Johannes Bornhold
b7254cf5dc
ci(univention-management-stack): Enforce choice between UCS and UMS
2023-09-14 15:26:58 +02:00
Johannes Bornhold
7ab1cb5c7e
fix(univention-management-stack): Prepare persistence configuration
2023-09-14 15:21:46 +02:00
Johannes Bornhold
0ba71f2749
fix(univention-management-stack): Set externalDomainName for bootstrapping the stack
2023-09-14 15:21:46 +02:00
Johannes Bornhold
77e362f6bc
fix(univention-management-stack): Use ldap base DN "dc=swp-ldap,dc=internal"
2023-09-14 15:21:45 +02:00
Johannes Bornhold
09079a1303
fix(univention-management-stack): Split templated from static values
2023-09-14 15:21:45 +02:00
Johannes Bornhold
15db5dcbba
fix(univention-management-stack): Use the value "global.imagePullPolicy"
2023-09-14 15:18:00 +02:00
Johannes Bornhold
d3c439038a
fix(univention-management-stack): Split values into templated and static
2023-09-14 15:18:00 +02:00
Johannes Bornhold
9409ad829a
fix(univention-management-stack): Use global secrets to populate ldap related secrets
2023-09-14 15:18:00 +02:00
Johannes Bornhold
a4bab4068d
fix(univention-management-stack): Use global secrets to fill initialPasswordAdministrator
2023-09-14 15:18:00 +02:00
Johannes Bornhold
90019e3ef6
fix(univention-management-stack): Use global secrets to set store-dav related passwords
2023-09-14 15:18:00 +02:00
Johannes Bornhold
4835a2beec
fix(univention-management-stack): Disable istio for the stack
2023-09-14 15:18:00 +02:00
Johannes Bornhold
12c931fcff
fix(univention-management-stack): Configure cookie banner data
2023-09-14 15:18:00 +02:00
Johannes Bornhold
2f8a298925
fix(univention-management-stack): Define resource requests and limits
2023-09-14 15:18:00 +02:00
Johannes Bornhold
ec3f1d96ac
fix(univention-management-stack): Process bases before releases
2023-09-14 15:17:59 +02:00
Johannes Bornhold
16c08f82c9
fix(univention-management-stack): Add "commonLabels" into helmfile
2023-09-14 15:17:59 +02:00
Johannes Bornhold
edb25bd765
fix(univention-management-stack): Use the prefix "ums-" for all releases
2023-09-14 15:17:59 +02:00
Johannes Bornhold
c840608112
fix(univention-management-stack): Update portal-listener to leverage dependency waiting
2023-09-14 15:17:59 +02:00
Johannes Bornhold
320da3bec3
fix(univention-management-stack): Adjust Ingress configuration for umc
2023-09-14 15:17:59 +02:00
Johannes Bornhold
c61b1b8281
fix(univention-management-stack): Adjust Ingress configuration of udm-rest-api
2023-09-14 15:17:59 +02:00
Johannes Bornhold
96097e4704
fix(univention-management-stack): Adjust Ingress conifguration of store-dav
2023-09-14 15:17:59 +02:00
Johannes Bornhold
5e1a7b19e2
fix(univention-management-stack): Adjust Ingress configuration of notifications-api
2023-09-14 15:17:59 +02:00
Johannes Bornhold
13bcd785e8
fix(univention-management-stack): Adjust Ingress configuration for portal-server
2023-09-14 15:17:58 +02:00
Johannes Bornhold
c54bab165b
fix(univention-management-stack): Adjust ingress configuration of the portal-frontend
2023-09-14 15:17:58 +02:00
Johannes Bornhold
836f491766
ci(univention-management-stack): Add option to deploy UMS
2023-09-14 15:17:58 +02:00
Johannes Bornhold
fe0e0cdce4
fix(univention-management-stack): Use postgresql service for notifications-api
2023-09-14 15:17:58 +02:00
Johannes Bornhold
a74d662404
fix(univention-management-stack): Add Helm charts
2023-09-14 15:17:58 +02:00
Johannes Bornhold
471a2fa262
fix(univention-management-stack): Add switch "univentionManagementStack.enabled"
2023-09-14 14:58:22 +02:00
Thorsten Roßner
5f79763e2b
chore(release): 0.3.1 [skip ci]
...
## [0.3.1](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.3.0...v0.3.1 ) (2023-09-14)
### Bug Fixes
* **collabora:** Update Ingress annotations and set securityContext ([b5583ca ](b5583caec1 ))
* **element:** Improve default container security settings ([882f1fb ](882f1fbc93 ))
* **element:** Update opendesk element version to 2.0.1 ([d725b93 ](d725b93798 ))
* **helmfile:** Remove default SMTP credentials and create docs for SMTP/TURN ([e120f5f ](e120f5fb9a ))
* **helmfile:** Update images and use a tag and digest together ([c7fc187 ](c7fc187f14 ))
* **services:** Explicitly set securityContexts ([a799db0 ](a799db03c4 ))
* **services:** Update Postfix to 2.0.2 fixing security gaining ([e1070ee ](e1070eeb06 ))
v0.3.1
2023-09-14 11:11:40 +00:00
Dominik Kaminski
e120f5fb9a
fix(helmfile): Remove default SMTP credentials and create docs for SMTP/TURN
2023-09-13 23:39:38 +02:00
Dominik Kaminski
a799db03c4
fix(services): Explicitly set securityContexts
2023-09-13 19:33:47 +02:00
Dominik Kaminski
d725b93798
fix(element): Update opendesk element version to 2.0.1
2023-09-13 19:33:47 +02:00
Dominik Kaminski
e1070eeb06
fix(services): Update Postfix to 2.0.2 fixing security gaining
2023-09-13 19:33:47 +02:00
Dominik Kaminski
c7fc187f14
fix(helmfile): Update images and use a tag and digest together
2023-09-13 19:33:47 +02:00
Dominik Kaminski
89ac783dc3
chore(collabora): Quote strings
2023-09-13 19:33:47 +02:00
Dominik Kaminski
882f1fbc93
fix(element): Improve default container security settings
2023-09-13 19:33:43 +02:00
Dominik Kaminski
b5583caec1
fix(collabora): Update Ingress annotations and set securityContext
2023-09-13 16:32:35 +02:00
Thorsten Roßner
6d23534ee0
chore(release): 0.3.0 [skip ci]
...
# [0.3.0](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.2.10...v0.3.0 ) (2023-09-12)
### Features
* **ci:** Selective tests ([d2e7ac9 ](d2e7ac9348 ))
v0.3.0
2023-09-12 21:18:26 +00:00
Tobias Heinzmann
d2e7ac9348
feat(ci): Selective tests
2023-09-12 21:16:33 +00:00
Thorsten Roßner
2125037a3c
chore(release): 0.2.10 [skip ci]
...
## [0.2.10](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.2.9...v0.2.10 ) (2023-09-06)
### Bug Fixes
* **helmfile:** Add imagePullPolicy default env variable ([f988644 ](f9886448b6 ))
* **helmfile:** Update images and add jitsi, keycloak to security section in docs ([0eceb85 ](0eceb85e7d ))
* **jitsi:** Update chart to 1.4.2 with improved security and fixed change on each deployment ([1349181 ](1349181d80 ))
* **jitsi:** Update jitsi to 1.5.1 and fix prosody image ([ed7e5e4 ](ed7e5e428e ))
* **keycloak:** Improve default security settings ([3b90533 ](3b90533063 ))
* **nextcloud:** Fix yamllint disable comment ([4380e78 ](4380e78981 ))
* **services:** Disable https redirect in istio to fix cert-manager issues ([1ef4a86 ](1ef4a861ac ))
* **services:** Fix capabilities of postifix ([a6fa846 ](a6fa846afc ))
* **services:** Fix OCI registry address of postgresql, mariadb ([be82243 ](be82243966 ))
v0.2.10
2023-09-06 17:12:09 +00:00
Dominik Kaminski
ed7e5e428e
fix(jitsi): Update jitsi to 1.5.1 and fix prosody image
2023-09-06 19:09:59 +02:00
Dominik Kaminski
d28a425673
chore(release): 0.2.10 [skip ci]
...
## [0.2.10](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.2.9...v0.2.10 ) (2023-09-06)
### Bug Fixes
* **helmfile:** Add imagePullPolicy default env variable ([f988644 ](f9886448b6 ))
* **helmfile:** Update images and add jitsi, keycloak to security section in docs ([0eceb85 ](0eceb85e7d ))
* **jitsi:** Update chart to 1.4.2 with improved security and fixed change on each deployment ([1349181 ](1349181d80 ))
* **keycloak:** Improve default security settings ([3b90533 ](3b90533063 ))
* **nextcloud:** Fix yamllint disable comment ([4380e78 ](4380e78981 ))
* **services:** Disable https redirect in istio to fix cert-manager issues ([1ef4a86 ](1ef4a861ac ))
* **services:** Fix capabilities of postifix ([a6fa846 ](a6fa846afc ))
* **services:** Fix OCI registry address of postgresql, mariadb ([be82243 ](be82243966 ))
2023-09-06 07:53:01 +00:00
Dominik Kaminski
a6fa846afc
fix(services): Fix capabilities of postifix
2023-09-05 21:50:31 +02:00
Dominik Kaminski
4380e78981
fix(nextcloud): Fix yamllint disable comment
2023-09-05 20:31:32 +02:00
Dominik Kaminski
be82243966
fix(services): Fix OCI registry address of postgresql, mariadb
2023-09-05 20:15:03 +02:00
Dominik Kaminski
f9886448b6
fix(helmfile): Add imagePullPolicy default env variable
2023-09-05 19:59:18 +02:00
Dominik Kaminski
0eceb85e7d
fix(helmfile): Update images and add jitsi, keycloak to security section in docs
2023-09-05 18:49:09 +02:00
Dominik Kaminski
1ef4a861ac
fix(services): Disable https redirect in istio to fix cert-manager issues
2023-09-05 18:48:18 +02:00
Dominik Kaminski
3b90533063
fix(keycloak): Improve default security settings
2023-09-05 18:47:28 +02:00
Dominik Kaminski
1349181d80
fix(jitsi): Update chart to 1.4.2 with improved security and fixed change on each deployment
2023-09-05 18:47:04 +02:00
Thorsten Roßner
e1b84898c5
chore(release): 0.2.9 [skip ci]
...
## [0.2.9](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.2.8...v0.2.9 ) (2023-09-05)
### Bug Fixes
* **collabora:** Add websocket support for NGINX Inc. Ingress ([6e5ef63 ](6e5ef639c2 ))
* **docs:** Add security part in README ([ff462ab ](ff462ab0dc ))
* **docs:** Update scaling docs ([63a1e25 ](63a1e2568e ))
* **helmfile:** Reduce icap resources in default enviroment ([c5ab1b8 ](c5ab1b81fe ))
* **helmfile:** Update clamav and nextcloud images in default environment ([4f2a8ae ](4f2a8aeee4 ))
* **nextcloud:** Add support for up to 4G large upload for Ingress NGINX and NGINX Inc. Ingress ([6e68f7f ](6e68f7f28c ))
* **nextcloud:** Rename sovereign-workplace-nextcloud-bootstrap to opendesk-nextcloud-bootstrap and use OCI ([cef11ac ](cef11acbae ))
* **nextcloud:** Use clamav-icap when clamavDistributed is activated ([41d40c9 ](41d40c9b73 ))
* **services:** Enable security context and use default increased security settings ([9a6d240 ](9a6d2409a6 ))
* **services:** Fix image registry templates for postfix ([6321ff5 ](6321ff50a0 ))
* **services:** Replace image digest by tag ([f758293 ](f758293241 ))
* **services:** Set readOnlyRootFilesystem to true on master ([5fbf86b ](5fbf86b6bc ))
* **services:** Update clamav to 4.0.0, redis to 18.0.0, postgresql to 2.0.2, mariadb to 2.0.2 and use OCI registries ([9d78664 ](9d7866480c ))
v0.2.9
2023-09-05 11:58:43 +00:00