Commit Graph

993 Commits

Author SHA1 Message Date
Viktor Pracht
f7e28b064e feat(open-xchange): Enable ACLs and support logins different from local part
Enable the Mail Login Resolver to properly resolve UUIDs to OX users and
vice versa.

Switch IMAP auth from emails to login names, since that's the only field
present in authentication tokens.

Due to an issue with retrieving operationsl LDAP attributes (see OX
issue /appsuite/platform/core#251), entryUUID does not work currently.
As a work-around, users need to have their UUIDs in the field
departmentNumber. Migrating to UUIDs (WP#1236) would also work.
Maybe we should just make that field configurable.
2025-04-13 17:25:32 +02:00
Thorsten Roßner
a5f9b01ca0 ci: Ensure "DEPLOY" options are grouped together 2025-04-11 13:05:07 +02:00
Thorsten Roßner
1f2d42ea48 docs(README-EE.md): More detailled information regarding oD EE artifacts 2025-04-11 13:05:04 +02:00
René Fischer
91882b22e5 chore(docs): Fix links in docs 2025-04-11 08:54:33 +02:00
Ben Schlagbauer
d444d24489 docs: Overall fixes improvements 2025-04-10 09:46:01 +02:00
Simon Herman
c1f19131d9 docs(requirements): Add information on compatibility with Ingress-NGINX >= 1.12.0 2025-04-09 13:47:59 +02:00
René Fischer
61ea6bdd44 chore(docs): Merge info repo contents 2025-04-07 08:41:21 +02:00
Thorsten Roßner
ffe3daa506 fix(helmfile): Support for Keycloak session settings via functional.authentication.realmSettings.* 2025-04-04 10:33:00 +00:00
Norbert Tretkowski
76a8e03acf fix(ox-connector): Update to v0.19.0 2025-04-04 11:38:03 +02:00
Thorsten Roßner
97cb914f18 fix(xwiki): Update Helm chart to v1.4.4 to fix the problem with XWiki not starting when secrets contained specific (XML interpreted) characters 2025-04-01 09:19:01 +00:00
Thorsten Roßner
0c92d1681c fix(helmfile): Remove no longer used secrets.nubus.defaultAccounts.* 2025-04-01 09:19:01 +00:00
Thomas Kaltenbrunner
f6aeffb189 fix(helmfile): Fix Kyverno lint issues for EE components 2025-03-31 12:59:39 +02:00
Thorsten Roßner
a0f852e104 chore(release): 1.2.1 [skip ci]
## [1.2.1](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.2.0...v1.2.1) (2025-03-28)

### Bug Fixes

* **dovecot:** Support external secrets ([f758685](f758685a2e))
* **element:** Update Synapse to 1.127.1; Fixes https://www.cve.org/CVERecord?id=CVE-2025-30355 which applies to Synapse installations with unrestricted (no allow list) federation enabled ([5cd12b9](5cd12b91c7))
* **openproject:** Update to 15.4.2 ([aa8e30b](aa8e30b34f))
v1.2.1
2025-03-28 13:18:50 +00:00
Thorsten Roßner
aa8e30b34f fix(openproject): Update to 15.4.2 2025-03-28 14:10:05 +01:00
Thorsten Roßner
5cd12b91c7 fix(element): Update Synapse to 1.127.1; Fixes https://www.cve.org/CVERecord?id=CVE-2025-30355 which applies to Synapse installations with unrestricted (no allow list) federation enabled 2025-03-28 14:07:48 +01:00
Thomas Kaltenbrunner
f758685a2e fix(dovecot): Support external secrets 2025-03-28 14:07:48 +01:00
Thorsten Roßner
c37eedba42 chore(docs): Update ToC across MD files and document Nubus version bump in README.md 2025-03-27 07:43:59 +01:00
Dominik Kaminski
04efd54022 chore(release): 1.2.0 [skip ci]
# [1.2.0](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/compare/v1.1.2...v1.2.0) (2025-03-25)

### Bug Fixes

* **collabora:** Set proper theming for Collabora Online (openDesk EE) ([896b3c1](896b3c102c))
* **collabora:** Update to 24.04.12 ([4296db7](4296db7c90))
* **dev-tooling:** Fix path names when refencing local Helm chart copies in `helmfile-child.yaml.gotmpl` files ([60f5e36](60f5e36b7c))
* **docs:** Add `functional.md` and reference it in `getting-started.md` ([0efc0af](0efc0af761))
* **docs:** Add testing.md ([c4e4258](c4e4258162))
* **dovecot:** Update EE Helm chart to resolve issue with mandatory set `PriorityClass` ([696f2da](696f2daa9c))
* **element:** Run UVS container as a non-root user ([f262507](f26250774e))
* **element:** Update NeoChoice and NeoBoard widget to latest releases ([7456543](7456543d81))
* **helmfile:** Add missing `deletePodsOnSuccessTimeout` statements ([87144b8](87144b8fd3))
* **helmfile:** Support for `functional.externalServices.matrix.federation.domainAllowList` ([817af98](817af98fcd))
* **intercom:** Allow transient session cookies and rolling session duration configuration ([4d59d12](4d59d12a97))
* **intercom:** Update to Intercom Service v2.10.3 ([7b05213](7b05213d6e))
* **jitsi:** Update chart to v3.1.0 incl. a fix in room history toggle ([1480253](1480253a52))
* **migrations:** Explicit scoping of role required for access to the migration's ConfigMap ([02488fe](02488fe2dd))
* **nextcloud:** Disable integration with OX App Suite if groupware it is not available ([fdfe76c](fdfe76c37e))
* **nextcloud:** Update apps and support branding of the HTML title ([bc55f6a](bc55f6a366))
* **nextcloud:** Update images for improved log output ([f1147f0](f1147f0fdf))
* **nextcloud:** Update images to allow logging in environments where inotify cannot be used ([0110675](01106757da))
* **nextcloud:** Update to 30.0.6 including latest apps ([52b0b13](52b0b13e6b))
* **nubus:** Add imagePullSecrets to nginx-s3-gateway ([466b70a](466b70a9bb))
* **nubus:** Add migrations for Nubus 1.7.0; See migrations.md for details ([7d7e9e6](7d7e9e65b3))
* **nubus:** Always use S3 gateway for assets ([1e62a0d](1e62a0dfe1))
* **nubus:** Change logo URLs for apps referencing the openDesk logo provided by Nubus ([5d398f5](5d398f5d64))
* **nubus:** Cleanup of unnecessary LDAP groups; customization option to show the OX App Suite context selection in the IAM's admin UI ([4c42ed7](4c42ed76e8))
* **nubus:** Delete now legacy Ingress `ums-minio-rewrites` ([1c50aa5](1c50aa5ce2))
* **nubus:** Fix mixed up links for legal and privacy statement ([dbcc785](dbcc785134))
* **nubus:** Indent `nubusPortalConsumer.persistence.groupMembershipCache` causing `persistence.storages.nubusPortalConsumer.*` to be ignored; See migrations.md for details ([baa5b14](baa5b14551))
* **nubus:** Register OX provisioning consumer only when OX is enabled; See migrations.md for details ([adb3fa1](adb3fa18eb))
* **nubus:** Remove unnecessary inactive portal tiles and folders ([1724fa1](1724fa14a3))
* **nubus:** Update openDesk customizing: Preset openDesk specific attributes on `Administrator` account; Remove unused portal categories ([6edfe72](6edfe7239f))
* **opendesk-services:** Add notes to certificate resource ([d18abb0](d18abb0d0a))
* **openproject:** Update `opendesk-openproject-bootstrap` to support external secrets ([41e0aae](41e0aaeffe))
* **openproject:** Update to 15.3.0 including update for seeding relevant environment variables ([a6de1fe](a6de1fe694))
* **openproject:** Update to 15.3.1 ([f34a4a3](f34a4a3601))
* **openproject:** Update to 15.3.2 ([6723a34](6723a34c22))
* **openproject:** Update to 15.4.0 ([2a0f2a3](2a0f2a3333))
* **openproject:** Update to 15.4.1 ([747cae5](747cae545a))
* **openxchange:** Template HTML title from `.Values.theme.texts.productName` ([2e992fc](2e992fc236))
* **openxchange:** Update to latest 8.35 patch level ([44c2081](44c2081bd8))
* **ox-connector:** Update to v0.14.7 ([dd3b35b](dd3b35b626))
* **postfix:** Add internal authentication ([2389d59](2389d59735))
* **postfix:** Add recipient delimiter support ([f92b76b](f92b76b2b2))
* **requirements.md:** Set Ingress NGINX 1.11.5 as requirement ([2bf8e1d](2bf8e1de98))
* **synapse:** Use synapse-guest-module by Element (supplier) ([2730b03](2730b03e70))

### Features

* **helmfile:** Use PostgreSQL as default database for Nextcloud and XWiki;  follow `migrations.md` when upgrading an existing environment ([2f584bd](2f584bd8e8))
* **nextcloud:** Support external secrets for metrics token ([dbec2ec](dbec2ec36f))
* **notes:** Update to v2.4.0 ([3d35440](3d35440dc7))
* **nubus:** Support of external secrets in opendesk-keycloak-bootstrap ([3d2f751](3d2f75165a))
* **nubus:** Update to v1.7.0 ([d018385](d018385473))
* **openxchange:** Update to OX App Suite 8.35 ([037537b](037537b394))
* **xwiki:** Update to 16.10.5 ([bfd27f3](bfd27f3c39))
v1.2.0
2025-03-25 17:57:00 +00:00
Thorsten Roßner
1c50aa5ce2 fix(nubus): Delete now legacy Ingress ums-minio-rewrites 2025-03-25 18:24:21 +01:00
Thorsten Roßner
2bf8e1de98 fix(requirements.md): Set Ingress NGINX 1.11.5 as requirement 2025-03-25 11:20:26 +01:00
Thorsten Roßner
5d398f5d64 fix(nubus): Change logo URLs for apps referencing the openDesk logo provided by Nubus 2025-03-25 08:33:58 +01:00
Dominik Kaminski
897bd4c466 docs: Update security-context.md 2025-03-25 07:41:39 +01:00
Dominik Kaminski
d070b09636 ci(gitlab): Enforce opendesk-lint 2025-03-25 07:22:58 +01:00
Dominik Kaminski
466b70a9bb fix(nubus): Add imagePullSecrets to nginx-s3-gateway 2025-03-25 07:22:58 +01:00
Thorsten Roßner
adb3fa18eb fix(nubus): Register OX provisioning consumer only when OX is enabled; See migrations.md for details 2025-03-25 07:22:48 +01:00
Thorsten Roßner
1e62a0dfe1 fix(nubus): Always use S3 gateway for assets 2025-03-25 07:21:45 +01:00
Thorsten Roßner
696f2daa9c fix(dovecot): Update EE Helm chart to resolve issue with mandatory set PriorityClass 2025-03-25 07:21:32 +01:00
Thorsten Roßner
2c8d7f0380 docs(external-services.md): Update XWiki and Nextcloud to use PostgreSQL 2025-03-24 14:14:08 +01:00
Thorsten Roßner
c9a8a60ff3 chore(ci): Fix yaml linting issues 2025-03-24 11:25:59 +01:00
Thorsten Roßner
7d7e9e65b3 fix(nubus): Add migrations for Nubus 1.7.0; See migrations.md for details 2025-03-24 08:43:03 +01:00
Thorsten Roßner
baa5b14551 fix(nubus): Indent nubusPortalConsumer.persistence.groupMembershipCache causing persistence.storages.nubusPortalConsumer.* to be ignored; See migrations.md for details 2025-03-24 07:10:06 +00:00
Thorsten Roßner
9e083de84d chore(helmfile): Manually bump version in global.generated.yaml.gotmpl to test migration 2025-03-24 07:10:06 +00:00
Norbert Tretkowski
d018385473 feat(nubus): Update to v1.7.0 2025-03-24 07:10:06 +00:00
Thorsten Roßner
2f584bd8e8 feat(helmfile): Use PostgreSQL as default database for Nextcloud and XWiki; follow migrations.md when upgrading an existing environment 2025-03-21 14:59:54 +01:00
Dominik Kaminski
2dddff1d51 ci(gitlab): Add db-cleanup step 2025-03-21 13:15:13 +01:00
openDesk Bot
747cae545a fix(openproject): Update to 15.4.1 2025-03-21 10:04:43 +01:00
René Fischer
896b3c102c fix(collabora): Set proper theming for Collabora Online (openDesk EE) 2025-03-20 10:15:56 +00:00
Markus Kahl
2a0f2a3333 fix(openproject): Update to 15.4.0 2025-03-20 09:18:17 +00:00
Thorsten Roßner
01106757da fix(nextcloud): Update images to allow logging in environments where inotify cannot be used 2025-03-20 06:09:49 +00:00
rweber
3d35440dc7 feat(notes): Update to v2.4.0 2025-03-19 16:40:56 +00:00
Thorsten Roßner
770e0a92a5 docs(README_EE.md): Add reference to images/charts definition for a more specific view on potentially closed source containing artifacts 2025-03-19 16:04:13 +00:00
openDesk Bot
44c2081bd8 fix(openxchange): Update to latest 8.35 patch level 2025-03-19 16:48:50 +01:00
openDesk Bot
bfd27f3c39 feat(xwiki): Update to 16.10.5 2025-03-18 13:40:22 +01:00
Thorsten Roßner
8a2d218a60 docs(readme.md): Update overview table 2025-03-17 07:38:25 +00:00
openDesk Bot
6ee7f1ab98 chore(renovate): Update nordeck/jitsi-keycloak-adapter Docker tag to v20250314 2025-03-15 04:37:14 +00:00
Thorsten Roßner
0b8ff865d9 chore(helmfile): Fix YAML linter warnings 2025-03-14 14:44:17 +00:00
Thorsten Roßner
6edfe7239f fix(nubus): Update openDesk customizing: Preset openDesk specific attributes on Administrator account; Remove unused portal categories 2025-03-14 14:44:17 +00:00
Ben Schlagbauer
0efc0af761 fix(docs): Add functional.md and reference it in getting-started.md 2025-03-14 14:03:10 +00:00
Jaime Conde
4d59d12a97 fix(intercom): Allow transient session cookies and rolling session duration configuration 2025-03-14 10:39:54 +00:00
Norbert Tretkowski
dd3b35b626 fix(ox-connector): Update to v0.14.7 2025-03-14 10:35:50 +00:00