Compare commits

...

1 Commits

Author SHA1 Message Date
Sven-Erik Schmidt
d778e28913 feat(opendesk-services): Add opendesk-otterize 2025-11-13 17:14:31 +01:00
169 changed files with 4995 additions and 1 deletions

View File

@@ -0,0 +1,21 @@
# SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
# SPDX-License-Identifier: Apache-2.0
---
annotations:
category: "Security"
licenses: "Apache-2.0"
apiVersion: "v2"
dependencies:
- name: "common"
version: "^2.x.x"
repository: "oci://registry.opencode.de/bmi/opendesk/components/external/charts/bitnami-charts"
description: "A Helm chart deploying resources for Otterize to secure services with NetworkPolicies."
home: "https://zendis.de"
keywords:
- "security"
name: "opendesk-otterize"
sources:
- "https://gitlab.souvap-univention.de/souvap/tooling/charts/opendesk-otterize"
type: "application"
version: "2.1.3"
...

View File

@@ -0,0 +1,121 @@
<!--
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
-->
# opendesk-otterize
A Helm chart deploying resources for Otterize to secure services with NetworkPolicies.
## Installing the Chart
To install the chart with the release name `my-release`, you have two options:
### Install via Repository
```console
helm repo add opendesk-otterize https://gitlab.opencode.de/api/v4/projects/2293/packages/helm/stable
helm install my-release --version 2.1.3 opendesk-otterize/opendesk-otterize
```
### Install via OCI Registry
```console
helm repo add opendesk-otterize oci://registry.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-otterize
helm install my-release --version 2.1.3 opendesk-otterize/opendesk-otterize
```
## Requirements
| Repository | Name | Version |
|------------|------|---------|
| oci://registry.opencode.de/bmi/opendesk/components/external/charts/bitnami-charts | common | ^2.x.x |
## Values
| Key | Type | Default | Description |
|-----|------|---------|-------------|
| additionalAnnotations | object | `{}` | Additional custom annotations to add to all deployed objects. |
| additionalLabels | object | `{}` | Additional custom labels to add to all deployed objects. |
| apps.clamavDistributed.enabled | bool | `true` | Enables ClamAV (in distributed mode) related resource creation. |
| apps.clamavDistributed.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.clamavDistributed.signatureHost | string | `"gitlab.opencode.de"` | Signature database host |
| apps.clamavSimple.enabled | bool | `true` | Enables ClamAV (in simple mode) related resource creation. |
| apps.clamavSimple.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.clamavSimple.signatureHost | string | `"gitlab.opencode.de"` | Signature database host |
| apps.collabora.enabled | bool | `true` | Enables Collabora related resource creation. |
| apps.collabora.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.cryptpad.enabled | bool | `true` | Enables Cryptpad related resource creation. |
| apps.cryptpad.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.dkimpy.enabled | bool | `true` | Enables dkimpy related resource creation. |
| apps.dkimpy.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.dovecot.enabled | bool | `true` | Enables Dovecot related resource creation. |
| apps.dovecot.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.element.enabled | bool | `true` | Enables Element related resource creation. |
| apps.element.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.intercom.enabled | bool | `true` | Enables Intercom Service related resource creation. |
| apps.intercom.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.jitsi.enabled | bool | `true` | Enables Jitsi related resource creation. |
| apps.jitsi.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.mariadb.enabled | bool | `true` | Enables MariaDB related resource creation. |
| apps.mariadb.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.memcached.enabled | bool | `true` | Enables Memcached related resource creation. |
| apps.memcached.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.minio.enabled | bool | `true` | Enables MinIO related resource creation. |
| apps.minio.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.nextcloud.enabled | bool | `true` | Enables Nextcloud related resource creation. |
| apps.nextcloud.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.notes.enabled | bool | `true` | Enables LaSuite Notes related resource creation. |
| apps.notes.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.nubus.enabled | bool | `true` | Enables Univention Management Stack related resource creation. |
| apps.nubus.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.openproject.enabled | bool | `true` | Enables OpenProject related resource creation. |
| apps.openproject.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.oxAppSuite.enabled | bool | `true` | Enables Open-Xchange Appsuite related resource creation. |
| apps.oxAppSuite.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.oxConnector.enabled | bool | `true` | Enables OX-Connector related resource creation. |
| apps.oxConnector.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.postfix.enabled | bool | `true` | Enables Postfix related resource creation. |
| apps.postfix.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.postgresql.enabled | bool | `true` | Enables PostgreSQL related resource creation. |
| apps.postgresql.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.redis.enabled | bool | `true` | Enables Redis related resource creation. |
| apps.redis.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| apps.xwiki.enabled | bool | `true` | Enables XWiki related resource creation. |
| apps.xwiki.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
| clientIntents.apiVersion | string | `"k8s.otterize.com/v1alpha3"` | Choose the API version to use. |
| clientIntents.enabled | bool | `true` | Enable creation of ClientIntents custom resource. |
| extraApps.clusterPostfix.enabled | bool | `false` | Enables cluster-wide postfix related resource creation. |
| extraApps.clusterPostfix.namespace | string | `"swp-cross-instance-mail"` | If omitted, resources are deployed in the same namespace as this helm chart. |
| global.domain | string | `"example.internal"` | Deployment base domain used for egress restrictions to opendesk services via Ingress. |
| global.hosts | object | `{"collabora":"office","cryptpad":"pad","element":"chat","intercomService":"ics","jitsi":"meet","keycloak":"id","matrixNeoBoardWidget":"matrix-neoboard-widget","matrixNeoChoiceWidget":"matrix-neochoice-widget","matrixNeoDateFixBot":"matrix-neodatefix-bot","matrixNeoDateFixWidget":"matrix-neodatefix-widget","minioApi":"objectstore","minioConsole":"objectstore-ui","nextcloud":"files","notes":"notes","nubus":"portal","openproject":"projects","openxchange":"webmail","synapse":"matrix","synapseFederation":"matrix-federation","whiteboard":"whiteboard","xwiki":"wiki"}` | A map of avaible deployment subdomains. |
| ingressController.namespace | string | `"nginx-ingress"` | Namespace of ingress controller. |
| ingressController.podSelector | object | `{"matchLabels":{"app.kubernetes.io/name":"nginx-ingress"}}` | Pod selector for ingress controller to match for NetworkPolicies. |
| istioGateway.namespace | string | `"istio-system"` | Namespace of ingress controller. |
| istioGateway.podSelector | object | `{"matchLabels":{"app":"gateway","istio":"gateway"}}` | Pod selector for ingress controller to match for NetworkPolicies. |
| networkPolicies.enabled | bool | `true` | Enable creation of NetworkPolicies custom resource. |
| prometheus.namespace | string | `"monitoring"` | Namespace of ingress controller. |
| prometheus.podSelector | object | `{"matchLabels":{"app.kubernetes.io/name":"prometheus"}}` | Pod selector for ingress controller to match for NetworkPolicies. |
| protectedServices.apiVersion | string | `"k8s.otterize.com/v1alpha3"` | Choose the API version to use. |
| protectedServices.enabled | bool | `true` | Enable creation of ProtectedServices custom resource. |
## Uninstalling the Chart
To install the release with name `my-release`:
```bash
helm uninstall my-release
```
## Signing
Helm charts are signed with helm native signing method.
You can verify the chart against [the public GPG key](../../files/gpg-pubkeys/opendesk.gpg).
## License
This project uses the following license: Apache-2.0
## Copyright
Copyright (C) 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"

View File

@@ -0,0 +1,50 @@
<!--
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
-->
{{ template "chart.header" . }}
{{ template "chart.description" . }}
## Installing the Chart
To install the chart with the release name `my-release`, you have two options:
### Install via Repository
```console
helm repo add ${CI_PROJECT_NAME} ${CI_SERVER_PROTOCOL}://${CI_SERVER_HOST}/api/v4/projects/${CI_PROJECT_ID}/packages/helm/stable
helm install my-release --version ${RELEASE_VERSION} ${CI_PROJECT_NAME}/{{ template "chart.name" . }}
```
### Install via OCI Registry
```console
helm repo add ${CI_PROJECT_NAME} oci://${CI_REGISTRY_IMAGE}
helm install my-release --version ${RELEASE_VERSION} ${CI_PROJECT_NAME}/{{ template "chart.name" . }}
```
{{ template "chart.requirementsSection" . }}
{{ template "chart.valuesSection" . }}
## Uninstalling the Chart
To install the release with name `my-release`:
```bash
helm uninstall my-release
```
## Signing
Helm charts are signed with helm native signing method.
You can verify the chart against [the public GPG key](../../files/gpg-pubkeys/opendesk.gpg).
## License
This project uses the following license: Apache-2.0
## Copyright
Copyright (C) 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.clamavDistributed.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "clamav-freshclam"
namespace: {{ .Values.apps.clamavDistributed.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "clamav-freshclam"
targets:
- internet:
domains:
- {{ .Values.apps.clamavDistributed.signatureHost | quote }}
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.clamavDistributed.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "clamav-icap"
namespace: {{ .Values.apps.clamavDistributed.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "clamav-icap"
targets:
- kubernetes:
name: "clamav-clamd.{{ coalesce .Values.apps.clamavDistributed.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.clamavDistributed.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "clamav-milter"
namespace: {{ .Values.apps.clamavDistributed.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "clamav-milter"
targets:
- kubernetes:
name: {{ printf "%s.%s" "clamav-clamd" (coalesce .Values.apps.clamavDistributed.namespace .Release.Namespace) | quote }}
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.clamavSimple.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "clamav-simple"
namespace: {{ .Values.apps.clamavSimple.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "clamav-simple"
targets:
- internet:
domains:
- {{ .Values.apps.clamavSimple.signatureHost | quote }}
...
{{- end }}

View File

@@ -0,0 +1,33 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.collabora.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "collabora-controller"
namespace: {{ .Values.apps.collabora.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "collabora-controller"
targets:
- kubernetes:
name: "collabora-controller"
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,30 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.collabora.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "collabora"
namespace: {{ .Values.apps.collabora.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "collabora"
targets:
- kubernetes:
name: "collabora-controller"
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,31 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.cryptpad.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "cryptpad"
namespace: {{ .Values.apps.cryptpad.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "cryptpad"
targets:
- kubernetes:
name: "clamav-clamd.{{ coalesce .Values.apps.clamavDistributed.namespace .Release.Namespace }}"
- internet:
domains:
- "registry.npmjs.org"
- "accounts.cryptpad.fr"
...
{{- end }}

View File

@@ -0,0 +1,30 @@
{{/*
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.notes.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "impress-backend-init"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "impress-backend-init"
kind: "Job"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
...
{{- end }}

View File

@@ -0,0 +1,40 @@
{{/*
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.notes.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "impress-backend"
namespace: {{ .Values.apps.notes.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "impress-backend"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.redis.enabled }}
- kubernetes:
name: "redis.{{ coalesce .Values.apps.redis.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.postfix.enabled }}
- kubernetes:
name: "postfix.{{ coalesce .Values.apps.postfix.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.notes.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "impress-y-provider"
namespace: {{ .Values.apps.notes.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "impress-y-provider"
targets:
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,32 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "intercom-service"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "intercom-service"
targets:
{{- if .Values.apps.redis.enabled }}
- kubernetes:
name: "redis.{{ coalesce .Values.apps.redis.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.jitsi.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "jitsi-jibri"
namespace: {{ .Values.apps.jitsi.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "jitsi-jibri"
targets:
- kubernetes:
name: "jitsi-prosody.{{ coalesce .Values.apps.jitsi.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.jitsi.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "jitsi-jicofo"
namespace: {{ .Values.apps.jitsi.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "jitsi-jicofo"
targets:
- kubernetes:
name: "jitsi-prosody.{{ coalesce .Values.apps.jitsi.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,31 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.jitsi.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "jitsi-jvb"
namespace: {{ .Values.apps.jitsi.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "jitsi-jvb"
targets:
- kubernetes:
name: "jitsi-prosody.{{ coalesce .Values.apps.jitsi.namespace .Release.Namespace }}"
- internet:
ips:
# Cloud provider instance metadata
- "169.254.169.254"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2025 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.jitsi.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "jitsi-opendesk-jitsi"
namespace: {{ .Values.apps.jitsi.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "jitsi-opendesk-jitsi"
targets:
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2025 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.jitsi.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "jitsi-prosody"
namespace: {{ .Values.apps.jitsi.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "jitsi-prosody"
targets:
- kubernetes:
name: "opendesk-matrix-user-verification-service.{{ coalesce .Values.apps.element.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,30 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.jitsi.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "jitsi-web"
namespace: {{ .Values.apps.jitsi.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "jitsi-web"
targets:
- kubernetes:
name: "jitsi-prosody.{{ coalesce .Values.apps.jitsi.namespace .Release.Namespace }}"
- kubernetes:
name: "opendesk-jitsi-keycloak-adapter.{{ coalesce .Values.apps.jitsi.namespace .Release.Namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.mariadb.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "mariadb-bootstrap"
namespace: {{ .Values.apps.mariadb.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "mariadb-bootstrap"
targets:
- kubernetes:
name: "mariadb.{{ coalesce .Values.apps.mariadb.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,29 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.elementAdmin.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "matrix-adminbot-bootstrap"
namespace: {{ .Values.apps.elementAdmin.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "matrix-adminbot-bootstrap"
kind: "Job"
targets:
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,29 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.elementAdmin.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "matrix-auditbot-bootstrap"
namespace: {{ .Values.apps.elementAdmin.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "matrix-auditbot-bootstrap"
kind: "Job"
targets:
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.element.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "matrix-neodatefix-bot-bootstrap"
namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "matrix-neodatefix-bot-bootstrap"
targets:
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.element.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "matrix-neodatefix-bot"
namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "matrix-neodatefix-bot"
targets:
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.minio.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "minio-provisioning"
namespace: {{ .Values.apps.minio.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "minio-provisioning"
targets:
- kubernetes:
name: "minio.{{ coalesce .Values.apps.minio.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "nubus-nginx-s3-gateway"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "nubus-nginx-s3-gateway"
targets:
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.oxAppSuite.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "open-xchange-bootstrap"
namespace: {{ .Values.apps.oxAppSuite.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "open-xchange-bootstrap"
targets:
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,36 @@
{{/*
SPDX-FileCopyrightText: 2025 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.oxAppSuite.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "open-xchange-connector"
namespace: {{ .Values.apps.oxAppSuite.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "open-xchange-connector"
targets:
- kubernetes:
name: "ums-provisioning-api"
{{- if .Values.apps.oxAppSuite.enabled }}
- kubernetes:
name: "open-xchange-core-mw.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace}}"
{{- end }}
{{- if .Values.apps.xwiki.enabled }}
- kubernetes:
name: "xwiki.{{ coalesce .Values.apps.xwiki.namespace .Release.Namespace }}"
kind: "StatefulSet"
{{- end }}
...
{{- end }}

View File

@@ -0,0 +1,70 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.oxAppSuite.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "open-xchange-core-mw-groupware"
namespace: {{ .Values.apps.oxAppSuite.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "open-xchange-core-mw"
targets:
{{- if .Values.apps.clamavSimple.enabled }}
- kubernetes:
name: "clamav-simple.{{ coalesce .Values.apps.clamavSimple.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.clamavDistributed.enabled }}
- kubernetes:
name: "clamav-distributed.{{ coalesce .Values.apps.clamavDistributed.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.mariadb.enabled }}
- kubernetes:
name: "mariadb.{{ coalesce .Values.apps.mariadb.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "open-xchange-core-documentconverter.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
kind: "Deployment"
- kubernetes:
name: "open-xchange-core-imageconverter.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
kind: "Deployment"
- kubernetes:
name: "open-xchange-dovecot.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
- kubernetes:
name: "open-xchange-postfix.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
{{- if .Values.apps.element.enabled }}
- kubernetes:
name: "opendesk-synapse-web.{{ coalesce .Values.apps.element.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.nextcloud.enabled }}
- kubernetes:
name: "opendesk-nextcloud-aio.{{ coalesce .Values.apps.nextcloud.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.redis.enabled }}
- kubernetes:
name: "redis.{{ coalesce .Values.apps.redis.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.nubus.enabled }}
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
{{- end }}
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,39 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.oxAppSuite.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "open-xchange-core-ui-middleware"
namespace: {{ .Values.apps.oxAppSuite.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "open-xchange-core-ui-middleware"
targets:
{{- if .Values.apps.redis.enabled }}
- kubernetes:
name: "redis.{{ coalesce .Values.apps.redis.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "open-xchange-guard-ui.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
- kubernetes:
name: "open-xchange-core-ui.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
- kubernetes:
name: "open-xchange-guidedtours.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
- kubernetes:
name: "open-xchange-nextcloud-integration-ui.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
- kubernetes:
name: "open-xchange-public-sector-ui.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,41 @@
{{/*
SPDX-FileCopyrightText: 2025 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.oxAppSuite.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "open-xchange-dovecot"
namespace: {{ .Values.apps.oxAppSuite.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "open-xchange-dovecot"
targets:
{{- if .Values.apps.nubus.enabled }}
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
{{- end }}
{{- if .Values.apps.postfix.enabled }}
- kubernetes:
name: "postfix.{{ coalesce .Values.apps.postfix.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
{{- if .Values.apps.cassandra.enabled }}
- kubernetes:
name: "cassandra.{{ coalesce .Values.apps.cassandra.namespace .Release.Namespace }}"
{{- end }}
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2025 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.oxAppSuite.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "open-xchange-imageconverter"
namespace: {{ .Values.apps.oxAppSuite.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "open-xchange-imageconverter"
targets:
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,40 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "open-xchange-postfix"
namespace: {{ .Values.apps.oxAppSuite.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "open-xchange-postfix"
targets:
{{- if .Values.apps.clamavDistributed.enabled }}
- kubernetes:
name: "clamav-milter.{{ coalesce .Values.apps.clamavDistributed.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.clamavSimple.enabled}}
- kubernetes:
name: "clamav-simple.{{ coalesce .Values.apps.clamavSimple.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "open-xchange-dovecot.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
{{- if .Values.apps.dkimpy.enabled }}
- kubernetes:
name: "dkimpy-milter.{{ coalesce .Values.apps.dkimpy.namespace .Release.Namespace }}"
{{- end }}
- internet:
domains:
- "{{ .Values.smtp.host }}"
...

View File

@@ -0,0 +1,29 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.jitsi.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-jitsi-keycloak-adapter"
namespace: {{ .Values.apps.jitsi.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-jitsi-keycloak-adapter"
kind: "Deployment"
targets:
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-keycloak-bootstrap"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-keycloak-bootstrap"
targets:
- kubernetes:
name: "ums-keycloak.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.element.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-matrix-user-verification-service-bootstrap"
namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-matrix-user-verification-service-bootstrap"
targets:
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,31 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.element.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-matrix-user-verification-service"
namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-matrix-user-verification-service"
targets:
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
- internet:
domains:
- "registry.npmjs.org"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.migrations.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-migrations-post"
namespace: {{ .Values.apps.migrations.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-migrations-post"
targets:
- internet:
domains:
- {{ .Values.cluster.api.domain }}
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.migrations.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-migrations-pre"
namespace: {{ .Values.apps.migrations.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-migrations-pre"
targets:
- internet:
domains:
- {{ .Values.cluster.api.domain }}
...
{{- end }}

View File

@@ -0,0 +1,52 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nextcloud.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-nextcloud-aio-cron"
namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-nextcloud-aio-cron"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.redis.enabled }}
- kubernetes:
name: "redis"
{{- end }}
{{- if .Values.apps.nubus.enabled }}
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
{{- end }}
{{- if .Values.apps.clamavSimple.enabled }}
- kubernetes:
name: "clamav-simple.{{ coalesce .Values.apps.clamavSimple.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.postfix.enabled }}
- kubernetes:
name: "postfix.{{ coalesce .Values.apps.postfix.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
- internet:
domains:
- "cloud.nextcloud.com"
...
{{- end }}

View File

@@ -0,0 +1,53 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nextcloud.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-nextcloud-aio"
namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-nextcloud-aio"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.redis.enabled }}
- kubernetes:
name: "redis"
{{- end }}
{{- if .Values.apps.nubus.enabled }}
- kubernetes:
name: "ums-ldap-server-primary"
kind: "StatefulSet"
- kubernetes:
name: "ums-portal-server"
{{- end }}
{{- if .Values.apps.clamavSimple.enabled }}
- kubernetes:
name: "clamav-simple"
{{- end }}
{{- if .Values.apps.postfix.enabled }}
- kubernetes:
name: "postfix"
{{- end }}
- kubernetes:
name: "opendesk-nextcloud-notifypush"
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,30 @@
{{/*
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nextcloud.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-nextcloud-exporter"
namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-nextcloud-exporter"
targets:
- kubernetes:
name: "opendesk-nextcloud-aio.{{ coalesce .Values.apps.nextcloud.namespace .Release.Namespace }}"
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,33 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nextcloud.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-nextcloud-management"
namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-nextcloud-management"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.redis.enabled }}
- kubernetes:
name: "redis.{{ coalesce .Values.apps.redis.namespace .Release.Namespace }}"
{{- end }}
...
{{- end }}

View File

@@ -0,0 +1,35 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nextcloud.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-nextcloud-notifypush"
namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-nextcloud-notifypush"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.redis.enabled }}
- kubernetes:
name: "redis.{{ coalesce .Values.apps.redis.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "opendesk-nextcloud-aio.{{ coalesce .Values.apps.nextcloud.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.openproject.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-openproject-bootstrap"
namespace: {{ .Values.apps.openproject.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-openproject-bootstrap"
targets:
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,35 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.elementAdmin.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-synapse-admin-cron"
namespace: {{ .Values.apps.elementAdmin.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-synapse-admin-cron"
targets:
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
- kubernetes:
name: "ums-ldap-server-secondary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
...
{{- end }}

View File

@@ -0,0 +1,29 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.elementAdmin.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-synapse-admin"
namespace: {{ .Values.apps.elementAdmin.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-synapse-admin"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
...
{{- end }}

View File

@@ -0,0 +1,29 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.elementAdmin.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-synapse-adminbot-pipe"
namespace: {{ .Values.apps.elementAdmin.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-synapse-adminbot-pipe"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "opendesk-synapse-web.{{ coalesce .Values.apps.element.namespace .Release.Namespace }}"
{{- end }}
...
{{- end }}

View File

@@ -0,0 +1,29 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.elementAdmin.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-synapse-auditbot-pipe"
namespace: {{ .Values.apps.elementAdmin.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-synapse-auditbot-pipe"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "opendesk-synapse-web.{{ coalesce .Values.apps.element.namespace .Release.Namespace }}"
{{- end }}
...
{{- end }}

View File

@@ -0,0 +1,37 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.elementGroupsync.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-synapse-groupsync"
namespace: {{ .Values.apps.elementGroupsync.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-synapse-groupsync"
targets:
{{- if .Values.apps.element.enabled }}
- kubernetes:
name: "opendesk-synapse-web.{{ coalesce .Values.apps.element.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.nubus.enabled }}
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
- kubernetes:
name: "ums-ldap-server-secondary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
{{- end}}
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.element.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-synapse-web"
namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-synapse-web"
targets:
- kubernetes:
name: "opendesk-synapse.{{ coalesce .Values.apps.element.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,40 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.element.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "opendesk-synapse"
namespace: {{ .Values.apps.element.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "opendesk-synapse"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.elementAdmin.enabled }}
- kubernetes:
name: "opendesk-synapse-auditbot-pipe.{{ coalesce .Values.apps.elementAdmin.namespace .Release.Namespace }}"
- kubernetes:
name: "opendesk-synapse-adminbot-pipe.{{ coalesce .Values.apps.elementAdmin.namespace .Release.Namespace }}"
- kubernetes:
name: "opendesk-synapse-groupsync.{{ coalesce .Values.apps.elementAdmin.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,36 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.openproject.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "openproject-seeder"
namespace: {{ .Values.apps.openproject.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "openproject-seeder"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.memcached.enabled }}
- kubernetes:
name: "memcached.{{ coalesce .Values.apps.memcached.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,48 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.openproject.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "openproject"
namespace: {{ .Values.apps.openproject.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "openproject"
targets:
{{- if .Values.apps.memcached.enabled }}
- kubernetes:
name: "memcached.{{ coalesce .Values.apps.memcached.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.postfix.enabled }}
- kubernetes:
name: "postfix.{{ coalesce .Values.apps.postfix.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.nubus.enabled }}
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
{{- end }}
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
- internet:
domains:
- "{{ .Values.cluster.networking.ingressGatewayIP }}"
...
{{- end }}

View File

@@ -0,0 +1,44 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.postfix.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "postfix"
namespace: {{ .Values.apps.postfix.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "postfix"
targets:
{{- if .Values.apps.clamavDistributed.enabled }}
- kubernetes:
name: "clamav-milter.{{ coalesce .Values.apps.clamavDistributed.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.clamavSimple.enabled }}
- kubernetes:
name: "clamav-simple.{{ coalesce .Values.apps.clamavSimple.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.dovecot.enabled }}
- kubernetes:
name: "open-xchange-dovecot.{{ coalesce .Values.apps.oxAppSuite.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.dkimpy.enabled }}
- kubernetes:
name: "dkimpy-milter.{{ coalesce .Values.apps.dkimpy.namespace .Release.Namespace }}"
{{- end }}
- internet:
domains:
- "{{ .Values.smtp.host }}"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.postgresql.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "postgresql-bootstrap"
namespace: {{ .Values.apps.postgresql.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "postgresql-bootstrap"
targets:
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,30 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-keycloak-bootstrap"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-keycloak-bootstrap"
targets:
- kubernetes:
name: "ums-keycloak.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,35 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-keycloak-extensions-handler"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-keycloak-extensions-handler"
targets:
{{- if .Values.apps.postfix.enabled }}
- kubernetes:
name: "postfix.{{ coalesce .Values.apps.postfix.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.postgresql.enabled}}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "ums-keycloak.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,31 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-keycloak-extensions-proxy"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-keycloak-extensions-proxy"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "ums-keycloak.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,35 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-keycloak"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-keycloak"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
kind: "StatefulSet"
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-ldap-notifier"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-ldap-notifier"
targets:
- kubernetes:
name: "ums-provisioning-udm-listener.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,30 @@
{{/*
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-ldap-server-primary"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-ldap-server-primary"
targets:
- kubernetes:
name: "ums-keycloak.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- internet:
domains:
- "{{ .Values.cluster.api.domain }}"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-ldap-server-secondary"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-ldap-server-secondary"
targets:
- kubernetes:
name: "ums-keycloak.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,35 @@
{{/*
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-portal-consumer"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-portal-consumer"
targets:
- kubernetes:
name: "ums-provisioning-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-udm-rest-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
...
{{- end }}

View File

@@ -0,0 +1,35 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-portal-server"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-portal-server"
targets:
- kubernetes:
name: "ums-udm-rest-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-umc-server.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
- internet:
domains:
- "{{ .Values.cluster.networking.ingressGatewayIP }}"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-provisioning-api"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-provisioning-api"
targets:
- kubernetes:
name: "ums-provisioning-nats.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-provisioning-dispatcher"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-provisioning-dispatcher"
targets:
- kubernetes:
name: "ums-provisioning-nats.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
...
{{- end }}

View File

@@ -0,0 +1,32 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-provisioning-prefill"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-provisioning-prefill"
targets:
- kubernetes:
name: "ums-provisioning-nats.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
- kubernetes:
name: "ums-udm-rest-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-provisioning-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,29 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-provisioning-register-consumers"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-provisioning-register-consumers"
targets:
- kubernetes:
name: "ums-provisioning-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-udm-rest-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,33 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-provisioning-udm-listener"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-provisioning-udm-listener"
targets:
- kubernetes:
name: "ums-ldap-notifier.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-provisioning-nats.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
...
{{- end }}

View File

@@ -0,0 +1,36 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-provisioning-udm-transformer"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-provisioning-udm-transformer"
targets:
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
- kubernetes:
name: "ums-ldap-server-secondary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
- kubernetes:
name: "ums-provisioning-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-provisioning-nats.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
...
{{- end }}

View File

@@ -0,0 +1,29 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-selfservice-listener"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-selfservice-listener"
targets:
- kubernetes:
name: "ums-umc-server.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-provisioning-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-stack-data-ums"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-stack-data-ums"
targets:
- kubernetes:
name: "ums-udm-rest-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
...
{{- end }}

View File

@@ -0,0 +1,33 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-udm-rest-api"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-udm-rest-api"
targets:
- kubernetes:
name: "ums-udm-rest-api.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
- kubernetes:
name: "ums-ldap-server-secondary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
kind: "StatefulSet"
...
{{- end }}

View File

@@ -0,0 +1,43 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "ums-umc-server"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
name: "ums-umc-server"
targets:
- kubernetes:
kind: "StatefulSet"
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
kind: "StatefulSet"
name: "ums-ldap-server-secondary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-keycloak.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
name: "ums-umc-server.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.postfix.enabled }}
- kubernetes:
name: "postfix.{{ coalesce .Values.apps.postfix.namespace .Release.Namespace }}"
{{- end }}
...
{{- end }}

View File

@@ -0,0 +1,51 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.xwiki.enabled .Values.clientIntents.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ClientIntents"
metadata:
name: "xwiki"
namespace: {{ .Values.apps.xwiki.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
workload:
kind: "StatefulSet"
name: "xwiki"
targets:
{{- if .Values.apps.postgresql.enabled }}
- kubernetes:
name: "postgresql.{{ coalesce .Values.apps.postgresql.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
kind: "StatefulSet"
name: "ums-ldap-server-primary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
- kubernetes:
kind: "StatefulSet"
name: "ums-ldap-server-secondary.{{ coalesce .Values.apps.nubus.namespace .Release.Namespace }}"
{{- if .Values.apps.collabora.enabled }}
- kubernetes:
name: "collabora.{{ coalesce .Values.apps.collabora.namespace .Release.Namespace }}"
{{- end }}
{{- if .Values.apps.postfix.enabled }}
- kubernetes:
name: "postfix.{{ coalesce .Values.apps.postfix.namespace .Release.Namespace }}"
{{- end }}
- kubernetes:
name: "{{ .Values.ingressController.name }}.{{ .Values.ingressController.namespace }}"
kind: "Deployment"
- internet:
domains:
- "extensions.xwiki.org"
- "store.xwiki.com"
...
{{- end }}

View File

@@ -0,0 +1,28 @@
{{/*
SPDX-FileCopyrightText: 2025 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
---
apiVersion: "networking.k8s.io/v1"
kind: "NetworkPolicy"
metadata:
name: "allow-all-dev-ingress"
namespace: {{ .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
podSelector: {}
ingress:
- from:
- podSelector:
matchLabels:
network-policy-dev: "true"
policyTypes:
- "Ingress"
...

View File

@@ -0,0 +1,27 @@
{{/*
SPDX-FileCopyrightText: 2025 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
---
apiVersion: "networking.k8s.io/v1"
kind: "NetworkPolicy"
metadata:
name: "allow-all-dev"
namespace: {{ .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
podSelector:
matchLabels:
network-policy-dev: "true"
egress:
- {}
policyTypes:
- "Egress"
...

View File

@@ -0,0 +1,35 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.collabora.enabled .Values.networkPolicies.enabled .Values.monitoring.prometheus.serviceMonitors.enabled }}
---
apiVersion: "networking.k8s.io/v1"
kind: "NetworkPolicy"
metadata:
name: "collabora-prometheus-access"
namespace: {{ .Values.apps.collabora.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
podSelector:
matchLabels:
app.kubernetes.io/name: "collabora-online"
ingress:
- from:
- podSelector:
matchLabels:
{{- .Values.monitoring.prometheus.podSelectorLabels | toYaml | nindent 12 }}
namespaceSelector:
matchLabels:
kubernetes.io/metadata.name: {{ .Values.monitoring.prometheus.namespace | quote }}
policyTypes:
- "Ingress"
...
{{- end }}

View File

@@ -0,0 +1,24 @@
{{/*
SPDX-FileCopyrightText: 2025 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
---
apiVersion: "networking.k8s.io/v1"
kind: "NetworkPolicy"
metadata:
name: "default-deny-all"
namespace: {{ .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
podSelector: {}
policyTypes:
- "Ingress"
- "Egress"
...

View File

@@ -0,0 +1,31 @@
{{/*
SPDX-FileCopyrightText: 2025 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
---
apiVersion: "networking.k8s.io/v1"
kind: "NetworkPolicy"
metadata:
name: "default-dns-access"
namespace: {{ .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
podSelector: {}
policyTypes:
- "Egress"
egress:
- to:
- namespaceSelector:
matchLabels:
kubernetes.io/metadata.name: "kube-system"
- podSelector:
matchLabels:
k8s-app: "kube-dns"
...

View File

@@ -0,0 +1,35 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.extraApps.clusterPostfix.enabled .Values.networkPolicies.enabled }}
---
apiVersion: "networking.k8s.io/v1"
kind: "NetworkPolicy"
metadata:
name: "{{ include "common.names.fullname" . }}-dovecot-external"
namespace: {{ .Values.apps.dovecot.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
podSelector:
matchLabels:
app.kubernetes.io/name: "dovecot"
ingress:
- from:
- podSelector:
matchLabels:
app.kubernetes.io/name: "postfix"
namespaceSelector:
matchLabels:
kubernetes.io/metadata.name: {{ .Values.extraApps.clusterPostfix.namespace | quote }}
policyTypes:
- "Ingress"
...
{{- end }}

View File

@@ -0,0 +1,35 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.minio.enabled .Values.networkPolicies.enabled .Values.monitoring.prometheus.serviceMonitors.enabled }}
---
apiVersion: "networking.k8s.io/v1"
kind: "NetworkPolicy"
metadata:
name: "minio-prometheus-access"
namespace: {{ .Values.apps.minio.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
podSelector:
matchLabels:
app.kubernetes.io/name: "minio"
ingress:
- from:
- podSelector:
matchLabels:
{{- .Values.monitoring.prometheus.podSelectorLabels | toYaml | nindent 12 }}
namespaceSelector:
matchLabels:
kubernetes.io/metadata.name: {{ .Values.monitoring.prometheus.namespace | quote }}
policyTypes:
- "Ingress"
...
{{- end }}

View File

@@ -0,0 +1,36 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nextcloud.enabled .Values.networkPolicies.enabled .Values.monitoring.prometheus.serviceMonitors.enabled }}
---
apiVersion: "networking.k8s.io/v1"
kind: "NetworkPolicy"
metadata:
name: "opendesk-nextcloud-exporter-prometheus-access"
namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
podSelector:
matchLabels:
app.kubernetes.io/instance: "opendesk-nextcloud"
app.kubernetes.io/name: "exporter"
ingress:
- from:
- podSelector:
matchLabels:
{{- .Values.monitoring.prometheus.podSelectorLabels | toYaml | nindent 12 }}
namespaceSelector:
matchLabels:
kubernetes.io/metadata.name: {{ .Values.monitoring.prometheus.namespace | quote }}
policyTypes:
- "Ingress"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.cassandra.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "cassandra"
namespace: {{ .Values.apps.cassandra.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "cassandra"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.clamavDistributed.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "clamav-clamd"
namespace: {{ .Values.apps.clamavDistributed.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "clamav-clamd"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.clamavDistributed.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "clamav-freshclam"
namespace: {{ .Values.apps.clamavDistributed.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "clamav-freshclam"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.clamavDistributed.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "clamav-icap"
namespace: {{ .Values.apps.clamavDistributed.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "clamav-icap"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.clamavDistributed.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "clamav-milter"
namespace: {{ .Values.apps.clamavDistributed.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "clamav-milter"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.clamavSimple.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "clamav-simple"
namespace: {{ .Values.apps.clamavSimple.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "clamav-simple"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.collabora.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "collabora-controller"
namespace: {{ .Values.apps.collabora.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "collabora-controller"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.collabora.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "collabora"
namespace: {{ .Values.apps.collabora.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "collabora"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.cryptpad.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "cryptpad"
namespace: {{ .Values.apps.cryptpad.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "cryptpad"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.dkimpy.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "dkimpy"
namespace: {{ .Values.apps.dkimpy.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "dkimpy-milter"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.notes.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "impress-backend"
namespace: {{ .Values.apps.notes.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "impress-backend"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.notes.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "impress-frontend"
namespace: {{ .Values.apps.notes.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "impress-frontend"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.notes.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "impress-y-provider"
namespace: {{ .Values.apps.notes.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "impress-y-provider"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.nubus.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "intercom-service"
namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "intercom-service"
...
{{- end }}

View File

@@ -0,0 +1,23 @@
{{/*
SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
SPDX-License-Identifier: Apache-2.0
*/}}
{{- if and .Values.apps.jitsi.enabled .Values.protectedServices.enabled }}
---
apiVersion: {{ .Values.protectedServices.apiVersion | quote }}
kind: "ProtectedService"
metadata:
name: "jitsi-jibri"
namespace: {{ .Values.apps.jitsi.namespace | default .Release.Namespace | quote }}
labels:
{{- include "common.labels.standard" . | nindent 4 }}
{{- if .Values.additionalLabels }}
{{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
{{- end }}
{{- if .Values.additionalAnnotations }}
annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
{{- end }}
spec:
name: "jitsi-jibri"
...
{{- end }}

Some files were not shown because too many files have changed in this diff Show More