Commit Graph

1040 Commits

Author SHA1 Message Date
Yannik Schmidt
81c33aeaa0 fix: security kontext kc proxy 2025-05-20 07:30:17 +02:00
Yannik Schmidt
cd3f69e0ac Merge branch 'ntretkowski/nubus-v1.9.1' into thollwed/feat_readonly-filesystem-keycloak-bootstrap 2025-05-20 00:12:59 +02:00
Dominik Kaminski
c166749428 chore(nubus): Update digest for nubusKeycloak 2025-05-15 14:27:14 +02:00
Norbert Tretkowski
93f946e26a docs(README.md): Update Nubus version 2025-05-13 19:54:34 +02:00
Norbert Tretkowski
369358ee67 fix(nubus): Re-add nubusPortalConsumer.provisioningApi.auth.* 2025-05-13 19:27:01 +02:00
Norbert Tretkowski
b8910216f7 feat(nubus): Update to v1.9.1 2025-05-13 16:13:06 +02:00
openDesk Bot
7603bbdc64 chore(renovate): Update library/postgres Docker tag to v16.9 2025-05-10 03:36:39 +00:00
Thomas Kaltenbrunner
4b305768c4 feat(helmfile): Define global.additionalMailDomains as list; if you use the setting already, check migrations.md for details 2025-05-07 18:33:55 +02:00
Thorsten Roßner
91a25f4c18 ci(gitlab): Update gitlab-config image to v2.4.9 2025-05-07 15:02:12 +02:00
Thorsten Roßner
006aed791e fix(nubus): [#182] Add KC_TRUSTSTORE_PATHS to Keycloak when using self-signed certificates 2025-05-07 14:52:35 +02:00
Thorsten Roßner
b45a0bf832 fix(nubus): [#183] Do not override nubusPortalConsumer.waitForDependency.image when using self-signed certificates 2025-05-07 14:03:03 +02:00
Thorsten Roßner
8e638b6714 chore(global.generated.yaml.gotmpl): Bump version to fake a newer release for migrations (testing) 2025-05-07 12:26:49 +02:00
Oliver Günther
e91efa8ecc fix(openproject): Update to 15.5.1 2025-05-07 12:19:21 +02:00
Thorsten Roßner
58b74c7cfd docs(theming.md): Update to latest state 2025-05-07 12:19:21 +02:00
René Fischer
c3417f404c chore(scaling.md): Fix Postgres RAM scaling 2025-05-07 12:19:21 +02:00
René Fischer
799ba97b3c chore(docs): Separate developer from operations docs 2025-05-07 12:19:21 +02:00
Thorsten Roßner
9320274162 docs(misc): Fix typos 2025-05-07 12:19:21 +02:00
Thorsten Roßner
5f58a857ac feat(helmfile): Option to select default file format for weboffice using; see functional.weboffice.defaultFormat in functional.yaml.gotmpl for details 2025-05-07 12:19:21 +02:00
René Fischer
86bfa3e559 chore(publiccode.yaml): Fix logo in publiccode.yaml 2025-05-07 12:19:21 +02:00
Thorsten Roßner
42f6151121 chore(release): 1.3.2 [skip ci]
## [1.3.2](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.3.1...v1.3.2) (2025-05-06)

### Bug Fixes

* **dovecot:** Update Helm chart to fix migration mode ([7ba84b9](7ba84b99ca))
* **helmfile:** Explicitly template auth-modules in OX App Suite; Streamline name of OX App Suite EE image ([6cbb6b6](6cbb6b6922))
v1.3.2
2025-05-06 19:18:51 +00:00
Thorsten Roßner
6cbb6b6922 fix(helmfile): Explicitly template auth-modules in OX App Suite; Streamline name of OX App Suite EE image 2025-05-06 16:33:37 +02:00
Thorsten Roßner
7ba84b99ca fix(dovecot): Update Helm chart to fix migration mode 2025-05-06 16:33:37 +02:00
Thorsten Roßner
f49980b3ef docs(groupware-migration.md): Update with more details 2025-05-06 16:33:37 +02:00
René Fischer
69e66c65f6 chore(scaling.md): Second round of review changes 2025-05-05 11:25:50 +02:00
René Fischer
aed14e1ce1 chore(scaling.md): Review changes 2025-05-05 11:25:50 +02:00
René Fischer
e557393025 docs(scaling.md): Add scaling guidelines 2025-05-05 11:25:50 +02:00
Timo Hollwedel
99c2a59b16 feat(nubus): Use readonly root filesystem for keycloak bootstrap 2025-04-25 15:42:22 +02:00
Thorsten Roßner
45b924e8fa chore(release): 1.3.1 [skip ci]
## [1.3.1](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.3.0...v1.3.1) (2025-04-24)

### Bug Fixes

* **ci:** Update Helm to v3.17.3 ([9446faa](9446faaa59))
* **ci:** Update Helm to v3.17.3 ([d794a20](d794a2036e))
* **docs:** Update "Ingress controller" section and add footnote on volume provisioner in `requirements.md` ([17efbd7](17efbd79f1))
* **helmfile:** Conditional templating of additional annotations in selected components to unblock openDesk deployment despite a bug in Helm 3.17 (https://github.com/helm/helm/issues/30587) ([861b84b](861b84b14d))
* **postfix:** Disable unauthenticated relaying of mails in `postfix-ox` ([7414f05](7414f05005))
v1.3.1
2025-04-24 12:05:42 +00:00
Thorsten Roßner
9446faaa59 fix(ci): Update Helm to v3.17.3 2025-04-24 11:44:22 +02:00
Thorsten Roßner
17efbd79f1 fix(docs): Update "Ingress controller" section and add footnote on volume provisioner in requirements.md 2025-04-24 11:09:22 +02:00
Thorsten Roßner
d794a2036e fix(ci): Update Helm to v3.17.3 2025-04-24 09:50:19 +02:00
Thomas Kaltenbrunner
7414f05005 fix(postfix): Disable unauthenticated relaying of mails in postfix-ox 2025-04-24 07:54:34 +02:00
Thorsten Roßner
3d80c7e2b1 chore: Update publiccode.yml for v1.3.1 2025-04-23 16:53:16 +02:00
Thorsten Roßner
d74742808c ci: Authorize container access in scan job 2025-04-23 16:53:16 +02:00
Thorsten Roßner
861b84b14d fix(helmfile): Conditional templating of additional annotations in selected components to unblock openDesk deployment despite a bug in Helm 3.17 (https://github.com/helm/helm/issues/30587) 2025-04-23 16:52:32 +02:00
Thorsten Roßner
a9fae59b74 chore(release): 1.3.0 [skip ci]
# [1.3.0](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.2.1...v1.3.0) (2025-04-22)

### Bug Fixes

* **helmfile:** Fix Kyverno lint issues for EE components ([46b3834](46b38342d3))
* **helmfile:** Remove no longer used `secrets.nubus.defaultAccounts.*` ([6e6d155](6e6d15552e))
* **helmfile:** Support for Keycloak session settings via `functional.authentication.realmSettings.*` ([3fcfa00](3fcfa00503))
* **migrations:** Optional delete of `ums-minio-rewrites` Ingress, as it is non-existing in deployments with external object storage ([6932953](693295391b))
* **ox-connector:** Update to v0.19.0 ([fe664a7](fe664a7f8d))
* **xwiki:** Update Helm chart to v1.4.4 to fix the problem with XWiki not starting when secrets contained specific (XML interpreted) characters ([67a1df0](67a1df0f80))

### Features

* **collabora:** Update to 24.04.13 ([8f12208](8f12208074))
* **helmfile:** Add template support for annotations ([9cde57d](9cde57d74b))
* **helmfile:** Support for SSO federation; see `ssoFederation` section in `functional.yaml.gotmpl` for details ([79975a5](79975a58e3))
* **nubus:** Show openDesk version to all users (instead of admin users only) ([393ee31](393ee31163))
* **nubus:** Update to 1.8.0 ([90c49f6](90c49f6f83))
* **openproject:** Update to 15.5.0 ([7f1cfc5](7f1cfc5555))
v1.3.0
2025-04-22 13:02:30 +00:00
Thorsten Roßner
693295391b fix(migrations): Optional delete of ums-minio-rewrites Ingress, as it is non-existing in deployments with external object storage 2025-04-22 14:08:04 +02:00
Thorsten Roßner
393ee31163 feat(nubus): Show openDesk version to all users (instead of admin users only) 2025-04-22 14:07:55 +02:00
Jonas Schulz
b0088b028c docs: Supplement changes from 0e3b6615 2025-04-22 14:07:55 +02:00
Oliver Günther
7f1cfc5555 feat(openproject): Update to 15.5.0 2025-04-22 14:07:55 +02:00
Dominik Kaminski
9cde57d74b feat(helmfile): Add template support for annotations 2025-04-22 14:07:55 +02:00
Thorsten Roßner
cf750a8ddb chore: Update release/version info in publiccode.yml and global.generated.yaml.gotmpl 2025-04-22 14:07:55 +02:00
Thorsten Roßner
8f12208074 feat(collabora): Update to 24.04.13 2025-04-22 14:07:55 +02:00
Norbert Tretkowski
90c49f6f83 feat(nubus): Update to 1.8.0 2025-04-22 14:07:55 +02:00
René Fischer
e25cb5e0f3 docs(testing.md): Add link to load test repo and information about nightly tests 2025-04-22 14:07:55 +02:00
Thorsten Roßner
79975a58e3 feat(helmfile): Support for SSO federation; see ssoFederation section in functional.yaml.gotmpl for details 2025-04-22 14:07:55 +02:00
Ben Schlagbauer
02867c47c0 docs: Overall fixes improvements 2025-04-22 14:07:55 +02:00
Thorsten Roßner
4df50b011d ci: Ensure "DEPLOY" options are grouped together 2025-04-22 14:07:55 +02:00
Thorsten Roßner
c22b467a61 docs(README-EE.md): More detailled information regarding oD EE artifacts 2025-04-22 14:07:55 +02:00
René Fischer
4bf98d0da0 chore(docs): Fix links in docs 2025-04-22 14:07:55 +02:00