Commit Graph

791 Commits

Author SHA1 Message Date
Yannik Schmidt
81c33aeaa0 fix: security kontext kc proxy 2025-05-20 07:30:17 +02:00
Yannik Schmidt
cd3f69e0ac Merge branch 'ntretkowski/nubus-v1.9.1' into thollwed/feat_readonly-filesystem-keycloak-bootstrap 2025-05-20 00:12:59 +02:00
Dominik Kaminski
c166749428 chore(nubus): Update digest for nubusKeycloak 2025-05-15 14:27:14 +02:00
Norbert Tretkowski
369358ee67 fix(nubus): Re-add nubusPortalConsumer.provisioningApi.auth.* 2025-05-13 19:27:01 +02:00
Norbert Tretkowski
b8910216f7 feat(nubus): Update to v1.9.1 2025-05-13 16:13:06 +02:00
openDesk Bot
7603bbdc64 chore(renovate): Update library/postgres Docker tag to v16.9 2025-05-10 03:36:39 +00:00
Thomas Kaltenbrunner
4b305768c4 feat(helmfile): Define global.additionalMailDomains as list; if you use the setting already, check migrations.md for details 2025-05-07 18:33:55 +02:00
Thorsten Roßner
006aed791e fix(nubus): [#182] Add KC_TRUSTSTORE_PATHS to Keycloak when using self-signed certificates 2025-05-07 14:52:35 +02:00
Thorsten Roßner
b45a0bf832 fix(nubus): [#183] Do not override nubusPortalConsumer.waitForDependency.image when using self-signed certificates 2025-05-07 14:03:03 +02:00
Thorsten Roßner
8e638b6714 chore(global.generated.yaml.gotmpl): Bump version to fake a newer release for migrations (testing) 2025-05-07 12:26:49 +02:00
Oliver Günther
e91efa8ecc fix(openproject): Update to 15.5.1 2025-05-07 12:19:21 +02:00
Thorsten Roßner
58b74c7cfd docs(theming.md): Update to latest state 2025-05-07 12:19:21 +02:00
René Fischer
799ba97b3c chore(docs): Separate developer from operations docs 2025-05-07 12:19:21 +02:00
Thorsten Roßner
5f58a857ac feat(helmfile): Option to select default file format for weboffice using; see functional.weboffice.defaultFormat in functional.yaml.gotmpl for details 2025-05-07 12:19:21 +02:00
Thorsten Roßner
42f6151121 chore(release): 1.3.2 [skip ci]
## [1.3.2](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.3.1...v1.3.2) (2025-05-06)

### Bug Fixes

* **dovecot:** Update Helm chart to fix migration mode ([7ba84b9](7ba84b99ca))
* **helmfile:** Explicitly template auth-modules in OX App Suite; Streamline name of OX App Suite EE image ([6cbb6b6](6cbb6b6922))
2025-05-06 19:18:51 +00:00
Thorsten Roßner
6cbb6b6922 fix(helmfile): Explicitly template auth-modules in OX App Suite; Streamline name of OX App Suite EE image 2025-05-06 16:33:37 +02:00
Thorsten Roßner
7ba84b99ca fix(dovecot): Update Helm chart to fix migration mode 2025-05-06 16:33:37 +02:00
Timo Hollwedel
99c2a59b16 feat(nubus): Use readonly root filesystem for keycloak bootstrap 2025-04-25 15:42:22 +02:00
Thorsten Roßner
45b924e8fa chore(release): 1.3.1 [skip ci]
## [1.3.1](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.3.0...v1.3.1) (2025-04-24)

### Bug Fixes

* **ci:** Update Helm to v3.17.3 ([9446faa](9446faaa59))
* **ci:** Update Helm to v3.17.3 ([d794a20](d794a2036e))
* **docs:** Update "Ingress controller" section and add footnote on volume provisioner in `requirements.md` ([17efbd7](17efbd79f1))
* **helmfile:** Conditional templating of additional annotations in selected components to unblock openDesk deployment despite a bug in Helm 3.17 (https://github.com/helm/helm/issues/30587) ([861b84b](861b84b14d))
* **postfix:** Disable unauthenticated relaying of mails in `postfix-ox` ([7414f05](7414f05005))
2025-04-24 12:05:42 +00:00
Thomas Kaltenbrunner
7414f05005 fix(postfix): Disable unauthenticated relaying of mails in postfix-ox 2025-04-24 07:54:34 +02:00
Thorsten Roßner
861b84b14d fix(helmfile): Conditional templating of additional annotations in selected components to unblock openDesk deployment despite a bug in Helm 3.17 (https://github.com/helm/helm/issues/30587) 2025-04-23 16:52:32 +02:00
Thorsten Roßner
693295391b fix(migrations): Optional delete of ums-minio-rewrites Ingress, as it is non-existing in deployments with external object storage 2025-04-22 14:08:04 +02:00
Thorsten Roßner
393ee31163 feat(nubus): Show openDesk version to all users (instead of admin users only) 2025-04-22 14:07:55 +02:00
Oliver Günther
7f1cfc5555 feat(openproject): Update to 15.5.0 2025-04-22 14:07:55 +02:00
Dominik Kaminski
9cde57d74b feat(helmfile): Add template support for annotations 2025-04-22 14:07:55 +02:00
Thorsten Roßner
cf750a8ddb chore: Update release/version info in publiccode.yml and global.generated.yaml.gotmpl 2025-04-22 14:07:55 +02:00
Thorsten Roßner
8f12208074 feat(collabora): Update to 24.04.13 2025-04-22 14:07:55 +02:00
Norbert Tretkowski
90c49f6f83 feat(nubus): Update to 1.8.0 2025-04-22 14:07:55 +02:00
Thorsten Roßner
79975a58e3 feat(helmfile): Support for SSO federation; see ssoFederation section in functional.yaml.gotmpl for details 2025-04-22 14:07:55 +02:00
Thorsten Roßner
c22b467a61 docs(README-EE.md): More detailled information regarding oD EE artifacts 2025-04-22 14:07:55 +02:00
René Fischer
790baebf71 chore(docs): Merge info repo contents 2025-04-22 14:07:54 +02:00
Thorsten Roßner
3fcfa00503 fix(helmfile): Support for Keycloak session settings via functional.authentication.realmSettings.* 2025-04-22 14:07:47 +02:00
Norbert Tretkowski
fe664a7f8d fix(ox-connector): Update to v0.19.0 2025-04-22 07:49:27 +02:00
Thorsten Roßner
67a1df0f80 fix(xwiki): Update Helm chart to v1.4.4 to fix the problem with XWiki not starting when secrets contained specific (XML interpreted) characters 2025-04-22 07:49:27 +02:00
Thorsten Roßner
6e6d15552e fix(helmfile): Remove no longer used secrets.nubus.defaultAccounts.* 2025-04-22 07:49:27 +02:00
Thomas Kaltenbrunner
46b38342d3 fix(helmfile): Fix Kyverno lint issues for EE components 2025-04-22 07:49:27 +02:00
Thorsten Roßner
a0f852e104 chore(release): 1.2.1 [skip ci]
## [1.2.1](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.2.0...v1.2.1) (2025-03-28)

### Bug Fixes

* **dovecot:** Support external secrets ([f758685](f758685a2e))
* **element:** Update Synapse to 1.127.1; Fixes https://www.cve.org/CVERecord?id=CVE-2025-30355 which applies to Synapse installations with unrestricted (no allow list) federation enabled ([5cd12b9](5cd12b91c7))
* **openproject:** Update to 15.4.2 ([aa8e30b](aa8e30b34f))
2025-03-28 13:18:50 +00:00
Thorsten Roßner
aa8e30b34f fix(openproject): Update to 15.4.2 2025-03-28 14:10:05 +01:00
Thorsten Roßner
5cd12b91c7 fix(element): Update Synapse to 1.127.1; Fixes https://www.cve.org/CVERecord?id=CVE-2025-30355 which applies to Synapse installations with unrestricted (no allow list) federation enabled 2025-03-28 14:07:48 +01:00
Thomas Kaltenbrunner
f758685a2e fix(dovecot): Support external secrets 2025-03-28 14:07:48 +01:00
Thorsten Roßner
1c50aa5ce2 fix(nubus): Delete now legacy Ingress ums-minio-rewrites 2025-03-25 18:24:21 +01:00
Thorsten Roßner
5d398f5d64 fix(nubus): Change logo URLs for apps referencing the openDesk logo provided by Nubus 2025-03-25 08:33:58 +01:00
Dominik Kaminski
466b70a9bb fix(nubus): Add imagePullSecrets to nginx-s3-gateway 2025-03-25 07:22:58 +01:00
Thorsten Roßner
adb3fa18eb fix(nubus): Register OX provisioning consumer only when OX is enabled; See migrations.md for details 2025-03-25 07:22:48 +01:00
Thorsten Roßner
1e62a0dfe1 fix(nubus): Always use S3 gateway for assets 2025-03-25 07:21:45 +01:00
Thorsten Roßner
696f2daa9c fix(dovecot): Update EE Helm chart to resolve issue with mandatory set PriorityClass 2025-03-25 07:21:32 +01:00
Thorsten Roßner
c9a8a60ff3 chore(ci): Fix yaml linting issues 2025-03-24 11:25:59 +01:00
Thorsten Roßner
7d7e9e65b3 fix(nubus): Add migrations for Nubus 1.7.0; See migrations.md for details 2025-03-24 08:43:03 +01:00
Thorsten Roßner
baa5b14551 fix(nubus): Indent nubusPortalConsumer.persistence.groupMembershipCache causing persistence.storages.nubusPortalConsumer.* to be ignored; See migrations.md for details 2025-03-24 07:10:06 +00:00
Thorsten Roßner
9e083de84d chore(helmfile): Manually bump version in global.generated.yaml.gotmpl to test migration 2025-03-24 07:10:06 +00:00