fix(nubus): Bump ics to 2.7.2 version

helmfile/apps/nubus/values-intercom-service.yaml.gotmpl

@@ -54,6 +54,7 @@ ics:
   issuerBaseUrl: "https://{{ .Values.global.hosts.keycloak }}.{{ .Values.global.domain }}/realms/{{ .Values.platform.realm }}"
   originRegex: "{{ .Values.global.domain }}"
   userUniqueMapper: {{ if .Values.functional.chat.matrix.profile.useImmutableIdentifierForLocalpart }}"entryuuid"{{ else }}"phoenixusername"{{ end }}
+  usernameClaim: "phoenixusername"
   keycloak:
     realm: {{ .Values.platform.realm | quote }}
   default:
@@ -70,13 +71,89 @@ ics:
   portal:
     apiKey: {{ .Values.secrets.centralnavigation.apiKey | quote }}
   redis:
-    host: {{ .Values.cache.intercomService.host | quote }}
+    host: "denas.devve.space"
-    port: {{ .Values.cache.intercomService.port }}
+    port: 6379
-    password: {{ .Values.cache.intercomService.password | default .Values.secrets.redis.password | quote }}
+    password: "univention"
+    ssl:
+      enabled: "true"
+      customca: |
+        -----BEGIN CERTIFICATE-----
+        MIIDBzCCAe+gAwIBAgIUWRTzv7lJ4QWvAu/FskP1heg7tPowDQYJKoZIhvcNAQEL
+        BQAwEzERMA8GA1UEAwwIUmVkaXMgQ0EwHhcNMjQxMjExMTA0MDI1WhcNMzQxMjA5
+        MTA0MDI1WjATMREwDwYDVQQDDAhSZWRpcyBDQTCCASIwDQYJKoZIhvcNAQEBBQAD
+        ggEPADCCAQoCggEBAN5unPoLdMAejzyYN4+GA0pWBAGnscpiUS7A8lDC9tlw8fPX
+        3GmA5OaqaW/BeDufOSrICABfZv1bGYTySghfCr0c1qwTK/FWC2htU0hNkH8yI1tE
+        muebFdKxFr70Xx3G/OsWEmnEN93auwuxcObysWNRbq9BQAigs//8iE6oKTiOVGdL
+        DTi0r4PGmCHLZrZoW0X3CGJBom9EXgi1dI0izb/qK9/GQpp2trwsu6MtNZO4Z9Ij
+        Gxd2pPESYuyhjDFGMbJjqtQfUm9Zb5uDA3V8vKBCBYOikbEXLEvHyCgvUHfnpGQb
+        2Ibzl498cv7IbL/xeHjZx/guFBUAKRBWwWb1xbECAwEAAaNTMFEwHQYDVR0OBBYE
+        FBPyMkMcGjL/Vgvd7UEjyg4cv8cBMB8GA1UdIwQYMBaAFBPyMkMcGjL/Vgvd7UEj
+        yg4cv8cBMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBABFq1wnP
+        RCccim6KeWwNO8+nmedF93Yx+Ohc7yR1a2CoblzAw06rfsFqhUrvBffBjHSog3fW
+        g/dap2trTv2f4fjUoP6tqFIndSET/8cD5BzKo+aBPaf29XxjyOSMSt4n7VTgp6FX
+        SVyg6s+dKdIBtQ/vf8rO6YJFqlJqNs9t0nsj2dtcZgLTCu4nMUFhgMcza5cH5XCb
+        FQg+n9bzeoDLjmqxHUeJNrr5kU+UfR4oCiLTtnxsjpCT72BQ1bR020vo2AfONQe3
+        n4E/TjvX6xyT9YtPDnkgzaYJtEwrX8iRo92GUsX499XE2LMMNiVqgNyRG+lFUU2c
+        +f6iA0co+M5V8tU=
+        -----END CERTIFICATE-----
+      mTLS:
+        enabled: "true"
+        clientCert: |
+          -----BEGIN CERTIFICATE-----
+          MIIC/zCCAeegAwIBAgIUF/iTjTSISwZchOvxyZMZI3LLByQwDQYJKoZIhvcNAQEL
+          BQAwEzERMA8GA1UEAwwIUmVkaXMgQ0EwHhcNMjQxMjExMTA0MDMwWhcNMjUxMjEx
+          MTA0MDMwWjAcMRowGAYDVQQDDBFkZW5hcy5kZXZ2ZS5zcGFjZTCCASIwDQYJKoZI
+          hvcNAQEBBQADggEPADCCAQoCggEBAOVN3IyLIK3XJK1voV241/4O2YpIpC6R+ipY
+          zKjMEVSLd+ZQvcYnH1vBPApFGm2Crk1KVtXEj7tRYZ//UzqeIBylTn61tN9OvbGT
+          JdlzoYDBXA1NaucEFOvkfREVK+uqBuSYeZ8UA4kqWbKFGjNIOJgVZyGJdkEZTgUJ
+          KJyyL0PSWjNcHO7xZEJHJABk9KBC8GQgliJFhqBIBzq5Fxr+QeWt3rKezLVeOehm
+          2YvxerDHTgmNtfO0BbRoy5edHyIn8PC9NjcZOoqvlLWbUZZh+NCZ+DfTL3+EOms3
+          iA+E7AqHVVEvTIsr5VGJ7C1Exv0AL4chzsRIBEguTmsd59m0fQMCAwEAAaNCMEAw
+          HQYDVR0OBBYEFCrq8mnX65JRoYDYSWWYKYpv4953MB8GA1UdIwQYMBaAFBPyMkMc
+          GjL/Vgvd7UEjyg4cv8cBMA0GCSqGSIb3DQEBCwUAA4IBAQCBfXbC9Wyw8Bogli/j
+          ioiWdWxPipKxW52l6fqKdHmDLV0ftbIENbPHpKiHjpfzUJyQbxSSmMffRuGz93ZQ
+          ZCbsqLxdes01awT40JXvRureROgzXbNgGOlfrz6jeXvLodNk0c2CklElTq6LrzDT
+          +WQBzm/YM828QNzaq7WlMNIEUObtbOcJuqeO7VbsUcJ2SHXRH32FarEIgwpPVrw0
+          SeZWnm6Eo5mCP79NqHNgJWmPkMEZOAboWZKXwDjBOpmQ1DRKi2PtWDOqQ84RgU2K
+          X7gbm7CMsIjJcj5fE9sCqvrYy9CpuQLZ4HOQP1AdYOSZR0jse2Rbdu61VBDj76eN
+          +Hso
+          -----END CERTIFICATE-----
+        clientKey: |
+          -----BEGIN PRIVATE KEY-----
+          MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDlTdyMiyCt1ySt
+          b6FduNf+DtmKSKQukfoqWMyozBFUi3fmUL3GJx9bwTwKRRptgq5NSlbVxI+7UWGf
+          /1M6niAcpU5+tbTfTr2xkyXZc6GAwVwNTWrnBBTr5H0RFSvrqgbkmHmfFAOJKlmy
+          hRozSDiYFWchiXZBGU4FCSicsi9D0lozXBzu8WRCRyQAZPSgQvBkIJYiRYagSAc6
+          uRca/kHlrd6ynsy1XjnoZtmL8Xqwx04JjbXztAW0aMuXnR8iJ/DwvTY3GTqKr5S1
+          m1GWYfjQmfg30y9/hDprN4gPhOwKh1VRL0yLK+VRiewtRMb9AC+HIc7ESARILk5r
+          HefZtH0DAgMBAAECggEAB7MAE0X+oGenZx1m7ScuNW0ZN8/tl1S2ciKOKKLFeDHA
+          ol6WqKcaofGQiwW79+5Z3OWAmefiLZdzcDRZ/o9do6iXRKDkRFU4AFThAfakdxbG
+          +Ple/AfCjhMbce3kjiKk3ZsTBljdL4dZAKoAcbVclRqu3kznyBLJ8FhY4T4IYT4I
+          HBlk1l/n9xjyUdjCeU+zVWqXWM7FQNjy4ndx7OpAp2nQKysENYCFHUSWDN8aG9Du
+          mqNLZ956SbNraLKPkqRj3CZG7E39/b+vD/qJh6XPSfS3YCNrXzejUXNWF2j/HPBp
+          FIOu9xkb34ZFMp3GU/u0PljPdP6z4FNX0MLFTykXpQKBgQD3oeoiM6Df7xXeZ813
+          dqNWF0cSrA5Gw/VBzbiOBv2suuWioO5rheJuSbmuMaecq3qXFTN63k18/giYE/CP
+          O3+j4wFcYWJaMkpdw1keCjZPtbO26PWT307vmgX8CpJoLAkBORtaZnw/srFnl/lL
+          JWeMovZCJVQ1Bm2jtPQu1U9VXQKBgQDtDWbvTKZGqnSkBxpUuibxtsiOSvuemoLZ
+          gPlG5gdDmG8Nem3ZXBJ/Jx3c8kPvtqanEPuzpeemanEOrhUeKGRrAYCgeJinBW00
+          qKnqO8zaZrFIes6KgiJEWaOcVgYsZBqgEiwWlQ8pw5d1paS4iklTfDdwQd0yblen
+          9y95J/KV3wKBgQDL1ul/K9aCXzE2OWYlr2/2fwTPNvgtgkLR3wDLUK/iTpqWiziX
+          I8dnF6MT4+XgDjvEP/x3aKSKfiYe4VME5GpGQqetHrCyJHGYyyQBmVBpvt1ndE4q
+          Ygh9LOE+PomT3KOw8Qw2FuSyHmrwJmZcWDbryn1Bp66wU1FPD7ZtEsPSNQKBgG7t
+          spmQuM6gvWx0lnHHmqnJ6xgLJqwVid3WaNAwnH2ZO36HKBhq6Yzu9R6LkBcA1gOg
+          AukSXdCWRsmj1OYD6NnaHiL5zBV8iJn3w2uFCFu7aoKMVVKjiv2JJPLnnoPvZDY7
+          yr3Wiv30NVAsb2Sb8axLmHXDnIsY75P+LAz6EJ7pAoGAbGdxo+p7bciV6d9C6m5q
+          YwWpK/xTtM+sxwJDEthWcDpIZF1luzRZZdCBuu/J9/WDWMRW6AbY2tI0z8PdqBwR
+          AVbfVVt9f9F0b8oL0Z36C/wvuh5yM2dLDB0wZXFIGU00ab8VY0g2r+urkHvxN2xU
+          6zGDZadZIrePghWB5BIIlqU=
+          -----END PRIVATE KEY-----
   openxchange:
     oci: true
     url: "https://{{ .Values.global.hosts.openxchange }}.{{ .Values.global.domain }}"
     audience: "opendesk-oxappsuite"
+  xwiki:
+    subdomain: {{ .Values.global.hosts.xwiki | quote }}
+    audience: "opendesk-xwiki"
   nextcloud:
     origin: {{ .Values.global.hosts.nextcloud | quote }}
     subdomain: {{ .Values.global.hosts.nextcloud | quote }}

helmfile/environments/default/charts.yaml.gotmpl

@@ -136,10 +136,10 @@ charts:
     # upstreamRepository: "nubus/charts/intercom-service"
     # upstreamMirrorTagFilterRegEx: '^(\d+)\.(\d+)\.(\d+)$'
     # upstreamMirrorStartFrom: ["2", "0", "1"]
-    registry: "registry.opencode.de"
+    registry: "artifacts.software-univention.de"
-    repository: "bmi/opendesk/components/supplier/univention/charts-mirror"
+    repository: "nubus-dev/charts"
     name: "intercom-service"
-    version: "2.4.0"
+    version: "2.7.2-pre-jtorres-hotfix-client-secret-mtls"
     verify: true
   jitsi:
     # providerCategory: "Platform"

helmfile/environments/default/images.yaml.gotmpl

@@ -77,9 +77,9 @@ images:
     # upstreamRepository: "nubus/images/intercom-service"
     # upstreamMirrorTagFilterRegEx: '^(\d+)\.(\d+)\.(\d+)$'
     # upstreamMirrorStartFrom: ["2", "1", "0"]
-    registry: "registry.opencode.de"
+    registry: "artifacts.software-univention.de"
-    repository: "bmi/opendesk/components/supplier/univention/images-mirror/intercom-service"
+    repository: "nubus-dev/images/intercom-service"
-    tag: "2.4.0@sha256:df743b7ea30077dc941815ccc60198820d67bbba94853fa7a6f939c0f36af335"
+    tag: "2.7.2-pre-jtorres-hotfix-client-secret-mtls@sha256:5eca1ba95fd9b0052cd804365bd02af1dfea9e2b877d35d0a276ec578a0b4bfb"
   jibri:
     # providerCategory: "Supplier"
     # providerResponsible: "Nordeck"