mirror of
https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk.git
synced 2025-12-06 07:21:36 +01:00
chore(docs): Streamline for integration into docs.opendesk.eu
This commit is contained in:
committed by
Thorsten Roßner
parent
c71faf5e80
commit
f1202f5fa5
@@ -4,7 +4,7 @@
|
|||||||
---
|
---
|
||||||
include:
|
include:
|
||||||
- project: "${PROJECT_PATH_GITLAB_CONFIG_TOOLING}"
|
- project: "${PROJECT_PATH_GITLAB_CONFIG_TOOLING}"
|
||||||
ref: "v2.4.2"
|
ref: "v2.4.3"
|
||||||
file:
|
file:
|
||||||
- "ci/common/automr.yml"
|
- "ci/common/automr.yml"
|
||||||
- "ci/common/lint.yml"
|
- "ci/common/lint.yml"
|
||||||
@@ -514,7 +514,7 @@ avscan-prepare:
|
|||||||
CONTAINER_IMAGE: ""
|
CONTAINER_IMAGE: ""
|
||||||
CONTAINER_REGISTRY: ""
|
CONTAINER_REGISTRY: ""
|
||||||
CONTAINER_TAG: ""
|
CONTAINER_TAG: ""
|
||||||
DATABASE_MIRROR: "https://registry.open-de.sk/repository/clamavdb.c3sl.ufpr.br"
|
DATABASE_MIRROR: "https://gitlab.opencode.de/bmi/opendesk/tooling/clamav-db-mirror/-/raw/main"
|
||||||
EOF
|
EOF
|
||||||
- >
|
- >
|
||||||
yq '.images
|
yq '.images
|
||||||
|
|||||||
@@ -2,6 +2,7 @@
|
|||||||
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
||||||
SPDX-License-Identifier: Apache-2.0
|
SPDX-License-Identifier: Apache-2.0
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<h1>CI/CD</h1>
|
<h1>CI/CD</h1>
|
||||||
|
|
||||||
This page covers openDesk deployment automation via Gitlab CI.
|
This page covers openDesk deployment automation via Gitlab CI.
|
||||||
|
|||||||
@@ -3,6 +3,7 @@ SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG Ze
|
|||||||
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
|
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
|
||||||
SPDX-License-Identifier: Apache-2.0
|
SPDX-License-Identifier: Apache-2.0
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<h1>Components</h1>
|
<h1>Components</h1>
|
||||||
|
|
||||||
This section covers the internal system requirements and external service requirements for productive use.
|
This section covers the internal system requirements and external service requirements for productive use.
|
||||||
|
|||||||
@@ -2,8 +2,10 @@
|
|||||||
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
||||||
SPDX-License-Identifier: Apache-2.0
|
SPDX-License-Identifier: Apache-2.0
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<h1>Debugging</h1>
|
<h1>Debugging</h1>
|
||||||
|
|
||||||
|
<!-- TOC -->
|
||||||
* [Disclaimer](#disclaimer)
|
* [Disclaimer](#disclaimer)
|
||||||
* [Enable debugging](#enable-debugging)
|
* [Enable debugging](#enable-debugging)
|
||||||
* [Adding containers to a pod for debugging purposes](#adding-containers-to-a-pod-for-debugging-purposes)
|
* [Adding containers to a pod for debugging purposes](#adding-containers-to-a-pod-for-debugging-purposes)
|
||||||
@@ -15,6 +17,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [OpenProject](#openproject)
|
* [OpenProject](#openproject)
|
||||||
* [PostgreSQL](#postgresql)
|
* [PostgreSQL](#postgresql)
|
||||||
* [Keycloak](#keycloak)
|
* [Keycloak](#keycloak)
|
||||||
|
<!-- TOC -->
|
||||||
|
|
||||||
# Disclaimer
|
# Disclaimer
|
||||||
|
|
||||||
|
|||||||
@@ -7,8 +7,9 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
<h1>Developing openDesk deployment automation</h1>
|
<h1>Developing openDesk deployment automation</h1>
|
||||||
|
|
||||||
Active development on the deployment is currently only available for project members.
|
Active development on the deployment is currently only available for project members.
|
||||||
However, contributions will be possible using the CLA process.
|
However, contributions are possible using the [CLA](https://gitlab.opencode.de/bmi/opendesk/info/-/blob/main/CONTRIBUTING.md?ref_type=heads) process.
|
||||||
|
|
||||||
|
<!-- TOC -->
|
||||||
* [Overview](#overview)
|
* [Overview](#overview)
|
||||||
* [Default branch, `develop` and other branches](#default-branch-develop-and-other-branches)
|
* [Default branch, `develop` and other branches](#default-branch-develop-and-other-branches)
|
||||||
* [External artifacts - `charts.yaml` and `images.yaml`](#external-artifacts---chartsyaml-and-imagesyaml)
|
* [External artifacts - `charts.yaml` and `images.yaml`](#external-artifacts---chartsyaml-and-imagesyaml)
|
||||||
@@ -18,6 +19,7 @@ However, contributions will be possible using the CLA process.
|
|||||||
* [Mirroring](#mirroring)
|
* [Mirroring](#mirroring)
|
||||||
* [Get new artifacts mirrored](#get-new-artifacts-mirrored)
|
* [Get new artifacts mirrored](#get-new-artifacts-mirrored)
|
||||||
* [Creating new charts/images](#creating-new-chartsimages)
|
* [Creating new charts/images](#creating-new-chartsimages)
|
||||||
|
<!-- TOC -->
|
||||||
|
|
||||||
# Overview
|
# Overview
|
||||||
|
|
||||||
|
|||||||
@@ -1,10 +1,11 @@
|
|||||||
r<!--
|
<!--
|
||||||
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
|
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
|
||||||
SPDX-License-Identifier: Apache-2.0
|
SPDX-License-Identifier: Apache-2.0
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<h1>Migration from M365 with audriga migration service and master authentication</h1>
|
<h1>Migration from M365 with audriga migration service and master authentication</h1>
|
||||||
|
|
||||||
|
<!-- TOC -->
|
||||||
* [Context](#context)
|
* [Context](#context)
|
||||||
* [Prerequisites](#prerequisites)
|
* [Prerequisites](#prerequisites)
|
||||||
* [Prepare M365 tenant for access](#prepare-m365-tenant-for-access)
|
* [Prepare M365 tenant for access](#prepare-m365-tenant-for-access)
|
||||||
@@ -17,8 +18,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [Add multiple user accounts via CSV file](#add-multiple-user-accounts-via-csv-file)
|
* [Add multiple user accounts via CSV file](#add-multiple-user-accounts-via-csv-file)
|
||||||
* [Start the migration](#start-the-migration)
|
* [Start the migration](#start-the-migration)
|
||||||
* [Monitor migration status](#monitor-migration-status)
|
* [Monitor migration status](#monitor-migration-status)
|
||||||
|
<!-- TOC -->
|
||||||
# Context
|
|
||||||
|
|
||||||
Most organizations already have email accounts on various platforms that need to be migrated to openDesk. This document describes the migration from M365 accounts to openDesk using the [audriga Migration Service](https://www.audriga.com) in combination with the master authentication option in openDesk. Other source platforms are also supported, and their migrations work in a similar manner.
|
Most organizations already have email accounts on various platforms that need to be migrated to openDesk. This document describes the migration from M365 accounts to openDesk using the [audriga Migration Service](https://www.audriga.com) in combination with the master authentication option in openDesk. Other source platforms are also supported, and their migrations work in a similar manner.
|
||||||
|
|
||||||
|
|||||||
@@ -5,6 +5,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
|
|
||||||
<h1>Federation with external identity provider (IdP)</h1>
|
<h1>Federation with external identity provider (IdP)</h1>
|
||||||
|
|
||||||
|
<!-- TOC -->
|
||||||
* [Context](#context)
|
* [Context](#context)
|
||||||
* [Prerequisites](#prerequisites)
|
* [Prerequisites](#prerequisites)
|
||||||
* [User accounts](#user-accounts)
|
* [User accounts](#user-accounts)
|
||||||
@@ -17,8 +18,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [Separate realm](#separate-realm)
|
* [Separate realm](#separate-realm)
|
||||||
* [OIDC Client](#oidc-client)
|
* [OIDC Client](#oidc-client)
|
||||||
* [openDesk IdP](#opendesk-idp)
|
* [openDesk IdP](#opendesk-idp)
|
||||||
|
<!-- TOC -->
|
||||||
# Context
|
|
||||||
|
|
||||||
Most organizations already have an Identity and Access Management (IAM) system with an identity provider (IdP) for single sign-on to internal or external web applications.
|
Most organizations already have an Identity and Access Management (IAM) system with an identity provider (IdP) for single sign-on to internal or external web applications.
|
||||||
|
|
||||||
|
|||||||
@@ -12,8 +12,6 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [Separate Matrix domain](#separate-matrix-domain)
|
* [Separate Matrix domain](#separate-matrix-domain)
|
||||||
<!-- TOC -->
|
<!-- TOC -->
|
||||||
|
|
||||||
# Context
|
|
||||||
|
|
||||||
The Element chat application and its server component Synapse are based on the Matrix protocol,
|
The Element chat application and its server component Synapse are based on the Matrix protocol,
|
||||||
that supports federation with other Matrix servers to communicate with the users with accounts on these servers.
|
that supports federation with other Matrix servers to communicate with the users with accounts on these servers.
|
||||||
|
|
||||||
|
|||||||
@@ -12,8 +12,6 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [Option 2: Use cert-manager.io](#option-2-use-cert-managerio)
|
* [Option 2: Use cert-manager.io](#option-2-use-cert-managerio)
|
||||||
<!-- TOC -->
|
<!-- TOC -->
|
||||||
|
|
||||||
# Use case
|
|
||||||
|
|
||||||
Deploying openDesk into an environment with custom public key infrastructure (PKI) that is usually not part of
|
Deploying openDesk into an environment with custom public key infrastructure (PKI) that is usually not part of
|
||||||
public certificate authority chains or deploying openDesk into a local cluster without ACME challenge.
|
public certificate authority chains or deploying openDesk into a local cluster without ACME challenge.
|
||||||
|
|
||||||
|
|||||||
@@ -5,6 +5,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
|
|
||||||
<h1>Separate domains for mail and or Matrix </h1>
|
<h1>Separate domains for mail and or Matrix </h1>
|
||||||
|
|
||||||
|
<!-- TOC -->
|
||||||
* [Context](#context)
|
* [Context](#context)
|
||||||
* [Example configuration](#example-configuration)
|
* [Example configuration](#example-configuration)
|
||||||
* [Mail domain](#mail-domain)
|
* [Mail domain](#mail-domain)
|
||||||
@@ -13,8 +14,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [Webserver](#webserver)
|
* [Webserver](#webserver)
|
||||||
* [Content Security Policy](#content-security-policy)
|
* [Content Security Policy](#content-security-policy)
|
||||||
* [.well-known](#well-known)
|
* [.well-known](#well-known)
|
||||||
|
<!-- TOC -->
|
||||||
# Context
|
|
||||||
|
|
||||||
As communication over mail and chat can go beyond the borders of your openDesk installation, you may want to use different domains for the mail and/or Matrix.
|
As communication over mail and chat can go beyond the borders of your openDesk installation, you may want to use different domains for the mail and/or Matrix.
|
||||||
|
|
||||||
|
|||||||
@@ -5,6 +5,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
|
|
||||||
<h1>Updates & Upgrades</h1>
|
<h1>Updates & Upgrades</h1>
|
||||||
|
|
||||||
|
<!-- TOC -->
|
||||||
* [Disclaimer](#disclaimer)
|
* [Disclaimer](#disclaimer)
|
||||||
* [openDesk supported upgrade path](#opendesk-supported-upgrade-path)
|
* [openDesk supported upgrade path](#opendesk-supported-upgrade-path)
|
||||||
* [Releases upgrade details](#releases-upgrade-details)
|
* [Releases upgrade details](#releases-upgrade-details)
|
||||||
@@ -26,6 +27,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [`migrations` S3 bucket](#migrations-s3-bucket)
|
* [`migrations` S3 bucket](#migrations-s3-bucket)
|
||||||
* [Related components and artifacts](#related-components-and-artifacts)
|
* [Related components and artifacts](#related-components-and-artifacts)
|
||||||
* [Development](#development)
|
* [Development](#development)
|
||||||
|
<!-- TOC -->
|
||||||
|
|
||||||
# Disclaimer
|
# Disclaimer
|
||||||
|
|
||||||
|
|||||||
@@ -2,6 +2,7 @@
|
|||||||
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
||||||
SPDX-License-Identifier: Apache-2.0
|
SPDX-License-Identifier: Apache-2.0
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<h1>Requirements</h1>
|
<h1>Requirements</h1>
|
||||||
|
|
||||||
This section covers the internal system requirements and external service requirements for productive use.
|
This section covers the internal system requirements and external service requirements for productive use.
|
||||||
|
|||||||
@@ -5,7 +5,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
|
|
||||||
<h1>Scaling</h1>
|
<h1>Scaling</h1>
|
||||||
|
|
||||||
This document should cover the ability to scale apps.
|
This document covers the ability to scale applications.
|
||||||
|
|
||||||
# Horizontal scalability
|
# Horizontal scalability
|
||||||
|
|
||||||
|
|||||||
@@ -2,8 +2,10 @@
|
|||||||
SPDX-FileCopyrightText: 2024 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
SPDX-FileCopyrightText: 2024 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
||||||
SPDX-License-Identifier: Apache-2.0
|
SPDX-License-Identifier: Apache-2.0
|
||||||
-->
|
-->
|
||||||
|
|
||||||
<h1>Kubernetes Security Context</h1>
|
<h1>Kubernetes Security Context</h1>
|
||||||
|
|
||||||
|
<!-- TOC -->
|
||||||
* [Container Security Context](#container-security-context)
|
* [Container Security Context](#container-security-context)
|
||||||
* [allowPrivilegeEscalation](#allowprivilegeescalation)
|
* [allowPrivilegeEscalation](#allowprivilegeescalation)
|
||||||
* [capabilities](#capabilities)
|
* [capabilities](#capabilities)
|
||||||
@@ -14,6 +16,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [readOnlyRootFilesystem](#readonlyrootfilesystem)
|
* [readOnlyRootFilesystem](#readonlyrootfilesystem)
|
||||||
* [runAsNonRoot](#runasnonroot)
|
* [runAsNonRoot](#runasnonroot)
|
||||||
* [Status quo](#status-quo)
|
* [Status quo](#status-quo)
|
||||||
|
<!-- TOC -->
|
||||||
|
|
||||||
# Container Security Context
|
# Container Security Context
|
||||||
|
|
||||||
|
|||||||
@@ -5,7 +5,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
|
|
||||||
<h1>Theming</h1>
|
<h1>Theming</h1>
|
||||||
|
|
||||||
This document will cover the theming options for an openDesk deployment.
|
This document covers the theming options for an openDesk deployment.
|
||||||
|
|
||||||
<!-- TOC -->
|
<!-- TOC -->
|
||||||
* [Settings](#settings)
|
* [Settings](#settings)
|
||||||
|
|||||||
@@ -6,6 +6,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
|
|
||||||
<h1>Technical development and release workflow</h1>
|
<h1>Technical development and release workflow</h1>
|
||||||
|
|
||||||
|
<!-- TOC -->
|
||||||
* [Scope](#scope)
|
* [Scope](#scope)
|
||||||
* [Roles and responsibilities](#roles-and-responsibilities)
|
* [Roles and responsibilities](#roles-and-responsibilities)
|
||||||
* [Deployment automation](#deployment-automation)
|
* [Deployment automation](#deployment-automation)
|
||||||
@@ -29,6 +30,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [Commit messages / Conventional Commits](#commit-messages--conventional-commits)
|
* [Commit messages / Conventional Commits](#commit-messages--conventional-commits)
|
||||||
* [Verified commits](#verified-commits)
|
* [Verified commits](#verified-commits)
|
||||||
* [Footnotes](#footnotes)
|
* [Footnotes](#footnotes)
|
||||||
|
<!-- TOC -->
|
||||||
|
|
||||||
# Scope
|
# Scope
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user