Yannik Schmidt
|
81c33aeaa0
|
fix: security kontext kc proxy
|
2025-05-20 07:30:17 +02:00 |
|
Yannik Schmidt
|
cd3f69e0ac
|
Merge branch 'ntretkowski/nubus-v1.9.1' into thollwed/feat_readonly-filesystem-keycloak-bootstrap
|
2025-05-20 00:12:59 +02:00 |
|
Dominik Kaminski
|
c166749428
|
chore(nubus): Update digest for nubusKeycloak
|
2025-05-15 14:27:14 +02:00 |
|
Norbert Tretkowski
|
369358ee67
|
fix(nubus): Re-add nubusPortalConsumer.provisioningApi.auth.*
|
2025-05-13 19:27:01 +02:00 |
|
Norbert Tretkowski
|
b8910216f7
|
feat(nubus): Update to v1.9.1
|
2025-05-13 16:13:06 +02:00 |
|
openDesk Bot
|
7603bbdc64
|
chore(renovate): Update library/postgres Docker tag to v16.9
|
2025-05-10 03:36:39 +00:00 |
|
Thomas Kaltenbrunner
|
4b305768c4
|
feat(helmfile): Define global.additionalMailDomains as list; if you use the setting already, check migrations.md for details
|
2025-05-07 18:33:55 +02:00 |
|
Thorsten Roßner
|
006aed791e
|
fix(nubus): [#182] Add KC_TRUSTSTORE_PATHS to Keycloak when using self-signed certificates
|
2025-05-07 14:52:35 +02:00 |
|
Thorsten Roßner
|
b45a0bf832
|
fix(nubus): [#183] Do not override nubusPortalConsumer.waitForDependency.image when using self-signed certificates
|
2025-05-07 14:03:03 +02:00 |
|
Thorsten Roßner
|
8e638b6714
|
chore(global.generated.yaml.gotmpl): Bump version to fake a newer release for migrations (testing)
|
2025-05-07 12:26:49 +02:00 |
|
Oliver Günther
|
e91efa8ecc
|
fix(openproject): Update to 15.5.1
|
2025-05-07 12:19:21 +02:00 |
|
Thorsten Roßner
|
58b74c7cfd
|
docs(theming.md): Update to latest state
|
2025-05-07 12:19:21 +02:00 |
|
René Fischer
|
799ba97b3c
|
chore(docs): Separate developer from operations docs
|
2025-05-07 12:19:21 +02:00 |
|
Thorsten Roßner
|
5f58a857ac
|
feat(helmfile): Option to select default file format for weboffice using; see functional.weboffice.defaultFormat in functional.yaml.gotmpl for details
|
2025-05-07 12:19:21 +02:00 |
|
Thorsten Roßner
|
42f6151121
|
chore(release): 1.3.2 [skip ci]
## [1.3.2](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.3.1...v1.3.2) (2025-05-06)
### Bug Fixes
* **dovecot:** Update Helm chart to fix migration mode ([7ba84b9](7ba84b99ca))
* **helmfile:** Explicitly template auth-modules in OX App Suite; Streamline name of OX App Suite EE image ([6cbb6b6](6cbb6b6922))
|
2025-05-06 19:18:51 +00:00 |
|
Thorsten Roßner
|
6cbb6b6922
|
fix(helmfile): Explicitly template auth-modules in OX App Suite; Streamline name of OX App Suite EE image
|
2025-05-06 16:33:37 +02:00 |
|
Thorsten Roßner
|
7ba84b99ca
|
fix(dovecot): Update Helm chart to fix migration mode
|
2025-05-06 16:33:37 +02:00 |
|
Timo Hollwedel
|
99c2a59b16
|
feat(nubus): Use readonly root filesystem for keycloak bootstrap
|
2025-04-25 15:42:22 +02:00 |
|
Thorsten Roßner
|
45b924e8fa
|
chore(release): 1.3.1 [skip ci]
## [1.3.1](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.3.0...v1.3.1) (2025-04-24)
### Bug Fixes
* **ci:** Update Helm to v3.17.3 ([9446faa](9446faaa59))
* **ci:** Update Helm to v3.17.3 ([d794a20](d794a2036e))
* **docs:** Update "Ingress controller" section and add footnote on volume provisioner in `requirements.md` ([17efbd7](17efbd79f1))
* **helmfile:** Conditional templating of additional annotations in selected components to unblock openDesk deployment despite a bug in Helm 3.17 (https://github.com/helm/helm/issues/30587) ([861b84b](861b84b14d))
* **postfix:** Disable unauthenticated relaying of mails in `postfix-ox` ([7414f05](7414f05005))
|
2025-04-24 12:05:42 +00:00 |
|
Thomas Kaltenbrunner
|
7414f05005
|
fix(postfix): Disable unauthenticated relaying of mails in postfix-ox
|
2025-04-24 07:54:34 +02:00 |
|
Thorsten Roßner
|
861b84b14d
|
fix(helmfile): Conditional templating of additional annotations in selected components to unblock openDesk deployment despite a bug in Helm 3.17 (https://github.com/helm/helm/issues/30587)
|
2025-04-23 16:52:32 +02:00 |
|
Thorsten Roßner
|
693295391b
|
fix(migrations): Optional delete of ums-minio-rewrites Ingress, as it is non-existing in deployments with external object storage
|
2025-04-22 14:08:04 +02:00 |
|
Thorsten Roßner
|
393ee31163
|
feat(nubus): Show openDesk version to all users (instead of admin users only)
|
2025-04-22 14:07:55 +02:00 |
|
Oliver Günther
|
7f1cfc5555
|
feat(openproject): Update to 15.5.0
|
2025-04-22 14:07:55 +02:00 |
|
Dominik Kaminski
|
9cde57d74b
|
feat(helmfile): Add template support for annotations
|
2025-04-22 14:07:55 +02:00 |
|
Thorsten Roßner
|
cf750a8ddb
|
chore: Update release/version info in publiccode.yml and global.generated.yaml.gotmpl
|
2025-04-22 14:07:55 +02:00 |
|
Thorsten Roßner
|
8f12208074
|
feat(collabora): Update to 24.04.13
|
2025-04-22 14:07:55 +02:00 |
|
Norbert Tretkowski
|
90c49f6f83
|
feat(nubus): Update to 1.8.0
|
2025-04-22 14:07:55 +02:00 |
|
Thorsten Roßner
|
79975a58e3
|
feat(helmfile): Support for SSO federation; see ssoFederation section in functional.yaml.gotmpl for details
|
2025-04-22 14:07:55 +02:00 |
|
Thorsten Roßner
|
c22b467a61
|
docs(README-EE.md): More detailled information regarding oD EE artifacts
|
2025-04-22 14:07:55 +02:00 |
|
René Fischer
|
790baebf71
|
chore(docs): Merge info repo contents
|
2025-04-22 14:07:54 +02:00 |
|
Thorsten Roßner
|
3fcfa00503
|
fix(helmfile): Support for Keycloak session settings via functional.authentication.realmSettings.*
|
2025-04-22 14:07:47 +02:00 |
|
Norbert Tretkowski
|
fe664a7f8d
|
fix(ox-connector): Update to v0.19.0
|
2025-04-22 07:49:27 +02:00 |
|
Thorsten Roßner
|
67a1df0f80
|
fix(xwiki): Update Helm chart to v1.4.4 to fix the problem with XWiki not starting when secrets contained specific (XML interpreted) characters
|
2025-04-22 07:49:27 +02:00 |
|
Thorsten Roßner
|
6e6d15552e
|
fix(helmfile): Remove no longer used secrets.nubus.defaultAccounts.*
|
2025-04-22 07:49:27 +02:00 |
|
Thomas Kaltenbrunner
|
46b38342d3
|
fix(helmfile): Fix Kyverno lint issues for EE components
|
2025-04-22 07:49:27 +02:00 |
|
Thorsten Roßner
|
a0f852e104
|
chore(release): 1.2.1 [skip ci]
## [1.2.1](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.2.0...v1.2.1) (2025-03-28)
### Bug Fixes
* **dovecot:** Support external secrets ([f758685](f758685a2e))
* **element:** Update Synapse to 1.127.1; Fixes https://www.cve.org/CVERecord?id=CVE-2025-30355 which applies to Synapse installations with unrestricted (no allow list) federation enabled ([5cd12b9](5cd12b91c7))
* **openproject:** Update to 15.4.2 ([aa8e30b](aa8e30b34f))
|
2025-03-28 13:18:50 +00:00 |
|
Thorsten Roßner
|
aa8e30b34f
|
fix(openproject): Update to 15.4.2
|
2025-03-28 14:10:05 +01:00 |
|
Thorsten Roßner
|
5cd12b91c7
|
fix(element): Update Synapse to 1.127.1; Fixes https://www.cve.org/CVERecord?id=CVE-2025-30355 which applies to Synapse installations with unrestricted (no allow list) federation enabled
|
2025-03-28 14:07:48 +01:00 |
|
Thomas Kaltenbrunner
|
f758685a2e
|
fix(dovecot): Support external secrets
|
2025-03-28 14:07:48 +01:00 |
|
Thorsten Roßner
|
1c50aa5ce2
|
fix(nubus): Delete now legacy Ingress ums-minio-rewrites
|
2025-03-25 18:24:21 +01:00 |
|
Thorsten Roßner
|
5d398f5d64
|
fix(nubus): Change logo URLs for apps referencing the openDesk logo provided by Nubus
|
2025-03-25 08:33:58 +01:00 |
|
Dominik Kaminski
|
466b70a9bb
|
fix(nubus): Add imagePullSecrets to nginx-s3-gateway
|
2025-03-25 07:22:58 +01:00 |
|
Thorsten Roßner
|
adb3fa18eb
|
fix(nubus): Register OX provisioning consumer only when OX is enabled; See migrations.md for details
|
2025-03-25 07:22:48 +01:00 |
|
Thorsten Roßner
|
1e62a0dfe1
|
fix(nubus): Always use S3 gateway for assets
|
2025-03-25 07:21:45 +01:00 |
|
Thorsten Roßner
|
696f2daa9c
|
fix(dovecot): Update EE Helm chart to resolve issue with mandatory set PriorityClass
|
2025-03-25 07:21:32 +01:00 |
|
Thorsten Roßner
|
c9a8a60ff3
|
chore(ci): Fix yaml linting issues
|
2025-03-24 11:25:59 +01:00 |
|
Thorsten Roßner
|
7d7e9e65b3
|
fix(nubus): Add migrations for Nubus 1.7.0; See migrations.md for details
|
2025-03-24 08:43:03 +01:00 |
|
Thorsten Roßner
|
baa5b14551
|
fix(nubus): Indent nubusPortalConsumer.persistence.groupMembershipCache causing persistence.storages.nubusPortalConsumer.* to be ignored; See migrations.md for details
|
2025-03-24 07:10:06 +00:00 |
|
Thorsten Roßner
|
9e083de84d
|
chore(helmfile): Manually bump version in global.generated.yaml.gotmpl to test migration
|
2025-03-24 07:10:06 +00:00 |
|