
+| | | | Password | `databases.umsSelfservice.password` | |
+| Nextcloud | Nextcloud | MariaDB | | | |
+| | | | Name | `databases.nextcloud.name` | `nextcloud` |
+| | | | Host | `databases.nextcloud.host` | `mariadb` |
+| | | | Username | `databases.nextcloud.username` | `nextcloud_user` |
+| | | | Password | `databases.nextcloud.password` | |
+| OpenProject | OpenProject | PostgreSQL | | | |
+| | | | Name | `databases.openproject.name` | `openproject` |
+| | | | Host | `databases.openproject.host` | `postgresql` |
+| | | | Port | `databases.openproject.port` | `5432` |
+| | | | Username | `databases.openproject.username` | `openproject_user` |
+| | | | Password | `databases.openproject.password` | |
+| OX Appsuite | OX Appsuite | MariaDB | | | |
+| | | | Name | `databases.oxAppsuite.name` | `CONFIGDB` |
+| | | | Host | `databases.oxAppsuite.host` | `mariadb` |
+| | | | Username | `databases.oxAppsuite.username` | `root` |
+| | | | Password | `databases.oxAppsuite.password` | |
+| XWiki | XWiki | MariaDB | | | |
+| | | | Name | `databases.xwiki.name` | `xwiki` |
+| | | | Host | `databases.xwiki.host` | `mariadb` |
+| | | | Username | `databases.xwiki.username` | `xwiki_user` |
+| | | | Password | `databases.xwiki.password` | |
# Object storage
-When deploying this suite to production, you need to configure the applications to use your production grade object
+When deploying this suite to production, you need to configure the applications to use your production-grade object
storage service.
-| Component | Name | Parameter | Key | Default |
+| Component | Name | Parameter | Key | Default |
|-------------|-------------|-----------------|------------------------------------------|--------------------|
-| OpenProject | OpenProject | | | |
-| | | Backend | `objectstores.openproject.backend` | `minio` |
-| | | Bucket | `objectstores.openproject.bucket` | `openproject` |
-| | | Endpoint | `objectstores.openproject.endpoint` | |
-| | | Provider | `objectstores.openproject.provider` | `AWS` |
-| | | Region | `objectstores.openproject.region` | |
-| | | Secret | `objectstores.openproject.secret` | |
-| | | Username | `objectstores.openproject.username` | `openproject_user` |
-| | | Use IAM profile | `objectstores.openproject.useIAMProfile` | |
+| OpenProject | OpenProject | | | |
+| | | Backend | `objectstores.openproject.backend` | `minio` |
+| | | Bucket | `objectstores.openproject.bucket` | `openproject` |
+| | | Endpoint | `objectstores.openproject.endpoint` | |
+| | | Provider | `objectstores.openproject.provider` | `AWS` |
+| | | Region | `objectstores.openproject.region` | |
+| | | Secret | `objectstores.openproject.secret` | |
+| | | Username | `objectstores.openproject.username` | `openproject_user` |
+| | | Use IAM profile | `objectstores.openproject.useIAMProfile` | |
# Cache
-When deploying this suite to production, you need to configure the applications to use your production grade cache
+When deploying this suite to production, you need to configure the applications to use your production-grade cache
service.
-| Component | Name | Type | Parameter | Key | Default |
+| Component | Name | Type | Parameter | Key | Default |
|------------------|------------------|-----------|-----------|------------------------------|------------------|
-| Intercom Service | Intercom Service | Redis | | | |
-| | | | Host | `cache.intercomService.host` | `redis-headless` |
-| | | | Port | `cache.intercomService.port` | `6379` |
-| Nextcloud | Nextcloud | Redis | | | |
-| | | | Host | `cache.nextcloud.host` | `redis-headless` |
-| | | | Port | `cache.nextcloud.port` | `6379` |
-| OpenProject | OpenProject | Memcached | | | |
-| | | | Host | `cache.openproject.host` | `memcached` |
-| | | | Port | `cache.openproject.port` | `11211` |
-| UMS | Self Service | Memcached | | | |
-| | | | Host | `cache.umsSelfservice.host` | `memcached` |
-| | | | Port | `cache.umsSelfservice.port` | `11211` |
+| Intercom Service | Intercom Service | Redis | | | |
+| | | | Host | `cache.intercomService.host` | `redis-headless` |
+| | | | Port | `cache.intercomService.port` | `6379` |
+| Nextcloud | Nextcloud | Redis | | | |
+| | | | Host | `cache.nextcloud.host` | `redis-headless` |
+| | | | Port | `cache.nextcloud.port` | `6379` |
+| OpenProject | OpenProject | Memcached | | | |
+| | | | Host | `cache.openproject.host` | `memcached` |
+| | | | Port | `cache.openproject.port` | `11211` |
+| UMS | Self Service | Memcached | | | |
+| | | | Host | `cache.umsSelfservice.host` | `memcached` |
+| | | | Port | `cache.umsSelfservice.port` | `11211` |
diff --git a/docs/getting-started.md b/docs/getting-started.md
index 88c741ce..8d2b0e61 100644
--- a/docs/getting-started.md
+++ b/docs/getting-started.md
@@ -5,7 +5,7 @@ SPDX-License-Identifier: Apache-2.0
Getting started
-This documentation should enable you to create your own evaluation instance of openDesk on your Kubernetes cluster.
+This documentation lets you create an openDesk evaluation instance on your Kubernetes cluster.
* [Requirements](#requirements)
@@ -22,7 +22,7 @@ This documentation should enable you to create your own evaluation instance of o
* [Volumes](#volumes)
* [Connectivity](#connectivity)
* [Ports](#ports)
- * [Web based user interface](#web-based-user-interface)
+ * [Web-based user interface](#web-based-user-interface)
* [Mail clients](#mail-clients)
* [Mail/SMTP configuration](#mailsmtp-configuration)
* [TURN configuration](#turn-configuration)
@@ -36,40 +36,39 @@ This documentation should enable you to create your own evaluation instance of o
* [Uninstall](#uninstall)
-Thanks for looking into the openDesk Getting started guide. This documents covers essentials configuration steps to
-deploy openDesk onto your kubernetes infrastructure.
+Thanks for looking into the openDesk Getting Started guide. This document covers essential configuration steps to
+deploy openDesk onto your Kubernetes infrastructure.
# Requirements
-Detailed system requirements are covered on [requirements](requirements.md) page.
+Detailed system requirements are covered on the [requirements](requirements.md) page.
# Customize environment
-Before deploying openDesk, you have to configure the deployment to suit your environment.
-To keep your deployment up to date, we recommend customizing in `dev`, `test` or `prod` and not in `default` environment
+Before deploying openDesk, you must configure the deployment to fit your environment.
+To keep your deployment up to date, we recommend customizing in `dev`, `test`, or `prod` and not in `default` environment
files.
> All configuration options and their default values can be found in files at `helmfile/environments/default/`
-For the following guide, we will use `dev` as environment, where variables can be set in
+For the following guide, we will use `dev` as environment where variables can be set in
`helmfile/environments/dev/values.yaml.gotmpl`.
## DNS
The deployment is designed to deploy each application/service under a dedicated subdomain.
-For your convenience, we recommend to create a `*.domain.tld` A-Record to your cluster ingress controller,
-otherwise you need to create an A-Record for each subdomain.
+For your convenience, we recommend creating a `*.domain.tld` A-Record to your cluster ingress controller; otherwise, you must create an A-Record for each subdomain.
-| Record name | Type | Value | Additional information |
+| Record name | Type | Value | Additional information |
|-------------------------------|------|----------------------------------------------------|------------------------------------------------------------------|
-| *.domain.tld | A | IPv4 address of your Ingress Controller | |
-| *.domain.tld | AAAA | IPv6 address of your Ingress Controller | |
-| mail.domain.tld | A | IPv4 address of your postfix NodePort/LoadBalancer | Optional mail should directly be delivered to openDesk's Postfix |
-| mail.domain.tld | AAAA | IPv6 address of your postfix NodePort/LoadBalancer | Optional mail should directly be delivered to openDesk's Postfix |
-| domain.tld | MX | `10 mail.domain.tld` | |
-| domain.tld | TXT | `v=spf1 +a +mx +a:mail.domain.tld ~all` | Optional, use proper MTA record if present |
-| _dmarc.domain.tld | TXT | `v=DMARC1; p=quarantine` | Optional |
-| default._domainkey.domain.tld | TXT | `v=DKIM1; k=rsa; h=sha256; ...` | Optional DKIM settings |
+| *.domain.tld | A | IPv4 address of your Ingress Controller | |
+| *.domain.tld | AAAA | IPv6 address of your Ingress Controller | |
+| mail.domain.tld | A | IPv4 address of your postfix NodePort/LoadBalancer | Optional mail should directly be delivered to openDesk's Postfix |
+| mail.domain.tld | AAAA | IPv6 address of your postfix NodePort/LoadBalancer | Optional mail should directly be delivered to openDesk's Postfix |
+| domain.tld | MX | `10 mail.domain.tld` | |
+| domain.tld | TXT | `v=spf1 +a +mx +a:mail.domain.tld ~all` | Optional, use proper MTA record if present |
+| _dmarc.domain.tld | TXT | `v=DMARC1; p=quarantine` | Optional |
+| default._domainkey.domain.tld | TXT | `v=DKIM1; k=rsa; h=sha256; ...` | Optional DKIM settings |
## Domain
@@ -79,15 +78,15 @@ All subdomains can be customized. For example, _Nextcloud_ can be changed to `fi
```yaml
global:
- hosts:
- nextcloud: "files"
+ hosts:
+ nextcloud: "files"
```
-The domain have to be set either via `dev` environment
+The domain has to be set either via `dev` environment
```yaml
global:
- domain: "domain.tld"
+ domain: "domain.tld"
```
or via environment variable
@@ -98,58 +97,58 @@ export DOMAIN=domain.tld
### Apps
-All available apps and their default value can be found in `helmfile/environments/default/workplace.yaml`.
+All available apps and their default value are in `helmfile/environments/default/workplace.yaml`.
-| Component | Name | Default | Description |
+| Component | Name | Default | Description |
| -------------------- | --------------------------- | ------- | ------------------------------ |
-| Certificates | `certificates.enabled` | `true` | TLS certificates |
-| ClamAV (Distributed) | `clamavDistributed.enabled` | `false` | Antivirus engine |
-| ClamAV (Simple) | `clamavSimple.enabled` | `true` | Antivirus engine |
-| Collabora | `collabora.enabled` | `true` | Weboffice |
-| CryptPad | `cryptpad.enabled` | `true` | Weboffice |
-| Dovecot | `dovecot.enabled` | `true` | Mail backend |
-| Element | `element.enabled` | `true` | Secure communications platform |
-| Jitsi | `jitsi.enabled` | `true` | Videoconferencing |
-| MariaDB | `mariadb.enabled` | `true` | Database |
-| Memcached | `memcached.enabled` | `true` | Cache Database |
-| MinIO | `minio.enabled` | `true` | Object Storage |
-| Nextcloud | `nextcloud.enabled` | `true` | File share |
-| Nubus | `nubus.enabled` | `true` | Identity Management & Portal |
-| OpenProject | `openproject.enabled` | `true` | Project management |
-| OX Appsuite | `oxAppsuite.enabled` | `true` | Groupware |
-| Postfix | `postfix.enabled` | `true` | MTA |
-| PostgreSQL | `postgresql.enabled` | `true` | Database |
-| Redis | `redis.enabled` | `true` | Cache Database |
-| XWiki | `xwiki.enabled` | `true` | Knowledge management |
+| Certificates | `certificates.enabled` | `true` | TLS certificates |
+| ClamAV (Distributed) | `clamavDistributed.enabled` | `false` | Antivirus engine |
+| ClamAV (Simple) | `clamavSimple.enabled` | `true` | Antivirus engine |
+| Collabora | `collabora.enabled` | `true` | Weboffice |
+| CryptPad | `cryptpad.enabled` | `true` | Weboffice |
+| Dovecot | `dovecot.enabled` | `true` | Mail backend |
+| Element | `element.enabled` | `true` | Secure communications platform |
+| Jitsi | `jitsi.enabled` | `true` | Videoconferencing |
+| MariaDB | `mariadb.enabled` | `true` | Database |
+| Memcached | `memcached.enabled` | `true` | Cache Database |
+| MinIO | `minio.enabled` | `true` | Object Storage |
+| Nextcloud | `nextcloud.enabled` | `true` | File share |
+| Nubus | `nubus.enabled` | `true` | Identity Management & Portal |
+| OpenProject | `openproject.enabled` | `true` | Project management |
+| OX Appsuite | `oxAppsuite.enabled` | `true` | Groupware |
+| Postfix | `postfix.enabled` | `true` | MTA |
+| PostgreSQL | `postgresql.enabled` | `true` | Database |
+| Redis | `redis.enabled` | `true` | Cache Database |
+| XWiki | `xwiki.enabled` | `true` | Knowledge management |
Exemplary, Jitsi can be disabled like:
```yaml
jitsi:
- enabled: false
+ enabled: false
```
## Private registries
-By default Helm charts and container images are fetched from OCI registries. These registries can be found for most cases
+By default, Helm charts and container images are fetched from OCI registries. These registries can be found in most cases
in the [openDesk/component section on Open CoDE](https://gitlab.opencode.de/bmi/opendesk/components).
-For untouched upstream artifacts that do not belong to a functional component's core we use upstream registries
+For untouched upstream artifacts that do not belong to a functional component's core, we use upstream registries
like Docker Hub.
-Doing a test deployment will most likely be fine with this setup. In case you want to deploy multiple times a day
-and fetch from the same IP address you might run into rate limits at Docker Hub. In that case and in cases you
-prefer the use of a private image registry anyway you can configure such for
+Doing a test deployment will be fine with this setup. In case you want to deploy multiple times a day
+and fetch from the same IP address, you might run into rate limits at Docker Hub. In that case and in cases you
+prefer the use of a private image registry, you can configure such for
[your target environment](./../helmfile/environments/dev/values.yaml.gotmpl.sample) by setting
- `global.imageRegistry` for a private image registry and
- `global.helmRegistry` for a private Helm chart registry.
```yaml
global:
- imageRegistry: "my_private_registry.domain.tld"
+ imageRegistry: "my_private_registry.domain.tld"
```
-alternatively you can use an environment variable:
+alternatively, you can use an environment variable:
```shell
export PRIVATE_IMAGE_REGISTRY_URL=my_private_registry.domain.tld
@@ -159,16 +158,16 @@ or control repository override fine-granular per registry:
```yaml
repositories:
- image:
- dockerHub: "my_private_registry.domain.tld/docker.io/"
- registryOpencodeDe: "my_private_registry.domain.tld/registry.opencode.de/"
+ image:
+ dockerHub: "my_private_registry.domain.tld/docker.io/"
+ registryOpencodeDe: "my_private_registry.domain.tld/registry.opencode.de/"
```
-If authentication is required, you can reference imagePullSecrets as following:
+If authentication is required, you can reference `imagePullSecrets` as follows:
```yaml
global:
- imagePullSecrets:
+ imagePullSecrets:
- "external-registry"
```
@@ -178,13 +177,13 @@ global:
Some apps, like Jitsi or Dovecot, require HTTP and external TCP connections.
These apps create a Kubernetes service object.
-You can configure, whether `NodePort` (for on-premise), `LoadBalancer` (for cloud) or `ClusterIP` (to disable) should be
+You can configure whether `NodePort` (for on-premise), `LoadBalancer` (for cloud), or `ClusterIP` (to disable) should be
used:
```yaml
cluster:
- service:
- type: "NodePort"
+ service:
+ type: "NodePort"
```
### Networking
@@ -193,16 +192,16 @@ If your cluster has not the default `cluster.local` domain configured, you need
```yaml
cluster:
- networking:
- domain: "acme.internal"
+ networking:
+ domain: "acme.internal"
```
-If your cluster has not the default `10.0.0.0/8` CIDR configured, you need to provide the CIDR via:
+If your cluster has not the default `10.0.0.0/8` CIDR configured, you need to provide the CIDR via the following:
```yaml
cluster:
- networking:
- cidr:
+ networking:
+ cidr:
- "127.0.0.0/8"
```
@@ -211,132 +210,131 @@ explicitly configure the related IPs or IP ranges:
```yaml
cluster:
- networking:
- incomingCIDR:
+ networking:
+ incomingCIDR:
- "172.16.0.0/12"
```
### Ingress
-By default, the `ingressClassName` is empty to choose your default ingress controller. You may want to customize it by
+By default, the `ingressClassName` is empty to select your default ingress controller. You may want to customize it by
setting the following attribute to the name of the currently only supported ingress controller `ingress-nginx` (see
-[requirements.md](./requirements.md)) for reference) within your deployment if that is not the clusters default ingress.
+[requirements.md](./requirements.md)) for reference) within your deployment if that is not the cluster's default ingress.
```yaml
ingress:
- ingressClassName: "name-of-my-nginx-ingress"
+ ingressClassName: "name-of-my-nginx-ingress"
```
### Container runtime
-Some apps require specific configuration for the container runtime. You can set your container runtime like `cri-o`,
+Some apps require specific configurations for the container runtime. You can set your container runtime like `cri-o`,
`containerd` or `docker` by:
```yaml
cluster:
- container:
- engine: "containerd"
+ container:
+ engine: "containerd"
```
### Volumes
-When your cluster has a `ReadWriteMany` volume provisioner, you can benefit from distributed or scaling of apps. By
+When your cluster has a `ReadWriteMany` volume provisioner, you can benefit from the distribution or scaling of apps. By
default, only `ReadWriteOnce` is enabled. To enable `ReadWriteMany` you can set:
```yaml
cluster:
- persistence:
- readWriteMany: true
+ persistence:
+ readWriteMany: true
```
The **StorageClass** can be set by:
```yaml
persistence:
- storageClassNames:
- RWX: "my-read-write-many-class"
- RWO: "my-read-write-once-class"
+ storageClassNames:
+ RWX: "my-read-write-many-class"
+ RWO: "my-read-write-once-class"
```
## Connectivity
### Ports
-**Note:** If you use `NodePort` for service exposure, you need to check your deployment for the actual ports.
+**Note:** If you use `NodePort` for service exposure, you must check your deployment for the actual ports.
-#### Web based user interface
+#### Web-based user interface
-To use the openDesk functionality with its web based user interface you need to publicly expose the following ports:
+To use the openDesk functionality with its web-based user interface, you need to expose the following ports publicly:
-| Component | Description | Port | Type |
+| Component | Description | Port | Type |
| ------------------ | ----------------------- | ----: | ---: |
-| openDesk | Kubernetes Ingress | 80 | TCP |
-| openDesk | Kubernetes Ingress | 443 | TCP |
-| Jitsi Video Bridge | ICE Port for video data | 10000 | UDP |
+| openDesk | Kubernetes Ingress | 80 | TCP |
+| openDesk | Kubernetes Ingress | 443 | TCP |
+| Jitsi Video Bridge | ICE Port for video data | 10000 | UDP |
#### Mail clients
To connect with mail clients like [Thunderbird](https://www.thunderbird.net/), the following ports need public exposure:
-| Component | Description | Port | Type |
+| Component | Description | Port | Type |
| ------------------ | ----------------------- | ----: | ---: |
-| Dovecot | IMAPS | 993 | TCP |
-| | POP3S | 995 | TCP |
-| Postfix | SMTP | 25 | TCP |
-| | SMTPS | 587 | TCP |
+| Dovecot | IMAPS | 993 | TCP |
+| | POP3S | 995 | TCP |
+| Postfix | SMTP | 25 | TCP |
+| | SMTPS | 587 | TCP |
### Mail/SMTP configuration
-To use the full potential of the openDesk, you need to set up an SMTP relay which allows sending emails from
+To use the full potential of the openDesk, you need to set up an SMTP relay that allows sending emails from
the whole subdomain.
```yaml
smtp:
- host: "mail.open.desk"
- username: "openDesk"
- password: "secret"
+ host: "mail.open.desk"
+ username: "openDesk"
+ password: "secret"
```
Enabling DKIM signing of emails helps to reduce spam and increases trust.
-openDesk ships dkimpy-milter as Postfix milter for signing mails.
+openDesk ships dkimpy-milter as Postfix milter for signing emails.
```yaml
dkimpy:
- enable: true
- dkim:
- key:
- value: |
- HzZs08QF1O7UiAkcM9T3U7rePPECtSFvWZIvyKqdg8E=
- selector: "default"
- useED25519: true # when false, RSA is used
+ enable: true
+ dkim:
+ key:
+ value: "HzZs08QF1O7UiAkcM9T3U7rePPECtSFvWZIvyKqdg8E="
+ selector: "default"
+ useED25519: true # when false, RSA is used
```
### TURN configuration
-Some components (Jitsi, Element) use for direct communication a TURN server. You can configure your own TURN server with
+Some components (Jitsi, Element) use a TURN server for direct communication. You can configure your own TURN server with
these options:
```yaml
turn:
- transport: "udp" # or tcp
- credentials: "secret"
- server:
- host: "turn.open.desk"
- port: "3478"
- tls:
- host: "turns.open.desk"
- port: "5349"
+ transport: "udp" # or tcp
+ credentials: "secret"
+ server:
+ host: "turn.open.desk"
+ port: "3478"
+ tls:
+ host: "turns.open.desk"
+ port: "5349"
```
### Certificate issuer
-As mentioned in [requirements](requirements.md#certificate-management) you can provide your own valid certificate. A TLS
-secret with name `opendesk-certificates-tls` needs to be present in application namespace. For deployment, you can
-disable `Certificate` resource creation by:
+As mentioned in [requirements](requirements.md#certificate-management), you can provide your own valid certificate. A TLS
+secret named `opendesk-certificates-tls` must be present in the application namespace. For deployment, you can
+turn off `Certificate` resource creation by:
```yaml
certificates:
- enabled: false
+ enabled: false
```
If you want to leverage the `cert-manager.io` to handle certificates, like `Let's encrypt`, you need to provide the
@@ -344,29 +342,29 @@ configured cluster issuer:
```yaml
certificate:
- issuerRef:
- name: "letsencrypt-prod"
+ issuerRef:
+ name: "letsencrypt-prod"
```
Additionally, it is possible to request wildcard certificates by:
```yaml
certificate:
- wildcard: true
+ wildcard: true
```
## Password seed
-All secrets are generated from a single master password via Master Password (algorithm).
-To prevent others from using your openDesk instance, we highly recommend setting an individual master password via:
+All secrets are generated from a master password via [Master Password (algorithm)](https://en.wikipedia.org/wiki/Master_Password_(algorithm)).
+To prevent others from using your openDesk instance, you must set your individual master password via:
```shell
-export MASTER_PASSWORD="openDesk"
+export MASTER_PASSWORD="your_individual_master_password"
```
## Install
-After setting your environment specific values in `dev` environment, you can start deployment by:
+After setting your environment-specific values in `dev` environment, you can start deployment by:
```shell
helmfile apply -e dev -n [-l ] [--suppress-diff]
@@ -396,7 +394,7 @@ helmfile apply -e dev -n
## Install single release/chart
-Instead of iteration through all services, you can also deploy a single release like mariadb by:
+Instead of iteration through all services, you can also deploy a single release like `mariadb` by:
```shell
helmfile apply -e dev -n -l name=mariadb
@@ -404,38 +402,36 @@ helmfile apply -e dev -n -l name=mariadb
# Access deployment
-When all apps are successfully deployed and pod status' went to `Running` or `Succeeded`, you can navigate to
+When all apps are successfully deployed, and their Pod's status is `Running` or `Succeeded`, you can navigate to
```text
https://portal.domain.tld
```
-If you change the subdomain of `nubus`, you need to replace `portal` by your specified subdomain.
+If you change the subdomain of `nubus`, you must replace `portal` with the specified subdomain.
**Credentials:**
+openDesk deploys with the standard user account `Administrator`, which password you get retrieved as follows:
+
```shell
# Replace with your namespace
NAMESPACE=your-namespace
-# Get ConfigMap with credentials
-kubectl -n ${NAMESPACE} get cm ums-stack-data-swp-data -o jsonpath='{.data.dev-test-users\.yaml}'
+# Get password for IAM "Administrator" account
+kubectl -n ${NAMESPACE} secret ums-nubus-credentials -o jsonpath='{.data.administrator_password}' | base64 -d
```
-Renders you a two part ConfigMap where the `username` and `password` attributes in the `properties`
-section provide you with the desired information to login with the two default user roles:
-
-| Username | Password | Description |
-|-----------------|--------------------------------------------|------------------|
-| `default.user` | `40615..............................e9e2f` | Application user |
-| `default.admin` | `17027..............................04db6` | Administrator |
+In openDesk Community Edition, you get two more default accounts:
+- `default.admin`: `kubectl -n ${NAMESPACE} secret ums-nubus-credentials -o jsonpath='{.data.admin_password}' | base64 -d`
+- `default.user`: `kubectl -n ${NAMESPACE} secret ums-nubus-credentials -o jsonpath='{.data.user_password}' | base64 -d`
## Using from external repository
-It is possible to refer to `./helmfile_generic.yaml` from an external
-directory or repository. The `helmfile.yaml` that refers to
+Referring to `./helmfile_generic.yaml` from an external
+directory or repository is possible. The `helmfile.yaml` that refers to
`./helmfile_generic.yaml` may define custom environments. These custom
-environments may overwrite certain configuration values. These
+environments may overwrite specific configuration values. These
configuration values are:
* `global.domain`
@@ -450,8 +446,8 @@ You can uninstall the deployment by:
helmfile destroy -n
```
-> **Note**
-> Not all Jobs, PersistentVolumeClaims or Certificates are deleted; you have to delete them manually
+> **Note**: get the user's existing external_id (auth_provider: "oidc")
-- PUT /_synapse/admin/v2/users/@: update user's external_id with JSON payload:
+- `GET /_synapse/admin/v2/users/@:` to get the user's existing external_id (auth_provider: "oidc")
+- `PUT /_synapse/admin/v2/users/@:` to update user's external_id with JSON payload:
`{ "external_ids": [ { "auth_provider": "oidc", "external_id": "+deprecated" } ] }`
-- POST /_synapse/admin/v1/deactivate/@: deactivate old user with JSON payload:
+- `POST /_synapse/admin/v1/deactivate/@:` to deactivate old user with JSON payload:
`{ "erase": true }`
For more details, check the Admin API documentation:
https://element-hq.github.io/synapse/latest/usage/administration/admin_api/index.html
You can enforce the old standard with the following setting:
-```
+```yaml
functional:
- chat:
- matrix:
- profile:
- useImmutableIdentifierForLocalpart: true
+ chat:
+ matrix:
+ profile:
+ useImmutableIdentifierForLocalpart: true
```
#### File-share configurability
-Now we provide some configurability regarding the sharing capabilities of the Nextcloud component.
+Now, we provide some configurability regarding the sharing capabilities of the Nextcloud component.
-The new default is different from the standard until now.
-To keep the current state after the upgrade from 0.9.0, you have to provide the following settings:
+See the settings under `functional.filestore` in [functional.yaml](../helmfile/environments/default/functional.yaml).
-```
+For the following settings, the default in openDesk 1.0 has changed, so you might want to update
+the settings for your deployment to keep its current behavior:
+
+```yaml
functional:
- filestore:
- sharing:
- external:
- enabled: true
+ filestore:
+ sharing:
+ external:
+ enabled: true
+ expiry:
+ activeByDefault: false
```
-Please also check the other new options available at `functional.filestore.sharing`.
-
#### Updated default subdomains in `global.hosts`
-We have streamlined the subdomain names used by openDesk to be more user-friendly and to avoid the use of specific
+We have streamlined the subdomain names in openDesk to be more user-friendly and to avoid the use of specific
product names.
-This results in following change of default subdomain naming:
+This results in the following changes to the default subdomain naming:
- **collabora**: `collabora` → `office`
- **cryptpad**: `cryptpad` → `pad`
@@ -133,8 +132,7 @@ This results in following change of default subdomain naming:
- **nextcloud**: `fs` → `files`
- **openproject**: `project` → `projects`
-During upgrade, any existing environment needs to keep the old subdomains,
-cause url/link changes are not every supported and not tested at all.
+Existing deployments should keep the old subdomains cause URL/link changes are not supported through all components.
If you have not already defined the entire `global.hosts` dictionary in your custom environments values, please set it
to the defaults that were used before the upgrade:
@@ -164,20 +162,17 @@ global:
xwiki: "wiki"
```
-In case you would like to use the updated hostnames you at least have to apply some manual changes. But do this at
-your own risk. Be also aware that some of your user's bookmarks and links will stop working.
+In case you would like to update an existing deployment to the new hostnames, please check the following list:
-- Update the affected portal tiles:
- - All tiles in the "Files" category.
- - The "Projects" tile in the "Management" category.
-- There are two options to change the link for the portal tiles:
- - Use an admin account to access the portal's edit mode (on the bottom of the sidebar portal's menu).
- - Utilize the UDM REST API to update the portal tile objects.
-- Update the hostnames for the OpenProject-Nextcloud integration using a functional admin user for both components:
+- Do this at your own risk.
+- Some of your user's bookmarks and links will stop working.
+- Portal links are getting updated automatically.
+- The update of the OpenProject <-> Nextcloud file integration needs to be updated manually as follows:
+ - Use an account with functional admin permissions on both components
- In OpenProject: *Administration* > *Files* > *External file storages* > Select `Nextcloud at [your_domain]`
- Edit *Details* - *General Information* - *Storage provider* and update the *hostname* to `files.`.
- - In Nextcloud: *Administration* > *OpenProject* > *OpenProject server* update the *OpenProject host* to
- to `projects.`.
+ - Edit *Details* - *General Information* - *Storage provider* and update the *hostname* to `files.`
+ - In Nextcloud: *Administration* > *OpenProject* > *OpenProject server*
+ - Update the *OpenProject host* to `projects.`
#### Updated `global.imagePullSecrets`
@@ -192,12 +187,12 @@ global:
- "external-registry"
```
-#### Dedicated group for access of the UDM REST API
+#### Dedicated group for access to the UDM REST API
Prerequisite: You allow the use of the [IAM's API](https://docs.software-univention.de/developer-reference/5.0/en/udm/rest-api.html)
with the following settings:
-```
+```yaml
functional:
externalServices:
nubus:
@@ -205,56 +200,43 @@ functional:
enabled: true
```
-With 0.9.0 all members of the group "Domain Admins" were able to successfully authenticate with the API.
+With 0.9.0, all members of the group "Domain Admins" could successfully authenticate with the API.
-This has been changed and there is now a dedicated group required for using the API: `IAM API - Full Access`
+With openDesk 1.0, we introduced a specific group for permission to use the API: `IAM API - Full Access`.
-If you need specific accounts to make use of the API, please go ahead and assign them to the aforementioned group.
+The IAMs admin account `Administrator` is a member of this group by default, but no other user is.
+
+If you need other accounts to use the API, please assign them to the aforementioned group.
### Automated migrations
-#### Local Postfix as Relay
+The `migrations-pre` and `migrations-post` jobs in the openDesk deployment address the automated migration tasks.
-All components relay outgoing mails to the local Postfix. In order for the configuration to be picked up by all components the following restarts are triggered in the migrations `POST` stage:
+The permissions required to execute the migrations can be found in the migration's Helm chart [`role.yaml'](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations/-/blob/v1.3.5/charts/opendesk-migrations/templates/role.yaml?ref_type=tags#L29)
-- Deployments:
- - `opendesk-nextcloud-php`
- - `ums-umc-server`
-- Stateful Sets:
- - `ums-selfservice-listener`
- - `opendesk-synapse`
+The actual actions are described as code comments in the related run module [`run_2.py](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/images/opendesk-migrations/-/blob/main/odmigs-python/odmigs_runs/run_2.py).
-#### Updated IAM component Nubus
+#### Manual cleanup
-openDesk is integrating the latest [Nubus](https://www.univention.de/produkte/nubus/) development from Univention. The now redundant and scalable LDAP requires migration activities. These have been automated to avoid manual interaction. The `run_2` of the openDesk
-upgrade migrations executes the following steps:
+We do not execute possible cleanup steps as part of the migrations POST stage. So you might want to remove the no longer used PVCs after a successful upgrade:
-- Stage `PRE`:
- - Delete service `ums-keycloak`, as it will be recreated headless.
- - Scale down `statefulset/ums-ldap-server` and `statefulset/ums-ldap-notifier` in preparation or the next step:
- - Create two new PVCs `shared-data-ums-ldap-server-primary-0` and `shared-data-ums-ldap-server-primary-1` for the new LDAP primary pods as copy from the existing `shared-data-ums-ldap-server-0`. The LDAP secondaries will sync from the primary nodes.
-- Stage `POST`:
- - Restart Keycloak.
-
-##### Manual cleanup
-
-Currently we do not execute possible cleanup steps as part of the migrations POST stage. So you might want to remove the no longer used PVCs after successful upgrade:
-```
+```shell
NAMESPACE=
kubectl -n ${NAMESPACE} delete pvc shared-data-ums-ldap-server-0
kubectl -n ${NAMESPACE} delete pvc shared-run-ums-ldap-server-0
+kubectl -n ${NAMESPACE} delete pvc ox-connector-ox-contexts-ox-connector-0
```
## From v0.8.1
### Updated `cluster.networking.cidr`
-- Action: `cluster.networking.cidr` is now an array (was a string until 0.8.1), please update your setup accordingly if you explicitly set this value.
+- Action: `cluster.networking.cidr` is now an array (was a string until 0.8.1); please update your setup accordingly if you explicitly set this value.
- Reference:[cluster.yaml](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/-/blob/main/helmfile/environments/default/cluster.yaml)
### Updated customizable template attributes
-- Action: Please ensure you update you custom deployment values according with the updated default value structure.
+- Action: Please update your custom deployment values according to the updated default value structure.
- References:
- `functional.` prefix for `authentication.*`, `externalServices.*`, `admin.*` and `filestore.*`, see [functional.yaml](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/-/blob/main/helmfile/environments/default/functional.yaml).
- `debug.` prefix for `cleanup.*`, see [debug.yaml](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/-/blob/main/helmfile/environments/default/debug.yaml).
@@ -263,17 +245,17 @@ kubectl -n ${NAMESPACE} delete pvc shared-run-ums-ldap-server-0
### `migrations` S3 bucket
-- Action: For self managed/external S3/object storages, please ensure you add a bucket `migrations` to your S3.
+- Action: For self-managed/external S3/object storages, please ensure you add a bucket `migrations` to your S3.
- Reference: `objectstores.migrations` in [objectstores.yaml](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/-/blob/main/helmfile/environments/default/objectstores.yaml)
-# Related components and artefacts
+# Related components and artifacts
-openDesk comes with two upgrade steps as part of the deployment, they can be found in the folder [/helmfile/apps](../helmfile/apps/) as all other components:
+openDesk comes with two upgrade steps as part of the deployment; they can be found in the folder [/helmfile/apps](../helmfile/apps/) as all other components:
- `migrations-pre`: Is the very first app that gets deployed.
- `migrations-post`: Is the last app that gets deployed.
-Both migrations have to be deployed exclusively at their first/last position and not in parallel with other components.
+Both migrations must be deployed exclusively at their first/last position and not parallel with other components.
The status of the upgrade migrations is tracked in the ConfigMap `migrations-status`, more details can be found in the [README.md of the related container image](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/images/opendesk-migrations/README.md).
@@ -281,8 +263,8 @@ The status of the upgrade migrations is tracked in the ConfigMap `migrations-sta
When a new upgrade migration is required, ensure to address the following list:
-- Update the generated release version file [`global.generated.yaml`](../helmfile/environments/default/global.generated.yaml) at least on the patch level to test the upgrade in your feature branch as well as trigger it in the `develop` branch after the feature branch was merged. The set value gets overwritten during the release process with the release's actual version number.
+- Update the generated release version file [`global.generated.yaml`](../helmfile/environments/default/global.generated.yaml) at least on the patch level to test the upgrade in your feature branch and trigger it in the `develop` branch after the feature branch was merged. During the release process, the value is overwritten by the release's version number.
- You have to implement the migration logic as a runner script in the [`opendesk-migrations`](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/images/opendesk-migrations) image. Please find more instructions in the linked repository.
- You most likely have to update the [`opendesk-migrations` Helm chart](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations) within the `rules` section of the [`role.yaml`](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations/-/blob/main/charts/opendesk-migrations/templates/role.yaml) to provide the permissions required for the execution of your migration's logic.
-- You have to set the runner's ID you want to execute in the [migrations.yaml.gotmpl](../helmfile/shared/migrations.yaml.gotmpl). See also the `migrations.*` section of [the Helm chart's README.md](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations/-/blob/main/charts/opendesk-migrations/README.md).
+- You must set the runner's ID you want to execute in the [migrations.yaml.gotmpl](../helmfile/shared/migrations.yaml.gotmpl). See also the `migrations.*` section of [the Helm chart's README.md](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations/-/blob/main/charts/opendesk-migrations/README.md).
- Update the [`charts.yaml`](../helmfile/environments/default/charts.yaml) and [`images.yaml`](../helmfile/environments/default/images.yaml) to reflect the newer releases of the `opendesk-migrations` Helm chart and container image.
diff --git a/docs/monitoring.md b/docs/monitoring.md
index a5169dba..379a68a5 100644
--- a/docs/monitoring.md
+++ b/docs/monitoring.md
@@ -5,7 +5,7 @@ SPDX-License-Identifier: Apache-2.0
Monitoring
-This document will cover how you can enable observability with Prometheus based monitoring and Grafana dashboards, as
+This document will cover how you can enable observability with Prometheus-based monitoring and Grafana dashboards as
well as the overall status of monitoring integration.
@@ -19,13 +19,13 @@ well as the overall status of monitoring integration.
# Technology
-We provide integration into the Prometheus based monitoring.
+We provide integration into the Prometheus-based monitoring.
Together with
[kube-prometheus-stack](https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack) you
-easily leverage the full potential of open-source cloud-native observability stack.
+easily leverage the full potential of the open-source cloud-native observability stack.
Before enabling the following options, you need to install the respective CRDs from the kube-prometheus-stack
-repository or prometheus operator.
+repository or Prometheus operator.
# Defaults
@@ -34,24 +34,24 @@ All configurable options and their defaults can be found in
# Metrics
-To deploy podMonitor and serviceMonitor custom resources, enable it by:
+To deploy `podMonitor` and `serviceMonitor` custom resources, enable it by:
```yaml
prometheus:
- serviceMonitors:
- enabled: true
- podMonitors:
- enabled: true
+ serviceMonitors:
+ enabled: true
+ podMonitors:
+ enabled: true
```
# Alerts
-Some helm-charts provide a default set of prometheusRules for alerting, enable it by:
+Some Helm charts provide a default set of prometheusRules for alerting; enable it by:
```yaml
prometheus:
- prometheusRules:
- enabled: true
+ prometheusRules:
+ enabled: true
```
# Dashboards for Grafana
@@ -60,13 +60,13 @@ To deploy optional ConfigMaps with Grafana dashboards, enable it by:
```yaml
grafana:
- dashboards:
- enabled: true
+ dashboards:
+ enabled: true
```
# Components
-| Component | Metrics (pod- or serviceMonitor) | Alerts (prometheusRule) | Dashboard (Grafana) |
+| Component | Metrics (pod- or serviceMonitor) | Alerts (prometheusRule) | Dashboard (Grafana) |
|:----------|-----------------------------------|-------------------------|---------------------|
-| Collabora | :white_check_mark: | :white_check_mark: | :white_check_mark: |
-| Nextcloud | :white_check_mark: | :x: | :x: |
+| Collabora | :white_check_mark: | :white_check_mark: | :white_check_mark: |
+| Nextcloud | :white_check_mark: | :x: | :x: |
diff --git a/docs/requirements.md b/docs/requirements.md
index fa3d1f90..407cf89f 100644
--- a/docs/requirements.md
+++ b/docs/requirements.md
@@ -4,7 +4,7 @@ SPDX-License-Identifier: Apache-2.0
-->
Requirements
-This section covers the internal system requirements as well as external service requirements for productive use.
+This section covers the internal system requirements and external service requirements for productive use.
* [tl;dr](#tldr)
@@ -18,13 +18,14 @@ This section covers the internal system requirements as well as external service
# tl;dr
-openDesk is a Kubernetes only solution and requires an existing Kubernetes (K8s) cluster.
+
+openDesk is a Kubernetes-only solution and requires an existing Kubernetes (K8s) cluster.
- K8s cluster >= 1.24, [CNCF Certified Kubernetes distribution](https://www.cncf.io/certification/software-conformance/)
- Domain and DNS Service
- Ingress controller (Ingress NGINX)
- [Helm](https://helm.sh/) >= v3.9.0
-- [Helmfile](https://helmfile.readthedocs.io/en/latest/) >= **v1.0.0-rc.5**
+- [Helmfile](https://helmfile.readthedocs.io/en/latest/) >= **v1.0.0-rc5**
- [HelmDiff](https://github.com/databus23/helm-diff) >= 3.6.0
- Volume provisioner supporting RWO (read-write-once)
- Certificate handling with [cert-manager](https://cert-manager.io/)
@@ -33,13 +34,11 @@ openDesk is a Kubernetes only solution and requires an existing Kubernetes (K8s)
The following minimal requirements are thought for initial evaluation deployment:
-| Spec | Value |
+| Spec | Value |
| ---- | ----------------------------------------------------- |
-| CPU | 12 Cores of x64 or x86 CPU (ARM is not supported yet) |
-| RAM | 32 GB, more recommended |
-| Disk | HDD or SSD, >10 GB |
-
-Check [`scaling.md`](./scaling.md) for more details on resource requirements and scalability.
+| CPU | 12 Cores of x64 or x86 CPU (ARM is not supported yet) |
+| RAM | 32 GB, more recommended |
+| Disk | HDD or SSD, >10 GB |
# Kubernetes
@@ -52,53 +51,54 @@ The deployment is tested against [kubespray](https://github.com/kubernetes-sigs/
# Ingress controller
-The deployment is intended to use only over HTTPS via a configured FQDN, therefor it is required to have a proper
+The deployment is intended to be used only over HTTPS via a configured FQDN, therefore it is required to have a proper
configured ingress controller deployed.
**Supported controllers:**
- [Ingress NGINX Controller](https://github.com/kubernetes/ingress-nginx)
-Note: The platform development team is evaluating the use of [Gateway API](https://gateway-api.sigs.k8s.io/).
-If you have feedback on that topic, please share it with us.
+> **Note**Scaling
-This document should cover the abilities to scale apps.
+This document should cover the ability to scale apps.
# Horizontal scalability
We are working on generating this document automatically based on the file
[`replicas.yaml`](../helmfile/environments/default/replicas.yaml) that contains necessary annotations.
-In the meantime this file can be used to check the components scaling support / capabilities.
+In the meantime, this file can be used to check the components scaling support/capabilities.
# Upstream information
While scaling services horizontally is the ideal solution, information about vertical scaling is helpful
-when it comes to defining the applications resources, see [`resources.yaml`](../helmfile/environments/default/resources.yaml) for references.
+when defining the application's resources, see [`resources.yaml`](../helmfile/environments/default/resources.yaml) for references.
Please find below links to the application's upstream resources about scaling:
diff --git a/docs/security.md b/docs/security.md
index 67266415..71e050d1 100644
--- a/docs/security.md
+++ b/docs/security.md
@@ -15,37 +15,37 @@ This document should cover the current status of security measurements.
# Helm Chart Trust Chain
-Helm charts are signed and validated against GPG keys which can be found in `helmfile/files/gpg-pubkeys`.
+Helm charts are signed and validated against GPG keys in `helmfile/files/gpg-pubkeys`.
-For more details on Chart validation please visit: https://helm.sh/docs/topics/provenance/
+For more details on Chart validation, please visit: https://helm.sh/docs/topics/provenance/
All charts except the ones mentioned below are verifiable:
-| Repository | Verifiable |
+| Repository | Verifiable |
|-------------------|:----------:|
-| open-xchange-repo | no |
+| open-xchange-repo | no |
# Kubernetes Security Enforcements
-This list gives you an overview of default security settings and if they comply with security standards:
+This list gives you an overview of default security settings and whether they comply with security standards:
⟶ Visit our generated detailed [Security Context](./security-context.md) overview.
# NetworkPolicies
-Kubernetes NetworkPolicies are an important measure to secure your kubernetes apps and clusters.
+Kubernetes NetworkPolicies are an essential measure to secure your Kubernetes apps and clusters.
When applied, they restrict the traffic to your services.
-This protects other deployments in your cluster or other services in your deployment to get compromised when one
+This protects other deployments in your cluster or other services in your deployment from getting compromised when one
component is compromised.
We ship a default set of Otterize ClientIntents via
[Otterize intents operator](https://github.com/otterize/intents-operator) which translates intent-based access control
-(IBAC) into kubernetes native NetworkPolicies.
+(IBAC) into Kubernetes native NetworkPolicies.
This requires the Otterize intents operator to be installed.
```yaml
security:
- otterizeIntents:
- enabled: true
+ otterizeIntents:
+ enabled: true
```
diff --git a/docs/theming.md b/docs/theming.md
index d26dbdfa..08b377a1 100644
--- a/docs/theming.md
+++ b/docs/theming.md
@@ -5,53 +5,26 @@ SPDX-License-Identifier: Apache-2.0
Theming
-This document will cover the theming and customization of your openDesk deployment.
+This document will cover the theming options for an openDesk deployment.
-* [Strings and texts](#strings-and-texts)
-* [Colors](#colors)
- * [Images and Logos](#images-and-logos)
-* [Known limits](#known-limits)
+* [Settings](#settings)
+* [Known limitations](#known-limitations)
-# Strings and texts
+# Settings
-The deployment name can be changed by:
+All default settings can be found in the [`theme.gotmpl`](../helmfile/environments/default/theme.gotmpl). Most of the components adhere to these settings.
-```yaml
-theme:
- texts:
- productName: "openDesk Cloud"
-```
+Please review the default configuration that is applied to understand your customization options.
-# Colors
+You can just update the files in:
+- [helmfile/files/theme](../helmfile/files/theme): To change logos, favicons etc.
+- [helmfile/files/portal-tiles](../helmfile/files/portal-tiles): To change the icons in the portal.
-The primary color and their derives with lesser opacity be customized by:
-
-```yaml
-theme:
- colors:
- primary: "#5e27dd"
- primary65: "#9673e9"
- primary35: "#c7b3f3"
- primary15: "#e7dffa"
-```
-
-## Images and Logos
-
-You can customize the logo and favicon by providing SVG or icon as inline value:
-
-```yaml
-theme:
- imagery:
- logoHeaderSvg: '...'
- logoHeaderSvgWhite: '...'
- logoPortalBackgroundSvg: '...'
- faviconIco: "..."
-```
-
-# Known limits
+# Known limitations
Not all applications support theming. Known exceptions are:
- - OpenProject
- - Jitsi
+- OpenProject, comes with a build in openDesk theming that can be modified in the Enterprise version's OpenProject web interface.
+- The portal background logo can (currently) only be set on initial deployment.
+- Portal and Keycloak screen styles must be applied in the [`portalStylesheets.css`](../helmfile/files/theme/portalStylesheet.css).
diff --git a/docs/workflow.md b/docs/workflow.md
index b1692c6f..3d82d699 100644
--- a/docs/workflow.md
+++ b/docs/workflow.md
@@ -63,7 +63,7 @@ The following section should provide a high-level view of the involved parties i
- **Operator**
- Focus areas
- Providing production-grade required services (e.g. persistence layer) to operate openDesk
- - Rollout, operate, and support openDesk
+ - Rollout, operate and support openDesk
- Further develop the deployment automation to meet extended operational requirements, ideally providing these developments upstream to openDesk platform development to adopt them into the standard
- The operator can either use a self-operated Kubernetes cluster to deploy openDesk or make use of managed Kubernetes offerings of a **Cloud Provider**.
@@ -71,52 +71,53 @@ The following section should provide a high-level view of the involved parties i
The openDesk deployment automation is the core outcome of the platform development process.
-The openDesk platform development team created and maintains the deployment automation to allow interested parties to deploy openDesk into their cloud infrastructure with a low entry barrier. The core technology for the automation are [Helm charts](https://helm.sh/) which are orchestrated using [Helmfile](https://github.com/helmfile/helmfile). Of course this deployment is also used in the everyday work by the suppliers and the platform team.
+The openDesk platform development team created and maintains the deployment automation to allow interested parties to deploy openDesk into their cloud infrastructure with a low entry barrier. The core technology for the automation is [Helm](https://helm.sh/), which is orchestrated using [Helmfile](https://github.com/helmfile/helmfile). Of course, this deployment is also used by the suppliers and the platform team in everyday work.
-Please find the deployment automation including the relevant documentation here: https://gitlab.opencode.de/bmi/opendesk/deployment/sovereign-workplace
+Please find the deployment automation, including its documentation, in the following project: https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk
-The automation supports Gitlab CI/CD execution as well as local execution triggering the Helmfile deployment for the whole platform or single applications.
+The automation supports Gitlab CI/CD and local execution, triggering the Helmfile deployment for the whole platform or single applications.
## openDesk technical component classes
The below rendering in class diagram notation shows the three component classes openDesk consists of. In each of these:
-- the first section below the name of the class shows the required **characteristics** of each component of the given class, and
-- the second section shows the **methods** like linting that have to be applied to artifacts of that class.
+- the first section below the name of the class shows the required **characteristics** of each component of the given class and
+- the second section shows the **methods** like linting that must be applied to that class's artifacts.
-**Note:** The methods prefixed with '-' are not yet available in `gitlab-config` you will learn about them later.
+> **Note**Container image Deployment automation openDesk release Container image Deployment automation openDesk release //`:
+Branches created from the `develop` branch have to adhere to the following notation: `/_`:
+- ``: Something that makes you identifiable as the owner of the branch, e.g. the first letter of your first name followed by your family name.
- ``: From the list of branch types explained above:
- `docs`
- `fix`
- `feat`
-- ``: Something that makes you identifiable as owner of the branch, e.g. the first letter of your first name followed by your family name.
- ``: A very short note about what is going to happen in the branch and ideally what component is affected from the following list of components:
- `helmfile`
- `ci`
@@ -340,9 +341,10 @@ Branches created from the `develop` branch have to adhere to the following notat
- `services`
- `xwiki`
-Example: `feat/tmueller/bump_nextcloud_to_29.0.0`.
+Example: `tmueller/fix_jitsi_theming`.
-**Note**: The above naming convention is not enforced yet, but please ensure you make use of it.
+> **Note**(): [path/to/issue#1] .
- │ │ │ │
- │ │ | └─> Summary in present tense, sentence case, with no period at the end
- │ │ |
- │ │ └─> Issue reference (optional)
- │ │
- │ └─> Commit Scope: helmfile, docs, collabora, nextcloud, open-xhcange etc.
- │
- └─> Commit Type: chore, ci, docs, feat, fix
+ │ │ │ │
+ │ │ | └─> Summary in present tense, sentence case, with no period at the end
+ │ │ |
+ │ │ └─> Issue reference (optional)
+ │ │
+ │ └─> Commit Scope: helmfile, docs, collabora, nextcloud, open-xchange, etc.
+ │
+ └─> Commit Type: chore, ci, docs, feat, fix
```
Example: `fix(open-xchange): Bump to 8.26 to heal issue with functional mailbox provisioning.`
-**Beware**: The commit messages are an essential part of the [technical releases](https://gitlab.opencode.de/bmi/opendesk/deployment/sovereign-workplace/-/releases) as the release's notes are generated from the messages.
+> **Note**Minimum length: 8 characters
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/dummy_circle.svg b/helmfile/files/portal-tiles/dummy_circle.svg
index e69de29b..08ec9068 100644
--- a/helmfile/files/portal-tiles/dummy_circle.svg
+++ b/helmfile/files/portal-tiles/dummy_circle.svg
@@ -0,0 +1 @@
+
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/fileshare_files.svg b/helmfile/files/portal-tiles/fileshare_files.svg
index c8674949..5fabd822 100644
--- a/helmfile/files/portal-tiles/fileshare_files.svg
+++ b/helmfile/files/portal-tiles/fileshare_files.svg
@@ -1 +1,16 @@
-
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/groupware_calendar.svg b/helmfile/files/portal-tiles/groupware_calendar.svg
index 73811028..0a63b250 100644
--- a/helmfile/files/portal-tiles/groupware_calendar.svg
+++ b/helmfile/files/portal-tiles/groupware_calendar.svg
@@ -1 +1,19 @@
-
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/groupware_contacts.svg b/helmfile/files/portal-tiles/groupware_contacts.svg
index 9cff53bd..1161c7c1 100644
--- a/helmfile/files/portal-tiles/groupware_contacts.svg
+++ b/helmfile/files/portal-tiles/groupware_contacts.svg
@@ -1 +1,18 @@
-
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/groupware_mail.svg b/helmfile/files/portal-tiles/groupware_mail.svg
index 0008ebc4..96bab903 100644
--- a/helmfile/files/portal-tiles/groupware_mail.svg
+++ b/helmfile/files/portal-tiles/groupware_mail.svg
@@ -1 +1,16 @@
-
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/groupware_tasks.svg b/helmfile/files/portal-tiles/groupware_tasks.svg
index 80a809cf..dd9954c2 100644
--- a/helmfile/files/portal-tiles/groupware_tasks.svg
+++ b/helmfile/files/portal-tiles/groupware_tasks.svg
@@ -1 +1,18 @@
-
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/management_knowledge.svg b/helmfile/files/portal-tiles/management_knowledge.svg
index 01811595..e69f6964 100644
--- a/helmfile/files/portal-tiles/management_knowledge.svg
+++ b/helmfile/files/portal-tiles/management_knowledge.svg
@@ -1 +1,16 @@
-
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/management_project.svg b/helmfile/files/portal-tiles/management_project.svg
index 01a0c736..71257abf 100644
--- a/helmfile/files/portal-tiles/management_project.svg
+++ b/helmfile/files/portal-tiles/management_project.svg
@@ -1 +1,17 @@
-
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/realtime_collaboration.svg b/helmfile/files/portal-tiles/realtime_collaboration.svg
index 56e4d385..566982ea 100644
--- a/helmfile/files/portal-tiles/realtime_collaboration.svg
+++ b/helmfile/files/portal-tiles/realtime_collaboration.svg
@@ -1 +1,16 @@
-
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/portal-tiles/realtime_videoconference.svg b/helmfile/files/portal-tiles/realtime_videoconference.svg
index 1e6aa4a4..6c78d501 100644
--- a/helmfile/files/portal-tiles/realtime_videoconference.svg
+++ b/helmfile/files/portal-tiles/realtime_videoconference.svg
@@ -1 +1,16 @@
-
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/theme/empty.svg b/helmfile/files/theme/empty.svg
new file mode 100644
index 00000000..08ec9068
--- /dev/null
+++ b/helmfile/files/theme/empty.svg
@@ -0,0 +1 @@
+
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/theme/favicon144.png b/helmfile/files/theme/favicon144.png
index b0d0e47b..0825116f 100644
Binary files a/helmfile/files/theme/favicon144.png and b/helmfile/files/theme/favicon144.png differ
diff --git a/helmfile/files/theme/favicon16.png b/helmfile/files/theme/favicon16.png
index f8186196..6bf08436 100644
Binary files a/helmfile/files/theme/favicon16.png and b/helmfile/files/theme/favicon16.png differ
diff --git a/helmfile/files/theme/logoHeader.svg b/helmfile/files/theme/logoHeader.svg
index 0c0243d9..eadd4ba7 100644
--- a/helmfile/files/theme/logoHeader.svg
+++ b/helmfile/files/theme/logoHeader.svg
@@ -1 +1,10 @@
-
+
diff --git a/helmfile/files/theme/logoHeaderInverted.svg b/helmfile/files/theme/logoHeaderInverted.svg
index 998923e2..e70ca1fe 100644
--- a/helmfile/files/theme/logoHeaderInverted.svg
+++ b/helmfile/files/theme/logoHeaderInverted.svg
@@ -1 +1,41 @@
-
+
+
+
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/theme/logoPortalBackground.svg b/helmfile/files/theme/logoPortalBackground.svg
deleted file mode 100644
index b776dffa..00000000
--- a/helmfile/files/theme/logoPortalBackground.svg
+++ /dev/null
@@ -1 +0,0 @@
-
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/helmfile/files/theme/portalStylesheet.css b/helmfile/files/theme/portalStylesheet.css
new file mode 100644
index 00000000..7cd4431c
--- /dev/null
+++ b/helmfile/files/theme/portalStylesheet.css
@@ -0,0 +1,484 @@
+/**
+ * SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
+ * SPDX-License-Identifier: Apache-2.0
+ */
+:root {
+ /* used to accent some elements: checkbox/radiobox, checked toggle buttons/checked input fields */
+ --color-accent: #571EFA;
+ --color-opendesk-secondary: #f5f5f5;
+ --color-opendesk-secondary-dark: #c7b3f3;
+ --color-opendesk-white: #ffffff;
+ --color-opendesk-black: #000000;
+ --bgc-announcements-info: #adb3bc;
+ --bgc-announcements-warn: #ffc700;
+ --bgc-announcements-success: #00ffcd;
+ --bgc-announcements-danger: #ff529e;
+ --bgc-content-body: var(--color-opendesk-secondary);
+ --bgc-content-container: var(--color-opendesk-white);
+ --bgc-content-header: var(--bgc-content-container);
+ --bgc-inputfield-on-container: var(--color-opendesk-white);
+ --bgc-inputborder-on-container: var(--color-opendesk-secondary);
+ --bgc-inputfield-on-body: var(--bgc-content-container);
+ --bgc-checkbox-hover: rgba(255, 255, 255, 0.06);
+ --bgc-checkbox-focus: rgba(255, 255, 255, 0.12);
+ --bgc-loading-circle: var(--font-color-contrast-middle);
+ --bgc-user-menu-item-hover: rgba(255, 255, 255, 0.1);
+ --bgc-user-menu-item-active: rgba(255, 255, 255, 0.2);
+ --bgc-header-number-circle: var(--color-accent);
+ --bgc-tab-separator: var(--color-opendesk-secondary);
+ --bgc-popup: #d0d0d0;
+ --bgc-popup-item-hover: rgba(0, 0, 0, 0.15);
+ --bgc-popup-item-active: rgba(0, 0, 0, 0.3);
+ --bgc-popup-item-selected: rgba(0, 0, 0, 0.3);
+ --bgc-grid-row-hover: rgba(255, 255, 255, 0.04);
+ --bgc-grid-row-selected: var(--bgc-grid-row-hover);
+ --bgc-tree-row-hover: var(--bgc-grid-row-hover);
+ --bgc-tree-row-selected: rgba(255, 255, 255, 0.15);
+ --bgc-apptile-default: var(--color-opendesk-white);
+ --bgc-appcenter-app-hover: rgba(255, 255, 255, 0.08);
+ --bgc-appcenter-app-active: rgba(255, 255, 255, 0.12);
+ --bgc-progressbar-empty: #bdbdbb;
+ --bgc-progressbar-progress: var(--bgc-success);
+ --bgc-titlepane-hover: rgba(255, 255, 255, 0.04);
+ --bgc-underlay: rgb(221 221 221 / 80%);
+ --bgc-checkerboard: repeating-conic-gradient(var(--bgc-inputfield-on-container) 0% 25%, transparent 0% 50%) 50%/20px 20px;
+ --bgc-error: #ff529e;
+ --bgc-warning: #ffc700;
+ --bgc-success: #00ffcd;
+ --font-size-1: 1.5rem;
+ --font-size-2: 1.25rem;
+ --font-size-3: 1rem;
+ --font-size-4: 0.875rem;
+ --font-size-5: 0.75rem;
+ --font-size-html: 1rem;
+ --font-size-body: var(--font-size-4);
+ --font-lineheight-normal: 1.5;
+ --font-lineheight-compact: 1.25;
+ --font-lineheight-header: 1.3;
+ --font-weight-bold: 600;
+ --font-color-contrast-high: #203257;
+ --font-color-contrast-middle: #606060;
+ --font-color-contrast-low: #868681;
+ --font-color-error: #b82323;
+ --font-color-error-light: #EABFBF;
+ --font-color-warning: #ff8c00;
+ --font-color-warning-light: #ffeeca;
+ --font-color-success: #92d625;
+ --font-color-success-light: #ebffca;
+ --button-primary-bgc: #571EFA;
+ --button-primary-bgc-hover: #1b1d18;
+ --button-primary-bgc-active: rgba(79, 114, 24, 1);
+ --button-primary-bgc-disabled: #5f5f5c;
+ --button-bgc: var(--color-opendesk-secondary);
+ --button-bgc-hover: #575755;
+ --button-bgc-active: rgba(80, 80, 77, 1);
+ --button-bgc-disabled: #5f5f5c;
+ --button-text-bgc: transparent;
+ --button-text-bgc-hover: var(--button-bgc-hover);
+ --button-text-bgc-active: var(--button-bgc-active);
+ --button-text-bgc-disabled: transparent;
+ --button-icon-bgc: transparent;
+ --button-icon-bgc-hover: var(--button-bgc-hover);
+ --button-icon-bgc-active: var(--button-bgc-active);
+ --button-icon-bgc-disabled: transparent;
+ --button-icon-highlighted-bgc: var(--bgc-inputfield-on-body);
+ --button-icon-highlighted-bgc-hover: var(--button-bgc-hover);
+ --button-icon-highlighted-bgc-active: var(--button-bgc-active);
+ --button-icon-highlighted-bgc-disabled: transparent;
+ --color-focus: #AA98FB;
+ --popup-border: 1px solid #bdbdbb;
+ --box-shadow: 0 1px 6px rgb(1 0 0 / 12%), 0 1px 4px rgb(0 1 0 / 12%);
+ --serveroverview-tile-hover-bgc: #00acb6;
+ --serveroverview-tile-hover-color: #1e1e1d;
+ --portal-tab-background: var(--color-accent);
+ --select-arrow: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABcAAAAXCAYAAADgKtSgAAAACXBIWXMAAAsTAAALEwEAmpwYAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAABkSURBVHgB7Y3BCQAhDAS3BEtICVeCJdi5JVwpGsGHiGLECD4ysL9lBjCMpwk8En6p/kV4XuL9WAeo/sr/gwDHi4JAK47YYBXoxQ6bzALH4lnAa4lHgaQpHgVUxW0g4ILYMC6TAZ0BJA3bxN3RAAAAAElFTkSuQmCC');
+ --layout-height-header: 63px;
+ /* Keycloak user screens logo */
+ --login-logo: url("data:image/svg+xml;base64,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") no-repeat center;
+}
+
+/* Keycloak user screens begin */
+#kc-login,
+#kc-logout,
+#saveTOTPBtn,
+.pf-c-button.btn-lg {
+ color: var(--color-opendesk-white);
+ border: 2px solid;
+}
+
+#kc-login:hover,
+#kc-logout:hover,
+#saveTOTPBtn:hover,
+.pf-c-button.btn-lg:hover {
+ color: #000000;
+ background-color: #e7dffa;
+ border: 2px solid var(--color-accent);
+}
+
+.pf-c-form-control {
+ background-color: #e7dffa;
+}
+
+.pf-c-dropdown__menu-item:hover {
+ background-color: var(--color-accent);
+ color: var(--color-opendesk-white) !important;
+}
+
+#kc-form-options .checkbox {
+ color: var(--font-color-contrast-high) !important;
+}
+
+#kc-header-wrapper {
+ color: var(--color-opendesk-secondary);
+}
+
+.login-pf-page {
+ margin: 0;
+ padding: 0;
+ height: 100%;
+ display: flex;
+ flex-direction: column;
+ justify-content: center;
+ align-items: center;
+}
+
+.login-pf-page #kc-header {
+ display: none;
+}
+
+.login-pf-page .card-pf {
+ border-radius: 13px;
+ margin-top: 40px;
+}
+
+.login-pf-page #umcLoginLinks a {
+ color: #fff;
+}
+
+.login-pf-page #umcLoginLinks a:focus {
+ text-decoration-thickness: unset;
+}
+
+.login-pf body {
+ background: var(--color-focus) url('data:image/jpeg;base64,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') center center/cover no-repeat !important;
+}
+/* Keycloak user screens end */
+
+.portal-title__image {
+ width: 82px;
+ height: auto;
+}
+
+.portal-title {
+ padding: 0 10px 0 5px;
+}
+
+/*
+.portal::after {
+ content: '';
+ display: block;
+ position: fixed;
+ z-index: 0;
+ height: 10px;
+ left: 0;
+ right: 0;
+ bottom: 0;
+ background-image: linear-gradient(to right, #571EFA, #571EFA 62%, white 62%);
+}
+*/
+
+.portal__background::before {
+ content: '';
+ display: block;
+ position: fixed;
+ left: 0;
+ background-image: url(/univention/portal/custom/portal_background_image.svg);
+ background-repeat: no-repeat;
+ width: 100%;
+ height: 237px;
+ background-size: 480px;
+ bottom: 4px;
+ background-position: right 25px center;
+}
+
+@media screen and (max-width: 1300px) {
+ .portal__background::before {
+ background-size: 350px;
+ bottom: -28px;
+ background-position: right 19px center;
+ }
+}
+
+@media screen and (max-width: 748px) {
+ .portal__background::before {
+ background-size: 250px;
+ bottom: -50px;
+ background-position: right 20px center;
+ }
+}
+
+.portal-categories:before {
+ width: 100%;
+ content: '';
+ position: fixed;
+ left: 0;
+ height: 1px;
+ top: var(--layout-height-header);
+ background-color: #dddddd;
+ z-index: 1;
+}
+
+.portal-sidenavigation__login-header {
+ border-bottom-color: var(--color-opendesk-secondary);
+}
+
+.portal-sidenavigation__edit-mode {
+ border-color: var(--color-opendesk-secondary);
+ background-color: var(--color-opendesk-secondary);
+}
+
+.portal-sidenavigation__edit-mode:hover {
+ border-color: var(--color-opendesk-secondary-dark);
+ background-color: var(--color-opendesk-secondary-dark);
+}
+
+.portal-header__edit-mode-label {
+ background-color: var(--color-opendesk-secondary);
+}
+
+.portal-sidenavigation__logout-link {
+ color: var(--color-accent);
+}
+
+.portal-sidenavigation__menu-item:hover,
+.portal-sidenavigation__menu-subItem:hover {
+ background-color: var(--color-opendesk-secondary);
+ transition: all var(--portal-transition-duration);
+}
+
+.portal-sidenavigation__menu-item:hover .portal-sidenavigation__submenu {
+ background-color: var(--color-opendesk-white);
+}
+
+.portal-sidenavigation__menu-item:active {
+ border-color: transparent;
+}
+
+input {
+ border: 0.1rem solid var(--color-opendesk-secondary-dark)
+}
+
+input[readonly] {
+ background-color: var(--color-opendesk-secondary);
+}
+
+/*input {
+border-color: var(--bgc-inputborder-on-container);
+}*/
+
+.portal-search__input {
+ border: 0.1rem solid var(--bgc-inputborder-on-container);
+}
+
+.image-upload__canvas {
+ background-color: var(--color-opendesk-secondary);
+ border: 1px solid var(--color-opendesk-secondary);
+}
+
+button {
+ transition: all var(--portal-transition-duration);
+}
+
+button.primary {
+ color: var(--color-opendesk-white);
+}
+
+button.primary svg {
+ color: var(--color-opendesk-white);
+}
+
+button[disabled] {
+ color: #afafaf;
+}
+
+button[disabled] svg {
+ color: #afafaf;
+}
+
+input[type=checkbox]:focus {
+ outline: 2px solid var(--color-opendesk-black);
+}
+
+.form-element {
+ margin-bottom: 2px;
+ /*needed for cleaner Outline*/
+ margin-left: 2px;
+}
+
+select {
+ border: 1px solid var(--color-opendesk-secondary);
+}
+
+.multi-select__select {
+ border: 1px solid var(--color-opendesk-secondary);
+}
+
+.multi-input__row--multiline {
+ box-shadow: inset 2px 0 var(--color-opendesk-secondary);
+}
+
+textarea {
+ border: .1rem solid #B2AFAF;
+ width: -webkit-fill-available;
+}
+
+.notification--success {
+ border: 1px solid var(--font-color-success);
+ background-color: var(--font-color-success-light);
+}
+
+.notification--warning {
+ border: 1px solid var(--font-color-warning);
+ background-color: var(--font-color-warning-light);
+}
+
+.notification--error {
+ border: 1px solid var(--font-color-error);
+ background-color: var(--font-color-error-light);
+}
+
+.header-tab__clickable:before {
+ background-color: var(--color-opendesk-secondary);
+ border-color: var(--color-opendesk-white);
+ box-shadow: 0 0.2rem 0 var(--color-opendesk-secondary);
+ border-bottom: 0;
+}
+
+.header-tab:hover:before {
+ background-color: var(--color-opendesk-secondary-dark);
+ box-shadow: 0 0.2rem 0 var(--color-opendesk-secondary-dark);
+ border-bottom: 0;
+ transition: all var(--portal-transition-duration);
+}
+
+.header-tab:focus:before {
+ border-bottom: 0.2rem solid var(--color-opendesk-black);
+ box-shadow: 0;
+}
+
+.header-tab--active:focus:after {
+ border: 0.2rem solid var(--color-opendesk-black);
+}
+
+.header-tab:hover,
+.header-tab:hover~.icon-button .portal-icon,
+.header-tab--active,
+.header-tab--active~.icon-button .portal-icon {
+ color: var(--color-opendesk-white);
+ transition: all var(--portal-transition-duration);
+}
+
+.header-tab--active~.icon-button:focus {
+ border-color: var(--color-opendesk-white);
+}
+
+.choose-tab:hover {
+ background-color: var(--color-opendesk-secondary);
+}
+
+.choose-tab--active {
+ background-color: var(--color-accent);
+ color: var(--color-opendesk-white);
+}
+
+
+.header-button__button .portal-icon {
+ color: #1F1F1F;
+ stroke-width: 3;
+}
+
+.header-button--is-active .portal-icon {
+ color: var(--color-accent);
+}
+
+/*
+//
+//
+// Loading Overlay image and Animation
+*/
+
+.standbyCircle {
+ display: none;
+}
+
+.standbyWrapper:before {
+ content: '';
+ background-image: url(/univention/portal/icons/logo.svg);
+ background-size: 70%;
+ width: 200px;
+ height: 200px;
+ background-repeat: no-repeat;
+ -webkit-animation: pulsate-bck 1.2s ease-in-out infinite both;
+ animation: pulsate-bck 1.2s ease-in-out infinite both;
+ background-position: center center;
+}
+
+@-webkit-keyframes pulsate-bck {
+ 0% {
+ -webkit-transform: scale(1);
+ transform: scale(1);
+ opacity: 1;
+ }
+
+ 50% {
+ -webkit-transform: scale(0.9);
+ transform: scale(0.9);
+ opacity: 0.5;
+ }
+
+ 100% {
+ -webkit-transform: scale(1);
+ transform: scale(1);
+ opacity: 1;
+ }
+}
+
+@keyframes pulsate-bck {
+ 0% {
+ -webkit-transform: scale(1);
+ transform: scale(1);
+ opacity: 1;
+ }
+
+ 50% {
+ -webkit-transform: scale(0.9);
+ transform: scale(0.9);
+ opacity: 0.5;
+ }
+
+ 100% {
+ -webkit-transform: scale(1);
+ transform: scale(1);
+ opacity: 1;
+ }
+}
+
+.portal-tooltip {
+ border-color: #D3D7DE;
+ box-shadow: 0px 0px 4px 0px rgba(32, 50, 87, 0.10);
+}
+
+.portal-tooltip__arrow {
+ border-color: transparent transparent #D3D7DE transparent;
+}
+
+.portal-title__portal-name {
+ position: absolute;
+ width: 1px;
+ height: 1px;
+ padding: 0;
+ margin: -1px;
+ overflow: hidden;
+ clip: rect(0, 0, 0, 0);
+ border: 0;
+}
\ No newline at end of file
diff --git a/helmfile/files/theme/portalWaitingSpinner.svg b/helmfile/files/theme/portalWaitingSpinner.svg
new file mode 100644
index 00000000..eb76781c
--- /dev/null
+++ b/helmfile/files/theme/portalWaitingSpinner.svg
@@ -0,0 +1,16 @@
+
+
+
+
+
+
\ No newline at end of file