mirror of
https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk.git
synced 2025-12-06 15:31:38 +01:00
Compare commits
27 Commits
feat/dovec
...
trossner/f
| Author | SHA1 | Date | |
|---|---|---|---|
|
f1c0abf585 | ||
|
|
9cd8c2e8db | ||
|
|
2ae3dc623b | ||
|
|
bba8dffeef | ||
|
|
7317145c14 | ||
|
|
588e7491c8 | ||
|
|
fc4f5ffe46 | ||
|
|
20de4189d3 | ||
|
|
cc96a1b59d | ||
|
|
d5fb638040 | ||
|
|
b24bc33e13 | ||
|
|
a6e0fe73ea | ||
|
|
a0024027cb | ||
|
|
9f59ea5202 | ||
|
|
2c0c5792e8 | ||
|
|
ba81f8b7dd | ||
|
|
d6b4298ada | ||
|
|
69d55e3464 | ||
|
|
fd901a01b6 | ||
|
|
fd7d5ad47a | ||
|
|
665ab8309e | ||
|
|
41728b5842 | ||
|
|
f15594275e | ||
|
|
1b515630ef | ||
|
|
52ae79a5de | ||
|
|
23c3c4c630 | ||
|
|
b1e21a9ab4 |
@@ -36,17 +36,18 @@ stages:
|
|||||||
- "env-cleanup"
|
- "env-cleanup"
|
||||||
- "env"
|
- "env"
|
||||||
- "pre-services-deploy"
|
- "pre-services-deploy"
|
||||||
- "migrations-pre"
|
- "010-migrations-pre"
|
||||||
- "basic-services-deploy"
|
- "030-services"
|
||||||
- "component-deploy-stage-1"
|
- "050-components"
|
||||||
- "component-deploy-stage-2"
|
- "060-components"
|
||||||
- "migrations-post"
|
- "090-migrations-post"
|
||||||
- "lint"
|
- "lint"
|
||||||
- "tests"
|
- "tests"
|
||||||
- "env-stop"
|
- "env-stop"
|
||||||
- ".post"
|
- ".post"
|
||||||
|
|
||||||
variables:
|
variables:
|
||||||
|
RELEASE_BRANCH: "main"
|
||||||
NAMESPACE:
|
NAMESPACE:
|
||||||
description: "The name of namespaces to deploy to."
|
description: "The name of namespaces to deploy to."
|
||||||
value: ""
|
value: ""
|
||||||
@@ -277,7 +278,7 @@ policies-deploy:
|
|||||||
ADDITIONAL_ARGS: "-l name=opendesk-otterize"
|
ADDITIONAL_ARGS: "-l name=opendesk-otterize"
|
||||||
|
|
||||||
migrations-pre:
|
migrations-pre:
|
||||||
stage: "migrations-pre"
|
stage: "010-migrations-pre"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -289,7 +290,7 @@ migrations-pre:
|
|||||||
COMPONENT: "migrations-pre"
|
COMPONENT: "migrations-pre"
|
||||||
|
|
||||||
migrations-post:
|
migrations-post:
|
||||||
stage: "migrations-post"
|
stage: "090-migrations-post"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -301,7 +302,7 @@ migrations-post:
|
|||||||
COMPONENT: "migrations-post"
|
COMPONENT: "migrations-post"
|
||||||
|
|
||||||
services-deploy:
|
services-deploy:
|
||||||
stage: "basic-services-deploy"
|
stage: "030-services"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -313,7 +314,7 @@ services-deploy:
|
|||||||
COMPONENT: "services"
|
COMPONENT: "services"
|
||||||
|
|
||||||
nubus-deploy:
|
nubus-deploy:
|
||||||
stage: "component-deploy-stage-1"
|
stage: "050-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -325,7 +326,7 @@ nubus-deploy:
|
|||||||
COMPONENT: "nubus"
|
COMPONENT: "nubus"
|
||||||
|
|
||||||
ox-deploy:
|
ox-deploy:
|
||||||
stage: "component-deploy-stage-1"
|
stage: "050-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
timeout: "30m"
|
timeout: "30m"
|
||||||
rules:
|
rules:
|
||||||
@@ -338,7 +339,7 @@ ox-deploy:
|
|||||||
COMPONENT: "open-xchange"
|
COMPONENT: "open-xchange"
|
||||||
|
|
||||||
xwiki-deploy:
|
xwiki-deploy:
|
||||||
stage: "component-deploy-stage-1"
|
stage: "050-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -350,7 +351,7 @@ xwiki-deploy:
|
|||||||
COMPONENT: "xwiki"
|
COMPONENT: "xwiki"
|
||||||
|
|
||||||
collabora-deploy:
|
collabora-deploy:
|
||||||
stage: "component-deploy-stage-1"
|
stage: "050-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -362,7 +363,7 @@ collabora-deploy:
|
|||||||
COMPONENT: "collabora"
|
COMPONENT: "collabora"
|
||||||
|
|
||||||
cryptpad-deploy:
|
cryptpad-deploy:
|
||||||
stage: "component-deploy-stage-1"
|
stage: "050-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -374,7 +375,7 @@ cryptpad-deploy:
|
|||||||
COMPONENT: "cryptpad"
|
COMPONENT: "cryptpad"
|
||||||
|
|
||||||
nextcloud-deploy:
|
nextcloud-deploy:
|
||||||
stage: "component-deploy-stage-1"
|
stage: "050-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -386,7 +387,7 @@ nextcloud-deploy:
|
|||||||
COMPONENT: "nextcloud"
|
COMPONENT: "nextcloud"
|
||||||
|
|
||||||
openproject-deploy:
|
openproject-deploy:
|
||||||
stage: "component-deploy-stage-1"
|
stage: "050-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -398,7 +399,7 @@ openproject-deploy:
|
|||||||
COMPONENT: "openproject"
|
COMPONENT: "openproject"
|
||||||
|
|
||||||
openproject-bootstrap-deploy:
|
openproject-bootstrap-deploy:
|
||||||
stage: "component-deploy-stage-2"
|
stage: "060-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -410,7 +411,7 @@ openproject-bootstrap-deploy:
|
|||||||
COMPONENT: "openproject-bootstrap"
|
COMPONENT: "openproject-bootstrap"
|
||||||
|
|
||||||
jitsi-deploy:
|
jitsi-deploy:
|
||||||
stage: "component-deploy-stage-1"
|
stage: "050-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -422,7 +423,7 @@ jitsi-deploy:
|
|||||||
COMPONENT: "jitsi"
|
COMPONENT: "jitsi"
|
||||||
|
|
||||||
element-deploy:
|
element-deploy:
|
||||||
stage: "component-deploy-stage-1"
|
stage: "050-components"
|
||||||
extends: ".deploy-common"
|
extends: ".deploy-common"
|
||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
@@ -489,7 +490,7 @@ avscan-prepare:
|
|||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
$JOB_AVSCAN_ENABLED != 'false' &&
|
$JOB_AVSCAN_ENABLED != 'false' &&
|
||||||
$CI_COMMIT_BRANCH == 'main' &&
|
$CI_COMMIT_BRANCH == $RELEASE_BRANCH &&
|
||||||
$CI_PIPELINE_SOURCE =~ "push|merge_request_event"
|
$CI_PIPELINE_SOURCE =~ "push|merge_request_event"
|
||||||
when: "always"
|
when: "always"
|
||||||
- when: "never"
|
- when: "never"
|
||||||
@@ -539,7 +540,7 @@ avscan-start:
|
|||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
$JOB_AVSCAN_ENABLED != 'false' &&
|
$JOB_AVSCAN_ENABLED != 'false' &&
|
||||||
$CI_COMMIT_BRANCH == 'main' &&
|
$CI_COMMIT_BRANCH == $RELEASE_BRANCH &&
|
||||||
$CI_PIPELINE_SOURCE =~ "push|merge_request_event"
|
$CI_PIPELINE_SOURCE =~ "push|merge_request_event"
|
||||||
when: "always"
|
when: "always"
|
||||||
- when: "never"
|
- when: "never"
|
||||||
@@ -585,7 +586,7 @@ generate-release-version:
|
|||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
$JOB_RELEASE_ENABLED != 'false' &&
|
$JOB_RELEASE_ENABLED != 'false' &&
|
||||||
$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH &&
|
$CI_COMMIT_BRANCH == $RELEASE_BRANCH &&
|
||||||
$CI_PIPELINE_SOURCE =~ "push|merge_request_event"
|
$CI_PIPELINE_SOURCE =~ "push|merge_request_event"
|
||||||
when: "on_success"
|
when: "on_success"
|
||||||
|
|
||||||
@@ -593,7 +594,7 @@ release:
|
|||||||
rules:
|
rules:
|
||||||
- if: >
|
- if: >
|
||||||
$JOB_AVSCAN_ENABLED != 'false' &&
|
$JOB_AVSCAN_ENABLED != 'false' &&
|
||||||
$CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH &&
|
$CI_COMMIT_BRANCH == $RELEASE_BRANCH &&
|
||||||
$CI_PIPELINE_SOURCE =~ "push|merge_request_event"
|
$CI_PIPELINE_SOURCE =~ "push|merge_request_event"
|
||||||
when: "on_success"
|
when: "on_success"
|
||||||
script:
|
script:
|
||||||
@@ -621,7 +622,7 @@ release:
|
|||||||
- |
|
- |
|
||||||
cat << 'EOF' > ${CI_PROJECT_DIR}/.releaserc
|
cat << 'EOF' > ${CI_PROJECT_DIR}/.releaserc
|
||||||
{
|
{
|
||||||
"branches": ["main"],
|
"branches": ["${RELEASE_BRANCH}"],
|
||||||
"plugins": [
|
"plugins": [
|
||||||
"@semantic-release/gitlab",
|
"@semantic-release/gitlab",
|
||||||
"@semantic-release/release-notes-generator",
|
"@semantic-release/release-notes-generator",
|
||||||
|
|||||||
@@ -13,7 +13,7 @@ generate-docs:
|
|||||||
extends: ".generate-common"
|
extends: ".generate-common"
|
||||||
image: "${OPENDESK_CI_CLI_IMAGE}"
|
image: "${OPENDESK_CI_CLI_IMAGE}"
|
||||||
rules:
|
rules:
|
||||||
- if: "$JOB_RELEASE_ENABLED != 'false' && $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH"
|
- if: "$JOB_RELEASE_ENABLED != 'false' && $CI_COMMIT_BRANCH == $RELEASE_BRANCH"
|
||||||
when: "on_success"
|
when: "on_success"
|
||||||
script:
|
script:
|
||||||
- "node /app/src/index.js generate-docs -d ${CI_PROJECT_DIR}"
|
- "node /app/src/index.js generate-docs -d ${CI_PROJECT_DIR}"
|
||||||
|
|||||||
@@ -31,13 +31,13 @@ openDesk currently features the following functional main components:
|
|||||||
| -------------------- | --------------------------- | ------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
|
| -------------------- | --------------------------- | ------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
|
||||||
| Chat & collaboration | Element ft. Nordeck widgets | [1.11.67](https://github.com/element-hq/element-desktop/releases/tag/v1.11.67) | [For the most recent release](https://element.io/user-guide) |
|
| Chat & collaboration | Element ft. Nordeck widgets | [1.11.67](https://github.com/element-hq/element-desktop/releases/tag/v1.11.67) | [For the most recent release](https://element.io/user-guide) |
|
||||||
| Diagram editor | CryptPad ft. diagrams.net | [5.6.0](https://github.com/cryptpad/cryptpad/releases/tag/5.6.0) | [For the most recent release](https://docs.cryptpad.org/en/) |
|
| Diagram editor | CryptPad ft. diagrams.net | [5.6.0](https://github.com/cryptpad/cryptpad/releases/tag/5.6.0) | [For the most recent release](https://docs.cryptpad.org/en/) |
|
||||||
| File management | Nextcloud | [29.0.9](https://nextcloud.com/de/changelog/#29-0-9) | [Nextcloud 29](https://docs.nextcloud.com/) |
|
| File management | Nextcloud | [29.0.8](https://nextcloud.com/de/changelog/#29-0-8) | [Nextcloud 29](https://docs.nextcloud.com/) |
|
||||||
| Groupware | OX App Suite | [8.30](https://documentation.open-xchange.com/appsuite/releases/8.30/) | Online documentation available from within the installed application; [Additional resources](https://documentation.open-xchange.com/) |
|
| Groupware | OX App Suite | [8.30](https://documentation.open-xchange.com/appsuite/releases/8.30/) | Online documentation available from within the installed application; [Additional resources](https://documentation.open-xchange.com/) |
|
||||||
| Knowledge management | XWiki | [16.4.4](https://www.xwiki.org/xwiki/bin/view/ReleaseNotes/Data/XWiki/16.4.4/) | [For the most recent release](https://www.xwiki.org/xwiki/bin/view/Documentation) |
|
| Knowledge management | XWiki | [16.4.4](https://www.xwiki.org/xwiki/bin/view/ReleaseNotes/Data/XWiki/16.4.4/) | [For the most recent release](https://www.xwiki.org/xwiki/bin/view/Documentation) |
|
||||||
| Portal & IAM | Nubus | [1.0](https://www.univention.de/produkte/nubus/) | [Univention's documentation website](https://docs.software-univention.de/n/en/nubus.html) |
|
| Portal & IAM | Nubus | [1.0](https://www.univention.de/produkte/nubus/) | [Univention's documentation website](https://docs.software-univention.de/n/en/nubus.html) |
|
||||||
| Project management | OpenProject | [15.0.2](https://www.openproject.org/docs/release-notes/15-0-2/) | [For the most recent release](https://www.openproject.org/docs/user-guide/) |
|
| Project management | OpenProject | [15.0.2](https://www.openproject.org/docs/release-notes/15-0-2/) | [For the most recent release](https://www.openproject.org/docs/user-guide/) |
|
||||||
| Videoconferencing | Jitsi | [2.0.9779](https://github.com/jitsi/jitsi-meet/releases/tag/stable%2Fjitsi-meet_9779) | [For the most recent release](https://jitsi.github.io/handbook/docs/category/user-guide/) |
|
| Videoconferencing | Jitsi | [2.0.9823](https://github.com/jitsi/jitsi-meet/releases/tag/stable%2Fjitsi-meet_9823) | [For the most recent release](https://jitsi.github.io/handbook/docs/category/user-guide/) |
|
||||||
| Weboffice | Collabora | [24.04.7.2](https://www.collaboraoffice.com/code-24-04-release-notes/) | Online documentation available from within the installed application; [Additional resources](https://sdk.collaboraonline.com/) |
|
| Weboffice | Collabora | [24.04.9.2](https://www.collaboraoffice.com/code-24-04-release-notes/) | Online documentation available from within the installed application; [Additional resources](https://sdk.collaboraonline.com/) |
|
||||||
|
|
||||||
While not all components are perfectly shaped for the execution inside containers, one of the project's objectives is to
|
While not all components are perfectly shaped for the execution inside containers, one of the project's objectives is to
|
||||||
align the applications with best practices regarding container design and operations.
|
align the applications with best practices regarding container design and operations.
|
||||||
|
|||||||
@@ -27,28 +27,28 @@ openDesk consists of a variety of open-source projects. Here is a list with the
|
|||||||
Components of type `Eval` are used for development and evaluation purposes only,
|
Components of type `Eval` are used for development and evaluation purposes only,
|
||||||
they need to be replaced in production deployments.
|
they need to be replaced in production deployments.
|
||||||
|
|
||||||
| Component | Description | Type |
|
| Component | Description | Type |
|
||||||
|-----------------------------|--------------------------------|------------|
|
| -------------------- | ------------------------------ | ---------- |
|
||||||
| Certificates | TLS certificates | Eval |
|
| Certificates | TLS certificates | Eval |
|
||||||
| ClamAV (Distributed) | Antivirus engine | Eval |
|
| ClamAV (Distributed) | Antivirus engine | Eval |
|
||||||
| ClamAV (Simple) | Antivirus engine | Eval |
|
| ClamAV (Simple) | Antivirus engine | Eval |
|
||||||
| Collabora | Weboffice | Functional |
|
| Collabora | Weboffice | Functional |
|
||||||
| CryptPad | Weboffice | Functional |
|
| CryptPad | Weboffice | Functional |
|
||||||
| dkimpy-milter | DKIM milter for Postfix | Eval |
|
| dkimpy-milter | DKIM milter for Postfix | Eval |
|
||||||
| Element | Secure communications platform | Functional |
|
| Element | Secure communications platform | Functional |
|
||||||
| Jitsi | Videoconferencing | Functional |
|
| Jitsi | Videoconferencing | Functional |
|
||||||
| MariaDB | Database | Eval |
|
| MariaDB | Database | Eval |
|
||||||
| Memcached | Cache Database | Eval |
|
| Memcached | Cache Database | Eval |
|
||||||
| MinIO | Object Storage | Eval |
|
| MinIO | Object Storage | Eval |
|
||||||
| Nextcloud | File share | Functional |
|
| Nextcloud | File share | Functional |
|
||||||
| Nubus (UMS) | Identity Management & Portal | Functional |
|
| Nubus (UMS) | Identity Management & Portal | Functional |
|
||||||
| OpenProject | Project management | Functional |
|
| OpenProject | Project management | Functional |
|
||||||
| OX Appsuite | Groupware | Functional |
|
| OX App Suite | Groupware | Functional |
|
||||||
| OX Dovecot | Mail backend (IMAP) | Functional |
|
| OX Dovecot | Mail backend (IMAP) | Functional |
|
||||||
| Postfix | MTA | Eval |
|
| Postfix | MTA | Eval |
|
||||||
| PostgreSQL | Database | Eval |
|
| PostgreSQL | Database | Eval |
|
||||||
| Redis | Cache Database | Eval |
|
| Redis | Cache Database | Eval |
|
||||||
| XWiki | Knowledge Management | Functional |
|
| XWiki | Knowledge Management | Functional |
|
||||||
|
|
||||||
# Component integration
|
# Component integration
|
||||||
|
|
||||||
|
|||||||
@@ -201,3 +201,6 @@ kubectl patch -n ${NAMESPACE} configmap ${CONFIGMAP_NAME} --type merge -p '{"dat
|
|||||||
```
|
```
|
||||||
|
|
||||||
2. Restart the Keycloak Pod(s).
|
2. Restart the Keycloak Pod(s).
|
||||||
|
|
||||||
|
> **Note**<br>
|
||||||
|
> As the `ums-keycloak-extensions-handler` is performing frequent (one per second) requests to Keycloak for retrieval of the Keycloak event history, you might want to stop/remove the deployment while debugging/analysing Keycloak to not get your debug output spammed by these requests.
|
||||||
|
|||||||
@@ -13,4 +13,5 @@ The following enhanced configuration use cases are described in separate documen
|
|||||||
- [Federation with external identity provider](./enhanced-configuration/idp-federation.md)
|
- [Federation with external identity provider](./enhanced-configuration/idp-federation.md)
|
||||||
- [Matrix federation](./enhanced-configuration/matrix-federation.md)
|
- [Matrix federation](./enhanced-configuration/matrix-federation.md)
|
||||||
- [Groupware migration from M365 to openDesk](./enhanced-configuration/groupware-migration.md)
|
- [Groupware migration from M365 to openDesk](./enhanced-configuration/groupware-migration.md)
|
||||||
- [Self-signed certificate and custom Certificate Authority (CA)](enhanced-configuration/self-signed-certificates.md)
|
- [Self-signed certificate and custom Certificate Authority (CA)](./enhanced-configuration/self-signed-certificates.md)
|
||||||
|
- [GitOps deployments using Argo CD](./enhanced-configuration/gitops.md)
|
||||||
|
|||||||
55
docs/enhanced-configuration/gitops.md
Normal file
55
docs/enhanced-configuration/gitops.md
Normal file
@@ -0,0 +1,55 @@
|
|||||||
|
<!--
|
||||||
|
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
|
||||||
|
SPDX-License-Identifier: Apache-2.0
|
||||||
|
-->
|
||||||
|
|
||||||
|
<h1>GitOps Deployment</h1>
|
||||||
|
|
||||||
|
<!-- TOC -->
|
||||||
|
* [Considerations](#considerations)
|
||||||
|
* [ArgoCD](#argocd)
|
||||||
|
* [Option 1: Use YAML manifests](#option-1-use-yaml-manifests)
|
||||||
|
* [Option 2: Helmfile plugin](#option-2-helmfile-plugin)
|
||||||
|
<!-- TOC -->
|
||||||
|
|
||||||
|
The recommended deployment method for openDesk is via Helmfile. This can be done "by hand", via CI/CD (Gitlab) or using
|
||||||
|
the [GitOps](https://about.gitlab.com/topics/gitops/) approach with tools like [Argo CD](https://argoproj.github.io/cd/).
|
||||||
|
|
||||||
|
This documentation will use Argo CD to explain how to deploy openDesk GitOps-style.
|
||||||
|
|
||||||
|
# Considerations
|
||||||
|
|
||||||
|
- openDesk consists of multiple applications which have to be deployed in order.
|
||||||
|
- During upgrades, migrations have to run before and after applications.
|
||||||
|
|
||||||
|
# ArgoCD
|
||||||
|
|
||||||
|
We are continuously improving our Argo CD support, please share you experience with Argo CD deployments e.g. by [creating
|
||||||
|
at ticket](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/-/issues).
|
||||||
|
|
||||||
|
There are two options to deploy openDesk via Argo CD described in the following sections.
|
||||||
|
|
||||||
|
## Option 1: Use YAML manifests
|
||||||
|
|
||||||
|
This option requires a preprocessing step before using Argo CD. This step requires you to compile the Helmfile based
|
||||||
|
deployment into Kubernetes YAML manifest, to do so you need to execute the helmfile binary:
|
||||||
|
|
||||||
|
```shell
|
||||||
|
helmfile template > opendesk.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
References:
|
||||||
|
- [Helmfile CLI documentation](https://helmfile.readthedocs.io/en/latest/#cli-reference)
|
||||||
|
- [Generate K8s YAML Manifests for openDesk](https://gitlab.opencode.de/bmi/opendesk/deployment/options/generate-k8s-yaml-manifests)
|
||||||
|
|
||||||
|
Afterwards, you can use the resulting manifests within an standard Argo CD workflow.
|
||||||
|
|
||||||
|
## Option 2: Helmfile plugin
|
||||||
|
|
||||||
|
It is possible to deploy openDesk via Argo CD with community developed
|
||||||
|
[Helmfile plugin](https://github.com/travisghansen/argo-cd-helmfile).
|
||||||
|
|
||||||
|
You can find an example for this approach in the
|
||||||
|
[Argo CD Deployments](https://gitlab.opencode.de/bmi/opendesk/deployment/options/argocd-deploy) repository.
|
||||||
|
It contains an example Helm chart (`opendesk-parent`) to create Argo CD Applications via a Helm chart (`opendesk`)
|
||||||
|
according to `app of apps pattern` and is using sync waves to follow dependencies.
|
||||||
@@ -6,7 +6,6 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
<h1>Migration from M365 with audriga migration service and master authentication</h1>
|
<h1>Migration from M365 with audriga migration service and master authentication</h1>
|
||||||
|
|
||||||
<!-- TOC -->
|
<!-- TOC -->
|
||||||
* [Context](#context)
|
|
||||||
* [Prerequisites](#prerequisites)
|
* [Prerequisites](#prerequisites)
|
||||||
* [Prepare M365 tenant for access](#prepare-m365-tenant-for-access)
|
* [Prepare M365 tenant for access](#prepare-m365-tenant-for-access)
|
||||||
* [Provisioning user accounts in openDesk](#provisioning-user-accounts-in-opendesk)
|
* [Provisioning user accounts in openDesk](#provisioning-user-accounts-in-opendesk)
|
||||||
@@ -75,18 +74,18 @@ With openDesk 1.0 Enterprise, you can set openDesk's email components (OX AppSui
|
|||||||
|
|
||||||
```
|
```
|
||||||
secrets:
|
secrets:
|
||||||
oxAppsuite:
|
oxAppSuite:
|
||||||
adminPassword: "your_temporary_master_password"
|
adminPassword: "your_temporary_master_password"
|
||||||
functional:
|
functional:
|
||||||
migration:
|
migration:
|
||||||
oxAppsuite:
|
oxAppSuite:
|
||||||
enabled: true
|
enabled: true
|
||||||
```
|
```
|
||||||
|
|
||||||
1. You must specify the master password referenced in the document's following sections.
|
1. You must specify the master password referenced in the document's following sections.
|
||||||
2. You need to enable the actual master authentication mode.
|
2. You need to enable the actual master authentication mode.
|
||||||
|
|
||||||
Updating your deployment with these settings will allow you to continue with the migration scenario. Once the migration is completed, you can remove `secrets.oxAppsuite.adminPassword` and need to turn off the migration mode by setting `functional.migration.oxAppsuite.enabled` to `false` or removing that setting, as `false` is the default before you update your deployment once again.
|
Updating your deployment with these settings will allow you to continue with the migration scenario. Once the migration is completed, you can remove `secrets.oxAppSuite.adminPassword` and need to turn off the migration mode by setting `functional.migration.oxAppSuite.enabled` to `false` or removing that setting, as `false` is the default before you update your deployment once again.
|
||||||
|
|
||||||
> **Note**<br>
|
> **Note**<br>
|
||||||
> For the changes to take effect, it is sufficient to deploy the `open-xchange` component.
|
> For the changes to take effect, it is sufficient to deploy the `open-xchange` component.
|
||||||
|
|||||||
@@ -7,6 +7,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
|
|
||||||
<!-- TOC -->
|
<!-- TOC -->
|
||||||
* [Context](#context)
|
* [Context](#context)
|
||||||
|
* [References](#references)
|
||||||
* [Prerequisites](#prerequisites)
|
* [Prerequisites](#prerequisites)
|
||||||
* [User accounts](#user-accounts)
|
* [User accounts](#user-accounts)
|
||||||
* [External IdP with OIDC](#external-idp-with-oidc)
|
* [External IdP with OIDC](#external-idp-with-oidc)
|
||||||
@@ -24,6 +25,15 @@ Most organizations already have an Identity and Access Management (IAM) system w
|
|||||||
|
|
||||||
This document shows how to configure your organization's IdP and the openDesk IdP to support account federation with openDesk single sign-on based on your organization's login.
|
This document shows how to configure your organization's IdP and the openDesk IdP to support account federation with openDesk single sign-on based on your organization's login.
|
||||||
|
|
||||||
|
# References
|
||||||
|
|
||||||
|
We would like to list successful IdP federation scenarios, so we are also happy about input from the community:
|
||||||
|
|
||||||
|
| External IdP | last openDesk version tested |
|
||||||
|
| ------------------------------------------------------------------- | ---------------------------- |
|
||||||
|
| [EU Login](https://webgate.ec.europa.eu/cas/userdata/myAccount.cgi) | v0.9.0 |
|
||||||
|
| [ProConnect](https://www.proconnect.gouv.fr/) | v0.9.0 |
|
||||||
|
|
||||||
# Prerequisites
|
# Prerequisites
|
||||||
|
|
||||||
## User accounts
|
## User accounts
|
||||||
|
|||||||
@@ -18,59 +18,59 @@ This document will cover the additional configuration for external services like
|
|||||||
When deploying this suite to production, you need to configure the applications to use your production-grade database
|
When deploying this suite to production, you need to configure the applications to use your production-grade database
|
||||||
service.
|
service.
|
||||||
|
|
||||||
| Component | Name | Type | Parameter | Key | Default |
|
| Component | Name | Type | Parameter | Key | Default |
|
||||||
|-------------|--------------------|------------|-----------|------------------------------------------|----------------------------|
|
| ------------ | ------------------ | ---------- | --------- | ---------------------------------------- | -------------------------- |
|
||||||
| Element | Synapse | PostgreSQL | | | |
|
| Element | Synapse | PostgreSQL | | | |
|
||||||
| | | | Name | `databases.synapse.name` | `matrix` |
|
| | | | Name | `databases.synapse.name` | `matrix` |
|
||||||
| | | | Host | `databases.synapse.host` | `postgresql` |
|
| | | | Host | `databases.synapse.host` | `postgresql` |
|
||||||
| | | | Port | `databases.synapse.port` | `5432` |
|
| | | | Port | `databases.synapse.port` | `5432` |
|
||||||
| | | | Username | `databases.synapse.username` | `matrix_user` |
|
| | | | Username | `databases.synapse.username` | `matrix_user` |
|
||||||
| | | | Password | `databases.synapse.password` | |
|
| | | | Password | `databases.synapse.password` | |
|
||||||
| Keycloak | Keycloak | PostgreSQL | | | |
|
| Keycloak | Keycloak | PostgreSQL | | | |
|
||||||
| | | | Name | `databases.keycloak.name` | `keycloak` |
|
| | | | Name | `databases.keycloak.name` | `keycloak` |
|
||||||
| | | | Host | `databases.keycloak.host` | `postgresql` |
|
| | | | Host | `databases.keycloak.host` | `postgresql` |
|
||||||
| | | | Port | `databases.keycloak.port` | `5432` |
|
| | | | Port | `databases.keycloak.port` | `5432` |
|
||||||
| | | | Username | `databases.keycloak.username` | `keycloak_user` |
|
| | | | Username | `databases.keycloak.username` | `keycloak_user` |
|
||||||
| | | | Password | `databases.keycloak.password` | |
|
| | | | Password | `databases.keycloak.password` | |
|
||||||
| | Keycloak Extension | PostgreSQL | | | |
|
| | Keycloak Extension | PostgreSQL | | | |
|
||||||
| | | | Name | `databases.keycloakExtension.name` | `keycloak_extensions` |
|
| | | | Name | `databases.keycloakExtension.name` | `keycloak_extensions` |
|
||||||
| | | | Host | `databases.keycloakExtension.host` | `postgresql` |
|
| | | | Host | `databases.keycloakExtension.host` | `postgresql` |
|
||||||
| | | | Port | `databases.keycloakExtension.port` | `5432` |
|
| | | | Port | `databases.keycloakExtension.port` | `5432` |
|
||||||
| | | | Username | `databases.keycloakExtension.username` | `keycloak_extensions_user` |
|
| | | | Username | `databases.keycloakExtension.username` | `keycloak_extensions_user` |
|
||||||
| | | | Password | `databases.keycloakExtension.password` | |
|
| | | | Password | `databases.keycloakExtension.password` | |
|
||||||
| UMS | Notifications API | PostgreSQL | | | |
|
| UMS | Notifications API | PostgreSQL | | | |
|
||||||
| | | | Name | `databases.umsNotificationsApi.name` | `notificationsapi` |
|
| | | | Name | `databases.umsNotificationsApi.name` | `notificationsapi` |
|
||||||
| | | | Host | `databases.umsNotificationsApi.host` | `postgresql` |
|
| | | | Host | `databases.umsNotificationsApi.host` | `postgresql` |
|
||||||
| | | | Port | `databases.umsNotificationsApi.port` | `5432` |
|
| | | | Port | `databases.umsNotificationsApi.port` | `5432` |
|
||||||
| | | | Username | `databases.umsNotificationsApi.username` | `notificationsapi_user` |
|
| | | | Username | `databases.umsNotificationsApi.username` | `notificationsapi_user` |
|
||||||
| | | | Password | `databases.umsNotificationsApi.password` | |
|
| | | | Password | `databases.umsNotificationsApi.password` | |
|
||||||
| | Self Service | PostgreSQL | | | |
|
| | Self Service | PostgreSQL | | | |
|
||||||
| | | | Name | `databases.umsSelfservice.name` | `selfservice` |
|
| | | | Name | `databases.umsSelfservice.name` | `selfservice` |
|
||||||
| | | | Host | `databases.umsSelfservice.host` | `postgresql` |
|
| | | | Host | `databases.umsSelfservice.host` | `postgresql` |
|
||||||
| | | | Port | `databases.umsSelfservice.port` | `5432` |
|
| | | | Port | `databases.umsSelfservice.port` | `5432` |
|
||||||
| | | | Username | `databases.umsSelfservice.username` | `selfservice_user` |
|
| | | | Username | `databases.umsSelfservice.username` | `selfservice_user` |
|
||||||
| | | | Password | `databases.umsSelfservice.password` | |
|
| | | | Password | `databases.umsSelfservice.password` | |
|
||||||
| Nextcloud | Nextcloud | MariaDB | | | |
|
| Nextcloud | Nextcloud | MariaDB | | | |
|
||||||
| | | | Name | `databases.nextcloud.name` | `nextcloud` |
|
| | | | Name | `databases.nextcloud.name` | `nextcloud` |
|
||||||
| | | | Host | `databases.nextcloud.host` | `mariadb` |
|
| | | | Host | `databases.nextcloud.host` | `mariadb` |
|
||||||
| | | | Username | `databases.nextcloud.username` | `nextcloud_user` |
|
| | | | Username | `databases.nextcloud.username` | `nextcloud_user` |
|
||||||
| | | | Password | `databases.nextcloud.password` | |
|
| | | | Password | `databases.nextcloud.password` | |
|
||||||
| OpenProject | OpenProject | PostgreSQL | | | |
|
| OpenProject | OpenProject | PostgreSQL | | | |
|
||||||
| | | | Name | `databases.openproject.name` | `openproject` |
|
| | | | Name | `databases.openproject.name` | `openproject` |
|
||||||
| | | | Host | `databases.openproject.host` | `postgresql` |
|
| | | | Host | `databases.openproject.host` | `postgresql` |
|
||||||
| | | | Port | `databases.openproject.port` | `5432` |
|
| | | | Port | `databases.openproject.port` | `5432` |
|
||||||
| | | | Username | `databases.openproject.username` | `openproject_user` |
|
| | | | Username | `databases.openproject.username` | `openproject_user` |
|
||||||
| | | | Password | `databases.openproject.password` | |
|
| | | | Password | `databases.openproject.password` | |
|
||||||
| OX Appsuite | OX Appsuite | MariaDB | | | |
|
| OX App Suite | OX App Suite | MariaDB | | | |
|
||||||
| | | | Name | `databases.oxAppsuite.name` | `CONFIGDB` |
|
| | | | Name | `databases.oxAppSuite.name` | `CONFIGDB` |
|
||||||
| | | | Host | `databases.oxAppsuite.host` | `mariadb` |
|
| | | | Host | `databases.oxAppSuite.host` | `mariadb` |
|
||||||
| | | | Username | `databases.oxAppsuite.username` | `root` |
|
| | | | Username | `databases.oxAppSuite.username` | `root` |
|
||||||
| | | | Password | `databases.oxAppsuite.password` | |
|
| | | | Password | `databases.oxAppSuite.password` | |
|
||||||
| XWiki | XWiki | MariaDB | | | |
|
| XWiki | XWiki | MariaDB | | | |
|
||||||
| | | | Name | `databases.xwiki.name` | `xwiki` |
|
| | | | Name | `databases.xwiki.name` | `xwiki` |
|
||||||
| | | | Host | `databases.xwiki.host` | `mariadb` |
|
| | | | Host | `databases.xwiki.host` | `mariadb` |
|
||||||
| | | | Username | `databases.xwiki.username` | `xwiki_user` |
|
| | | | Username | `databases.xwiki.username` | `xwiki_user` |
|
||||||
| | | | Password | `databases.xwiki.password` | |
|
| | | | Password | `databases.xwiki.password` | |
|
||||||
|
|
||||||
# Object storage
|
# Object storage
|
||||||
|
|
||||||
|
|||||||
@@ -78,15 +78,15 @@ All subdomains can be customized. For example, _Nextcloud_ can be changed to `fi
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
global:
|
global:
|
||||||
hosts:
|
hosts:
|
||||||
nextcloud: "files"
|
nextcloud: "files"
|
||||||
```
|
```
|
||||||
|
|
||||||
The domain has to be set either via `dev` environment
|
The domain has to be set either via `dev` environment
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
global:
|
global:
|
||||||
domain: "domain.tld"
|
domain: "domain.tld"
|
||||||
```
|
```
|
||||||
|
|
||||||
or via environment variable
|
or via environment variable
|
||||||
@@ -97,7 +97,7 @@ export DOMAIN=domain.tld
|
|||||||
|
|
||||||
### Apps
|
### Apps
|
||||||
|
|
||||||
All available apps and their default value are in `helmfile/environments/default/workplace.yaml`.
|
All available apps and their default value are in `helmfile/environments/default/opendesk_main.gotmpl`.
|
||||||
|
|
||||||
| Component | Name | Default | Description |
|
| Component | Name | Default | Description |
|
||||||
| -------------------- | --------------------------- | ------- | ------------------------------ |
|
| -------------------- | --------------------------- | ------- | ------------------------------ |
|
||||||
@@ -106,8 +106,10 @@ All available apps and their default value are in `helmfile/environments/default
|
|||||||
| ClamAV (Simple) | `clamavSimple.enabled` | `true` | Antivirus engine |
|
| ClamAV (Simple) | `clamavSimple.enabled` | `true` | Antivirus engine |
|
||||||
| Collabora | `collabora.enabled` | `true` | Weboffice |
|
| Collabora | `collabora.enabled` | `true` | Weboffice |
|
||||||
| CryptPad | `cryptpad.enabled` | `true` | Weboffice |
|
| CryptPad | `cryptpad.enabled` | `true` | Weboffice |
|
||||||
|
| dkimpy | `dkimpy.enabled` | `false` | Postfix milter for DKIM |
|
||||||
| Dovecot | `dovecot.enabled` | `true` | Mail backend |
|
| Dovecot | `dovecot.enabled` | `true` | Mail backend |
|
||||||
| Element | `element.enabled` | `true` | Secure communications platform |
|
| Element | `element.enabled` | `true` | Secure communications platform |
|
||||||
|
| Home | `home.enabled` | `true` | Base domain portal redirect |
|
||||||
| Jitsi | `jitsi.enabled` | `true` | Videoconferencing |
|
| Jitsi | `jitsi.enabled` | `true` | Videoconferencing |
|
||||||
| MariaDB | `mariadb.enabled` | `true` | Database |
|
| MariaDB | `mariadb.enabled` | `true` | Database |
|
||||||
| Memcached | `memcached.enabled` | `true` | Cache Database |
|
| Memcached | `memcached.enabled` | `true` | Cache Database |
|
||||||
@@ -115,7 +117,7 @@ All available apps and their default value are in `helmfile/environments/default
|
|||||||
| Nextcloud | `nextcloud.enabled` | `true` | File share |
|
| Nextcloud | `nextcloud.enabled` | `true` | File share |
|
||||||
| Nubus | `nubus.enabled` | `true` | Identity Management & Portal |
|
| Nubus | `nubus.enabled` | `true` | Identity Management & Portal |
|
||||||
| OpenProject | `openproject.enabled` | `true` | Project management |
|
| OpenProject | `openproject.enabled` | `true` | Project management |
|
||||||
| OX Appsuite | `oxAppsuite.enabled` | `true` | Groupware |
|
| OX App Suite | `oxAppSuite.enabled` | `true` | Groupware |
|
||||||
| Postfix | `postfix.enabled` | `true` | MTA |
|
| Postfix | `postfix.enabled` | `true` | MTA |
|
||||||
| PostgreSQL | `postgresql.enabled` | `true` | Database |
|
| PostgreSQL | `postgresql.enabled` | `true` | Database |
|
||||||
| Redis | `redis.enabled` | `true` | Cache Database |
|
| Redis | `redis.enabled` | `true` | Cache Database |
|
||||||
@@ -125,7 +127,7 @@ Exemplary, Jitsi can be disabled like:
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
jitsi:
|
jitsi:
|
||||||
enabled: false
|
enabled: false
|
||||||
```
|
```
|
||||||
|
|
||||||
## Private registries
|
## Private registries
|
||||||
@@ -145,7 +147,7 @@ prefer the use of a private image registry, you can configure such for
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
global:
|
global:
|
||||||
imageRegistry: "my_private_registry.domain.tld"
|
imageRegistry: "my_private_registry.domain.tld"
|
||||||
```
|
```
|
||||||
|
|
||||||
alternatively, you can use an environment variable:
|
alternatively, you can use an environment variable:
|
||||||
@@ -158,16 +160,16 @@ or control repository override fine-granular per registry:
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
repositories:
|
repositories:
|
||||||
image:
|
image:
|
||||||
dockerHub: "my_private_registry.domain.tld/docker.io/"
|
dockerHub: "my_private_registry.domain.tld/docker.io/"
|
||||||
registryOpencodeDe: "my_private_registry.domain.tld/registry.opencode.de/"
|
registryOpencodeDe: "my_private_registry.domain.tld/registry.opencode.de/"
|
||||||
```
|
```
|
||||||
|
|
||||||
If authentication is required, you can reference `imagePullSecrets` as follows:
|
If authentication is required, you can reference `imagePullSecrets` as follows:
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
global:
|
global:
|
||||||
imagePullSecrets:
|
imagePullSecrets:
|
||||||
- "external-registry"
|
- "external-registry"
|
||||||
```
|
```
|
||||||
|
|
||||||
@@ -182,8 +184,8 @@ used:
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
cluster:
|
cluster:
|
||||||
service:
|
service:
|
||||||
type: "NodePort"
|
type: "NodePort"
|
||||||
```
|
```
|
||||||
|
|
||||||
### Networking
|
### Networking
|
||||||
@@ -192,16 +194,16 @@ If your cluster has not the default `cluster.local` domain configured, you need
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
cluster:
|
cluster:
|
||||||
networking:
|
networking:
|
||||||
domain: "acme.internal"
|
domain: "acme.internal"
|
||||||
```
|
```
|
||||||
|
|
||||||
If your cluster has not the default `10.0.0.0/8` CIDR configured, you need to provide the CIDR via the following:
|
If your cluster has not the default `10.0.0.0/8` CIDR configured, you need to provide the CIDR via the following:
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
cluster:
|
cluster:
|
||||||
networking:
|
networking:
|
||||||
cidr:
|
cidr:
|
||||||
- "127.0.0.0/8"
|
- "127.0.0.0/8"
|
||||||
```
|
```
|
||||||
|
|
||||||
@@ -210,8 +212,8 @@ explicitly configure the related IPs or IP ranges:
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
cluster:
|
cluster:
|
||||||
networking:
|
networking:
|
||||||
incomingCIDR:
|
incomingCIDR:
|
||||||
- "172.16.0.0/12"
|
- "172.16.0.0/12"
|
||||||
```
|
```
|
||||||
|
|
||||||
@@ -223,7 +225,7 @@ setting the following attribute to the name of the currently only supported ingr
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
ingress:
|
ingress:
|
||||||
ingressClassName: "name-of-my-nginx-ingress"
|
ingressClassName: "name-of-my-nginx-ingress"
|
||||||
```
|
```
|
||||||
|
|
||||||
### Container runtime
|
### Container runtime
|
||||||
@@ -233,30 +235,32 @@ Some apps require specific configurations for the container runtime. You can set
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
cluster:
|
cluster:
|
||||||
container:
|
container:
|
||||||
engine: "containerd"
|
engine: "containerd"
|
||||||
```
|
```
|
||||||
|
|
||||||
### Volumes
|
### Volumes
|
||||||
|
The **StorageClass** must be set by:
|
||||||
When your cluster has a `ReadWriteMany` volume provisioner, you can benefit from the distribution or scaling of apps. By
|
|
||||||
default, only `ReadWriteOnce` is enabled. To enable `ReadWriteMany` you can set:
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
cluster:
|
|
||||||
persistence:
|
|
||||||
readWriteMany: true
|
|
||||||
```
|
|
||||||
|
|
||||||
The **StorageClass** can be set by:
|
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
persistence:
|
persistence:
|
||||||
storageClassNames:
|
storageClassNames:
|
||||||
RWX: "my-read-write-many-class"
|
RWX: "my-read-write-many-class"
|
||||||
RWO: "my-read-write-once-class"
|
RWO: "my-read-write-once-class"
|
||||||
```
|
```
|
||||||
|
|
||||||
|
`RWX` is optional and requires that your cluster has a `ReadWriteMany` volume provisioner. If you can make use
|
||||||
|
of it it benefits the distribution or scaling of apps. By default, only `ReadWriteOnce` is enabled.
|
||||||
|
To enable `ReadWriteMany` you have to set:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
cluster:
|
||||||
|
persistence:
|
||||||
|
readWriteMany: true
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## Connectivity
|
## Connectivity
|
||||||
|
|
||||||
### Ports
|
### Ports
|
||||||
@@ -267,22 +271,22 @@ persistence:
|
|||||||
|
|
||||||
To use the openDesk functionality with its web-based user interface, you need to expose the following ports publicly:
|
To use the openDesk functionality with its web-based user interface, you need to expose the following ports publicly:
|
||||||
|
|
||||||
| Component | Description | Port | Type |
|
| Component | Description | Port | Type |
|
||||||
| ------------------ | ----------------------- | ----: | ---: |
|
| ------------------ | ----------------------- | ----: | ---: |
|
||||||
| openDesk | Kubernetes Ingress | 80 | TCP |
|
| openDesk | Kubernetes Ingress | 80 | TCP |
|
||||||
| openDesk | Kubernetes Ingress | 443 | TCP |
|
| openDesk | Kubernetes Ingress | 443 | TCP |
|
||||||
| Jitsi Video Bridge | ICE Port for video data | 10000 | UDP |
|
| Jitsi Video Bridge | ICE Port for video data | 10000 | UDP |
|
||||||
|
|
||||||
#### Mail clients
|
#### Mail clients
|
||||||
|
|
||||||
To connect with mail clients like [Thunderbird](https://www.thunderbird.net/), the following ports need public exposure:
|
To connect with mail clients like [Thunderbird](https://www.thunderbird.net/), the following ports need public exposure:
|
||||||
|
|
||||||
| Component | Description | Port | Type |
|
| Component | Description | Port | Type |
|
||||||
| ------------------ | ----------------------- | ----: | ---: |
|
| ------------------ | ----------------------- | ----: | ---: |
|
||||||
| Dovecot | IMAPS | 993 | TCP |
|
| Dovecot | IMAPS | 993 | TCP |
|
||||||
| | POP3S | 995 | TCP |
|
| | POP3S | 995 | TCP |
|
||||||
| Postfix | SMTP | 25 | TCP |
|
| Postfix | SMTP | 25 | TCP |
|
||||||
| | SMTPS | 587 | TCP |
|
| | SMTPS | 587 | TCP |
|
||||||
|
|
||||||
### Mail/SMTP configuration
|
### Mail/SMTP configuration
|
||||||
|
|
||||||
@@ -291,9 +295,9 @@ the whole subdomain.
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
smtp:
|
smtp:
|
||||||
host: "mail.open.desk"
|
host: "mail.open.desk"
|
||||||
username: "openDesk"
|
username: "openDesk"
|
||||||
password: "secret"
|
password: "secret"
|
||||||
```
|
```
|
||||||
|
|
||||||
Enabling DKIM signing of emails helps to reduce spam and increases trust.
|
Enabling DKIM signing of emails helps to reduce spam and increases trust.
|
||||||
@@ -301,12 +305,12 @@ openDesk ships dkimpy-milter as Postfix milter for signing emails.
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
dkimpy:
|
dkimpy:
|
||||||
enable: true
|
enable: true
|
||||||
dkim:
|
dkim:
|
||||||
key:
|
key:
|
||||||
value: "HzZs08QF1O7UiAkcM9T3U7rePPECtSFvWZIvyKqdg8E="
|
value: "HzZs08QF1O7UiAkcM9T3U7rePPECtSFvWZIvyKqdg8E="
|
||||||
selector: "default"
|
selector: "default"
|
||||||
useED25519: true # when false, RSA is used
|
useED25519: true # when false, RSA is used
|
||||||
```
|
```
|
||||||
|
|
||||||
### TURN configuration
|
### TURN configuration
|
||||||
@@ -316,14 +320,14 @@ these options:
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
turn:
|
turn:
|
||||||
transport: "udp" # or tcp
|
transport: "udp" # or tcp
|
||||||
credentials: "secret"
|
credentials: "secret"
|
||||||
server:
|
server:
|
||||||
host: "turn.open.desk"
|
host: "turn.open.desk"
|
||||||
port: "3478"
|
port: "3478"
|
||||||
tls:
|
tls:
|
||||||
host: "turns.open.desk"
|
host: "turns.open.desk"
|
||||||
port: "5349"
|
port: "5349"
|
||||||
```
|
```
|
||||||
|
|
||||||
### Certificate issuer
|
### Certificate issuer
|
||||||
@@ -334,7 +338,7 @@ turn off `Certificate` resource creation by:
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
certificates:
|
certificates:
|
||||||
enabled: false
|
enabled: false
|
||||||
```
|
```
|
||||||
|
|
||||||
If you want to leverage the `cert-manager.io` to handle certificates, like `Let's encrypt`, you need to provide the
|
If you want to leverage the `cert-manager.io` to handle certificates, like `Let's encrypt`, you need to provide the
|
||||||
@@ -342,15 +346,15 @@ configured cluster issuer:
|
|||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
certificate:
|
certificate:
|
||||||
issuerRef:
|
issuerRef:
|
||||||
name: "letsencrypt-prod"
|
name: "letsencrypt-prod"
|
||||||
```
|
```
|
||||||
|
|
||||||
Additionally, it is possible to request wildcard certificates by:
|
Additionally, it is possible to request wildcard certificates by:
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
certificate:
|
certificate:
|
||||||
wildcard: true
|
wildcard: true
|
||||||
```
|
```
|
||||||
|
|
||||||
## Password seed
|
## Password seed
|
||||||
@@ -456,7 +460,7 @@ NAMESPACE=your-namespace
|
|||||||
|
|
||||||
# Uninstall all Helm charts
|
# Uninstall all Helm charts
|
||||||
for OPENDESK_RELEASE in $(helm ls -n ${NAMESPACE} -aq); do
|
for OPENDESK_RELEASE in $(helm ls -n ${NAMESPACE} -aq); do
|
||||||
helm uninstall -n ${NAMESPACE} ${OPENDESK_RELEASE};
|
helm uninstall -n ${NAMESPACE} ${OPENDESK_RELEASE};
|
||||||
done
|
done
|
||||||
|
|
||||||
# Delete leftover resources
|
# Delete leftover resources
|
||||||
|
|||||||
@@ -9,6 +9,12 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
* [Disclaimer](#disclaimer)
|
* [Disclaimer](#disclaimer)
|
||||||
* [openDesk supported upgrade path](#opendesk-supported-upgrade-path)
|
* [openDesk supported upgrade path](#opendesk-supported-upgrade-path)
|
||||||
* [Releases upgrade details](#releases-upgrade-details)
|
* [Releases upgrade details](#releases-upgrade-details)
|
||||||
|
* [From v1.0.0](#from-v100)
|
||||||
|
* [Pre-upgrade: Manual checks/steps](#pre-upgrade-manual-checkssteps)
|
||||||
|
* [New default enforces login](#new-default-enforces-login)
|
||||||
|
* [Streamlining `openxchange` and `oxAppSuite` attribute names](#streamlining-openxchange-and-oxappsuite-attribute-names)
|
||||||
|
* [Dicts to define `customization.release`](#dicts-to-define-customizationrelease)
|
||||||
|
* [Redis 7.4](#redis-74)
|
||||||
* [From v0.9.0](#from-v090)
|
* [From v0.9.0](#from-v090)
|
||||||
* [Pre-upgrade: Manual steps](#pre-upgrade-manual-steps)
|
* [Pre-upgrade: Manual steps](#pre-upgrade-manual-steps)
|
||||||
* [Configuration Cleanup: Removal of unnecessary OX-Profiles in Nubus](#configuration-cleanup-removal-of-unnecessary-ox-profiles-in-nubus)
|
* [Configuration Cleanup: Removal of unnecessary OX-Profiles in Nubus](#configuration-cleanup-removal-of-unnecessary-ox-profiles-in-nubus)
|
||||||
@@ -59,6 +65,112 @@ Explanation of the table's columns:
|
|||||||
|
|
||||||
# Releases upgrade details
|
# Releases upgrade details
|
||||||
|
|
||||||
|
## From v1.0.0
|
||||||
|
|
||||||
|
### Pre-upgrade: Manual checks/steps
|
||||||
|
|
||||||
|
#### New default enforces login
|
||||||
|
|
||||||
|
Users accessing the openDesk portal are now automatically redirected to the login screen as a default.
|
||||||
|
|
||||||
|
In case you want to keep the previous behavior you need to set the following `functional` flag:
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
functional:
|
||||||
|
portal:
|
||||||
|
enforceLogin: false
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Streamlining `openxchange` and `oxAppSuite` attribute names
|
||||||
|
|
||||||
|
We have updated some attribute names around Open-Xchange / OX App Suite to be consistent within our Helmfile
|
||||||
|
deployment and to aligning with the actual brand names as well as with our rule of thumb for brand based
|
||||||
|
attribute names[^1].
|
||||||
|
|
||||||
|
In case you are using any of the customizations below (`WAS`), please update as shown (`NOW`):
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: oxAppsuite: ...
|
||||||
|
NOW: oxAppSuite: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: cache.oxAppsuite: ...
|
||||||
|
NOW: cache.oxAppSuite: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: charts.openXchangeAppSuite: ...
|
||||||
|
NOW: charts.oxAppSuite: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: charts.openXchangeAppSuiteBootstrap: ...
|
||||||
|
NOW: charts.oxAppSuiteBootstrap: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: customization.release.openXchange: ...
|
||||||
|
NOW: customization.release.openxchange: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: customization.release.opendeskOpenXchangeBootstrap: ...
|
||||||
|
NOW: customization.release.opendeskOpenxchangeBootstrap: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: databases.oxAppsuite: ...
|
||||||
|
NOW: databases.oxAppSuite: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: ingress.parameters.openXchangeAppSuite: ...
|
||||||
|
NOW: ingress.parameters.oxAppSuite: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: ingress.bodyTimeout.openXchangeAppSuite: ...
|
||||||
|
NOW: ingress.bodyTimeout.oxAppSuite: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: migration.oxAppsuite: ...
|
||||||
|
NOW: migration.oxAppSuite: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
```
|
||||||
|
WAS: secrets.oxAppsuite: ...
|
||||||
|
NOW: secrets.oxAppSuite: ...
|
||||||
|
```
|
||||||
|
|
||||||
|
#### Dicts to define `customization.release`
|
||||||
|
|
||||||
|
If you make use of the `customization.release` option, you have to switch to a dictionary based definition of customization files e.g. from
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
customization:
|
||||||
|
release:
|
||||||
|
collaboraOnline: "./my_custom_templating.yaml"
|
||||||
|
```
|
||||||
|
|
||||||
|
to
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
customization:
|
||||||
|
release:
|
||||||
|
collaboraOnline:
|
||||||
|
file1: "./my_custom_templating.yaml"
|
||||||
|
```
|
||||||
|
|
||||||
|
You can freely choose the `file1` dictionary key used in the example above, but it should start with a letter.
|
||||||
|
|
||||||
|
#### Redis 7.4
|
||||||
|
|
||||||
|
The update from openDesk 1.0.0 contains Redis 7.4.1, like the other openDesk bundled services the bundled Redis is as well not meant to be used in production.
|
||||||
|
|
||||||
|
Please ensure for the Redis you are using that it is updated to at least 7.4 to support the requirement of OX App Suite.
|
||||||
|
|
||||||
## From v0.9.0
|
## From v0.9.0
|
||||||
|
|
||||||
### Pre-upgrade: Manual steps
|
### Pre-upgrade: Manual steps
|
||||||
@@ -311,3 +423,6 @@ When a new upgrade migration is required, ensure to address the following list:
|
|||||||
- You most likely have to update the [`opendesk-migrations` Helm chart](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations) within the `rules` section of the [`role.yaml`](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations/-/blob/main/charts/opendesk-migrations/templates/role.yaml) to provide the permissions required for the execution of your migration's logic.
|
- You most likely have to update the [`opendesk-migrations` Helm chart](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations) within the `rules` section of the [`role.yaml`](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations/-/blob/main/charts/opendesk-migrations/templates/role.yaml) to provide the permissions required for the execution of your migration's logic.
|
||||||
- You must set the runner's ID you want to execute in the [migrations.yaml.gotmpl](../helmfile/shared/migrations.yaml.gotmpl). See also the `migrations.*` section of [the Helm chart's README.md](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations/-/blob/main/charts/opendesk-migrations/README.md).
|
- You must set the runner's ID you want to execute in the [migrations.yaml.gotmpl](../helmfile/shared/migrations.yaml.gotmpl). See also the `migrations.*` section of [the Helm chart's README.md](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-migrations/-/blob/main/charts/opendesk-migrations/README.md).
|
||||||
- Update the [`charts.yaml`](../helmfile/environments/default/charts.yaml) and [`images.yaml`](../helmfile/environments/default/images.yaml) to reflect the newer releases of the `opendesk-migrations` Helm chart and container image.
|
- Update the [`charts.yaml`](../helmfile/environments/default/charts.yaml) and [`images.yaml`](../helmfile/environments/default/images.yaml) to reflect the newer releases of the `opendesk-migrations` Helm chart and container image.
|
||||||
|
|
||||||
|
[^1]: We do not follow a brand name's specific spelling when it comes to upper and lower case and only use new word
|
||||||
|
uppercase when names consist of multiple, space divided words.
|
||||||
|
|||||||
@@ -46,7 +46,10 @@ prometheus:
|
|||||||
|
|
||||||
# Alerts
|
# Alerts
|
||||||
|
|
||||||
Some Helm charts provide a default set of prometheusRules for alerting; enable it by:
|
openDesk ships with a set of Prometheus alerting rules that are specific to the operation of openDesk.
|
||||||
|
Some of these are created by our partners while others are defined in [opendesk-alerts](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-alerts).
|
||||||
|
|
||||||
|
All alert rules are deployed as [PrometheusRule](https://prometheus-operator.dev/docs/api-reference/api/#monitoring.coreos.com/v1.PrometheusRule) and can be enabled like this:
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
prometheus:
|
prometheus:
|
||||||
|
|||||||
@@ -18,10 +18,12 @@ releases:
|
|||||||
version: "{{ .Values.charts.collabora.version }}"
|
version: "{{ .Values.charts.collabora.version }}"
|
||||||
values:
|
values:
|
||||||
- "values.yaml.gotmpl"
|
- "values.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.collaboraOnline | default "additionalValues: false" }}
|
{{ range .Values.customization.release.collaboraOnline }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.collabora.enabled }}
|
installed: {{ .Values.collabora.enabled }}
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-1"
|
deployStage: "050-components"
|
||||||
component: "collabora"
|
component: "collabora"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -18,10 +18,12 @@ releases:
|
|||||||
version: "{{ .Values.charts.cryptpad.version }}"
|
version: "{{ .Values.charts.cryptpad.version }}"
|
||||||
values:
|
values:
|
||||||
- "values.yaml.gotmpl"
|
- "values.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.cryptpad | default "additionalValues: false" }}
|
{{ range .Values.customization.release.cryptpad }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.cryptpad.enabled }}
|
installed: {{ .Values.cryptpad.enabled }}
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-1"
|
deployStage: "050-components"
|
||||||
component: "cryptpad"
|
component: "cryptpad"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -80,12 +80,20 @@ repositories:
|
|||||||
url: "{{ .Values.global.helmRegistry | default .Values.charts.matrixNeodatefixBot.registry }}/{{ .Values.charts.matrixNeodatefixBot.repository }}"
|
url: "{{ .Values.global.helmRegistry | default .Values.charts.matrixNeodatefixBot.registry }}/{{ .Values.charts.matrixNeodatefixBot.repository }}"
|
||||||
|
|
||||||
releases:
|
releases:
|
||||||
|
# During upgrade 1.0.0 -> 1.1.0 the chart 'opendesk-element' has been moved to 'opendesk-element-web'
|
||||||
- name: "opendesk-element"
|
- name: "opendesk-element"
|
||||||
chart: "element-repo/{{ .Values.charts.element.name }}"
|
chart: "element-repo/{{ .Values.charts.element.name }}"
|
||||||
version: "{{ .Values.charts.element.version }}"
|
version: "{{ .Values.charts.element.version }}"
|
||||||
|
installed: false
|
||||||
|
|
||||||
|
- name: "opendesk-element-web"
|
||||||
|
chart: "element-repo/{{ .Values.charts.elementWeb.name }}"
|
||||||
|
version: "{{ .Values.charts.elementWeb.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-element.yaml.gotmpl"
|
- "values-element.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskElement | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskElement }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.element.enabled }}
|
installed: {{ .Values.element.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -94,7 +102,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.elementWellKnown.version }}"
|
version: "{{ .Values.charts.elementWellKnown.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-well-known.yaml.gotmpl"
|
- "values-well-known.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskWellKnown | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskWellKnown }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.element.enabled }}
|
installed: {{ .Values.element.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -103,7 +113,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.synapseWeb.version }}"
|
version: "{{ .Values.charts.synapseWeb.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-synapse-web.yaml.gotmpl"
|
- "values-synapse-web.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskSynapseWeb | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskSynapseWeb }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.element.enabled }}
|
installed: {{ .Values.element.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -112,7 +124,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.synapse.version }}"
|
version: "{{ .Values.charts.synapse.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-synapse.yaml.gotmpl"
|
- "values-synapse.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskSynapse | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskSynapse }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.element.enabled }}
|
installed: {{ .Values.element.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -173,6 +187,6 @@ releases:
|
|||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-1"
|
deployStage: "050-components"
|
||||||
component: "element"
|
component: "element"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -27,9 +27,26 @@ configuration:
|
|||||||
|
|
||||||
database:
|
database:
|
||||||
host: {{ .Values.databases.synapse.host | quote }}
|
host: {{ .Values.databases.synapse.host | quote }}
|
||||||
|
port: {{ .Values.databases.synapse.port }}
|
||||||
name: {{ .Values.databases.synapse.name | quote }}
|
name: {{ .Values.databases.synapse.name | quote }}
|
||||||
user: {{ .Values.databases.synapse.username | quote }}
|
user: {{ .Values.databases.synapse.username | quote }}
|
||||||
password: {{ .Values.databases.synapse.password | default .Values.secrets.postgresql.matrixUser | quote }}
|
password:
|
||||||
|
value: {{ .Values.databases.synapse.password | default .Values.secrets.postgresql.matrixUser | quote }}
|
||||||
|
requireAuth: {{ .Values.databases.synapse.requireAuth }}
|
||||||
|
channelBinding: {{ .Values.databases.synapse.channelBinding | quote }}
|
||||||
|
connectTimeout: {{ .Values.databases.synapse.connectTimeout }}
|
||||||
|
clientEncoding: {{ .Values.databases.synapse.clientEncoding | quote }}
|
||||||
|
keepalives: {{ .Values.databases.synapse.keepalives }}
|
||||||
|
keepalivesIdle: {{ .Values.databases.synapse.keepalivesIdle }}
|
||||||
|
keepalivesInterval: {{ .Values.databases.synapse.keepalivesInterval }}
|
||||||
|
keepalivesCount: {{ .Values.databases.synapse.keepalivesCount }}
|
||||||
|
replication: {{ .Values.databases.synapse.replication }}
|
||||||
|
gssencmode: {{ .Values.databases.synapse.gssencmode | quote }}
|
||||||
|
sslmode: {{ .Values.databases.synapse.sslmode | quote }}
|
||||||
|
sslcompression: {{ .Values.databases.synapse.sslcompression }}
|
||||||
|
sslMinProtocolVersion: {{ .Values.databases.synapse.sslMinProtocolVersion | quote }}
|
||||||
|
connectionPoolMin: {{ .Values.databases.synapse.connectionPoolMin }}
|
||||||
|
connectionPoolMax: {{ .Values.databases.synapse.connectionPoolMax }}
|
||||||
|
|
||||||
homeserver:
|
homeserver:
|
||||||
serverName: {{ .Values.global.matrixDomain | default .Values.global.domain }}
|
serverName: {{ .Values.global.matrixDomain | default .Values.global.domain }}
|
||||||
@@ -43,8 +60,8 @@ configuration:
|
|||||||
regex: "@.*"
|
regex: "@.*"
|
||||||
url: null
|
url: null
|
||||||
sender_localpart: intercom-service
|
sender_localpart: intercom-service
|
||||||
- as_token: {{ .Values.secrets.oxAppsuite.synapseAsToken | quote }}
|
- as_token: {{ .Values.secrets.oxAppSuite.synapseAsToken | quote }}
|
||||||
hs_token: {{ .Values.secrets.oxAppsuite.synapseAsToken | quote }}
|
hs_token: {{ .Values.secrets.oxAppSuite.synapseAsToken | quote }}
|
||||||
id: ox-appsuite
|
id: ox-appsuite
|
||||||
namespaces:
|
namespaces:
|
||||||
users:
|
users:
|
||||||
|
|||||||
@@ -18,11 +18,13 @@ releases:
|
|||||||
version: "{{ .Values.charts.jitsi.version }}"
|
version: "{{ .Values.charts.jitsi.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-jitsi.yaml.gotmpl"
|
- "values-jitsi.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.jitsi | default "additionalValues: false" }}
|
{{ range .Values.customization.release.jitsi }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.jitsi.enabled }}
|
installed: {{ .Values.jitsi.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-1"
|
deployStage: "050-components"
|
||||||
component: "jitsi"
|
component: "jitsi"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -21,11 +21,13 @@ releases:
|
|||||||
values:
|
values:
|
||||||
- "values.yaml.gotmpl"
|
- "values.yaml.gotmpl"
|
||||||
- "../../shared/migrations.yaml.gotmpl"
|
- "../../shared/migrations.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.migrationsPost | default "additionalValues: false" }}
|
{{ range .Values.customization.release.migrationsPost }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.migrations.enabled }}
|
installed: {{ .Values.migrations.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-0"
|
deployStage: "090-migrations-post"
|
||||||
component: "opendesk-migrations"
|
component: "migrations-post"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -21,11 +21,13 @@ releases:
|
|||||||
values:
|
values:
|
||||||
- "values.yaml.gotmpl"
|
- "values.yaml.gotmpl"
|
||||||
- "../../shared/migrations.yaml.gotmpl"
|
- "../../shared/migrations.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.migrationsPre | default "additionalValues: false" }}
|
{{ range .Values.customization.release.migrationsPre }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.migrations.enabled }}
|
installed: {{ .Values.migrations.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-0"
|
deployStage: "010-migrations-pre"
|
||||||
component: "opendesk-migrations"
|
component: "migrations-pre"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -25,7 +25,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.nextcloudManagement.version }}"
|
version: "{{ .Values.charts.nextcloudManagement.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-nextcloud-mgmt.yaml.gotmpl"
|
- "values-nextcloud-mgmt.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskNextcloudManagement | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskNextcloudManagement }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
waitForJobs: true
|
waitForJobs: true
|
||||||
wait: true
|
wait: true
|
||||||
installed: {{ .Values.nextcloud.enabled }}
|
installed: {{ .Values.nextcloud.enabled }}
|
||||||
@@ -35,12 +37,14 @@ releases:
|
|||||||
version: "{{ .Values.charts.nextcloud.version }}"
|
version: "{{ .Values.charts.nextcloud.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-nextcloud.yaml.gotmpl"
|
- "values-nextcloud.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskNextcloud | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskNextcloud }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
needs:
|
needs:
|
||||||
- "opendesk-nextcloud-management"
|
- "opendesk-nextcloud-management"
|
||||||
installed: {{ .Values.nextcloud.enabled }}
|
installed: {{ .Values.nextcloud.enabled }}
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-1"
|
deployStage: "050-components"
|
||||||
component: "nextcloud"
|
component: "nextcloud"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -19,34 +19,44 @@ cleanup:
|
|||||||
|
|
||||||
configuration:
|
configuration:
|
||||||
administrator:
|
administrator:
|
||||||
|
# The admin user is (currently) required to bootstrap the OpenProject <> Nextcloud integration.
|
||||||
|
enabled: true
|
||||||
username:
|
username:
|
||||||
value: "nextcloud"
|
value: "nextcloud"
|
||||||
password:
|
password:
|
||||||
value: {{ .Values.secrets.nextcloud.adminPassword | quote }}
|
value: {{ .Values.secrets.nextcloud.adminPassword | quote }}
|
||||||
antivirus:
|
antivirus:
|
||||||
|
{{- if .Values.antivirus.icap.host }}
|
||||||
|
host: {{ .Values.antivirus.icap.host | quote }}
|
||||||
|
port: {{ .Values.antivirus.icap.port | quote }}
|
||||||
|
{{- else }}
|
||||||
{{- if .Values.clamavDistributed.enabled }}
|
{{- if .Values.clamavDistributed.enabled }}
|
||||||
host: "clamav-icap"
|
host: "clamav-icap"
|
||||||
{{- else if .Values.clamavSimple.enabled }}
|
{{- else if .Values.clamavSimple.enabled }}
|
||||||
host: "clamav-simple"
|
host: "clamav-simple"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
port: 1344
|
||||||
|
{{- end }}
|
||||||
cache:
|
cache:
|
||||||
auth:
|
auth:
|
||||||
enabled: true
|
enabled: true
|
||||||
username:
|
username:
|
||||||
value: "default"
|
value: {{ .Values.cache.nextcloud.username }}
|
||||||
password:
|
password:
|
||||||
value: {{ .Values.cache.nextcloud.password | default .Values.secrets.redis.password | quote }}
|
value: {{ .Values.cache.nextcloud.password | default .Values.secrets.redis.password | quote }}
|
||||||
host: {{ .Values.cache.nextcloud.host | quote }}
|
host: {{ .Values.cache.nextcloud.host | quote }}
|
||||||
port: {{ .Values.cache.nextcloud.port | quote }}
|
port: {{ .Values.cache.nextcloud.port | quote }}
|
||||||
|
tls: {{ .Values.cache.nextcloud.tls }}
|
||||||
collabora:
|
collabora:
|
||||||
# internalWopiUrl: ""
|
# internalWopiUrl: ""
|
||||||
wopiAllowlist: {{ join ", " ( concat .Values.cluster.networking.cidr .Values.cluster.networking.incomingCIDR ) | quote }}
|
wopiAllowlist: {{ join ", " ( concat .Values.cluster.networking.cidr .Values.cluster.networking.incomingCIDR ) | quote }}
|
||||||
database:
|
database:
|
||||||
host: {{ .Values.databases.nextcloud.host | quote }}
|
host: {{ .Values.databases.nextcloud.host | quote }}
|
||||||
port: {{ .Values.databases.nextcloud.port | quote }}
|
port: {{ .Values.databases.nextcloud.port | quote }}
|
||||||
|
name: {{ .Values.databases.nextcloud.name | quote }}
|
||||||
auth:
|
auth:
|
||||||
username:
|
username:
|
||||||
value: "nextcloud_user"
|
value: {{ .Values.databases.nextcloud.username | quote }}
|
||||||
password:
|
password:
|
||||||
value: {{ .Values.databases.nextcloud.password | default .Values.secrets.mariadb.nextcloudUser | quote }}
|
value: {{ .Values.databases.nextcloud.password | default .Values.secrets.mariadb.nextcloudUser | quote }}
|
||||||
ldap:
|
ldap:
|
||||||
@@ -89,6 +99,7 @@ configuration:
|
|||||||
defaultExternalExpireEnabled: {{ .Values.functional.filestore.sharing.external.expiry.activeByDefault }}
|
defaultExternalExpireEnabled: {{ .Values.functional.filestore.sharing.external.expiry.activeByDefault }}
|
||||||
defaultExternalExpireEnforced: {{ .Values.functional.filestore.sharing.external.expiry.enforced }}
|
defaultExternalExpireEnforced: {{ .Values.functional.filestore.sharing.external.expiry.enforced }}
|
||||||
defaultExternalExpireDays: {{ .Values.functional.filestore.sharing.external.expiry.defaultDays | quote }}
|
defaultExternalExpireDays: {{ .Values.functional.filestore.sharing.external.expiry.defaultDays | quote }}
|
||||||
|
sendPasswordMail: {{ .Values.functional.filestore.sharing.external.sendPasswordMail | quote }}
|
||||||
smtp:
|
smtp:
|
||||||
auth:
|
auth:
|
||||||
enabled: false
|
enabled: false
|
||||||
@@ -131,6 +142,7 @@ podSecurityContext:
|
|||||||
|
|
||||||
debug:
|
debug:
|
||||||
loglevel: {{ if .Values.debug.enabled }}"0"{{ else }}"2"{{ end }}
|
loglevel: {{ if .Values.debug.enabled }}"0"{{ else }}"2"{{ end }}
|
||||||
|
bootstrap: {{ .Values.debug.enabled }}
|
||||||
|
|
||||||
{{- if .Values.certificate.selfSigned }}
|
{{- if .Values.certificate.selfSigned }}
|
||||||
extraEnvVars:
|
extraEnvVars:
|
||||||
|
|||||||
@@ -55,17 +55,19 @@ aio:
|
|||||||
auth:
|
auth:
|
||||||
enabled: true
|
enabled: true
|
||||||
username:
|
username:
|
||||||
value: "default"
|
value: {{ .Values.cache.nextcloud.username }}
|
||||||
password:
|
password:
|
||||||
value: {{ .Values.cache.nextcloud.password | default .Values.secrets.redis.password | quote }}
|
value: {{ .Values.cache.nextcloud.password | default .Values.secrets.redis.password | quote }}
|
||||||
host: {{ .Values.cache.nextcloud.host | quote }}
|
host: {{ .Values.cache.nextcloud.host | quote }}
|
||||||
port: {{ .Values.cache.nextcloud.port | quote }}
|
port: {{ .Values.cache.nextcloud.port | quote }}
|
||||||
|
tls: {{ .Values.cache.nextcloud.tls }}
|
||||||
database:
|
database:
|
||||||
host: {{ .Values.databases.nextcloud.host | quote }}
|
host: {{ .Values.databases.nextcloud.host | quote }}
|
||||||
port: {{ .Values.databases.nextcloud.port | quote }}
|
port: {{ .Values.databases.nextcloud.port | quote }}
|
||||||
|
name: {{ .Values.databases.nextcloud.name | quote }}
|
||||||
auth:
|
auth:
|
||||||
username:
|
username:
|
||||||
value: "nextcloud_user"
|
value: {{ .Values.databases.nextcloud.username | quote }}
|
||||||
password:
|
password:
|
||||||
value: {{ .Values.databases.nextcloud.password | default .Values.secrets.mariadb.nextcloudUser | quote }}
|
value: {{ .Values.databases.nextcloud.password | default .Values.secrets.mariadb.nextcloudUser | quote }}
|
||||||
trustedProxy: {{ join " " .Values.cluster.networking.cidr | quote }}
|
trustedProxy: {{ join " " .Values.cluster.networking.cidr | quote }}
|
||||||
|
|||||||
@@ -28,6 +28,14 @@ repositories:
|
|||||||
password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
|
password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
|
||||||
oci: true
|
oci: true
|
||||||
url: "{{ .Values.global.helmRegistry | default .Values.charts.opendeskKeycloakBootstrap.registry }}/{{ .Values.charts.opendeskKeycloakBootstrap.repository }}"
|
url: "{{ .Values.global.helmRegistry | default .Values.charts.opendeskKeycloakBootstrap.registry }}/{{ .Values.charts.opendeskKeycloakBootstrap.repository }}"
|
||||||
|
# NGINX S3 Gateway Chart
|
||||||
|
- name: "nginx-s3-gateway-repo"
|
||||||
|
keyring: "../../files/gpg-pubkeys/opencode.gpg"
|
||||||
|
verify: {{ .Values.charts.nginxS3Gateway.verify }}
|
||||||
|
username: {{ env "OD_PRIVATE_REGISTRY_USERNAME" | quote }}
|
||||||
|
password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
|
||||||
|
oci: true
|
||||||
|
url: "{{ .Values.global.helmRegistry | default .Values.charts.nginxS3Gateway.registry }}/{{ .Values.charts.nginxS3Gateway.repository }}"
|
||||||
|
|
||||||
releases:
|
releases:
|
||||||
# Univention Management Stack Umbrella Chart
|
# Univention Management Stack Umbrella Chart
|
||||||
@@ -38,7 +46,9 @@ releases:
|
|||||||
- "values-nubus.yaml.gotmpl"
|
- "values-nubus.yaml.gotmpl"
|
||||||
- "values-opendesk-customization.yaml.gotmpl"
|
- "values-opendesk-customization.yaml.gotmpl"
|
||||||
- "values-opendesk-images.yaml.gotmpl"
|
- "values-opendesk-images.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.ums | default "additionalValues: false" }}
|
{{ range .Values.customization.release.ums }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.nubus.enabled }}
|
installed: {{ .Values.nubus.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
# Intercom-Service
|
# Intercom-Service
|
||||||
@@ -47,7 +57,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.intercomService.version }}"
|
version: "{{ .Values.charts.intercomService.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-intercom-service.yaml.gotmpl"
|
- "values-intercom-service.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.intercomService | default "additionalValues: false" }}
|
{{ range .Values.customization.release.intercomService }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.nubus.enabled }}
|
installed: {{ .Values.nubus.enabled }}
|
||||||
|
|
||||||
# openDesk Keycloak Bootstrap Chart
|
# openDesk Keycloak Bootstrap Chart
|
||||||
@@ -56,13 +68,27 @@ releases:
|
|||||||
version: "{{ .Values.charts.opendeskKeycloakBootstrap.version }}"
|
version: "{{ .Values.charts.opendeskKeycloakBootstrap.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-opendesk-keycloak-bootstrap.yaml.gotmpl"
|
- "values-opendesk-keycloak-bootstrap.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskKeycloakBootstrap | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskKeycloakBootstrap }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
needs:
|
needs:
|
||||||
- "ums"
|
- "ums"
|
||||||
installed: {{ .Values.nubus.enabled }}
|
installed: {{ .Values.nubus.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
|
# NGINX S3 Gateway (when cluster minio is not used)
|
||||||
|
- name: "nubus"
|
||||||
|
chart: "nginx-s3-gateway-repo/{{ .Values.charts.nginxS3Gateway.name }}"
|
||||||
|
version: "{{ .Values.charts.nginxS3Gateway.version }}"
|
||||||
|
values:
|
||||||
|
- "values-nginx-s3-gateway.yaml.gotmpl"
|
||||||
|
{{ range .Values.customization.release.nginxS3Gateway }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
|
installed: {{ not .Values.minio.enabled }}
|
||||||
|
timeout: 900
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-1"
|
deployStage: "050-components"
|
||||||
component: "nubus"
|
component: "nubus"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -32,10 +32,15 @@ extraVolumeMounts:
|
|||||||
- name: "trusted-cert-secret-volume"
|
- name: "trusted-cert-secret-volume"
|
||||||
mountPath: "/etc/ssl/certs/ca-certificates.crt"
|
mountPath: "/etc/ssl/certs/ca-certificates.crt"
|
||||||
subPath: "ca-certificates.crt"
|
subPath: "ca-certificates.crt"
|
||||||
|
{{- end }}
|
||||||
|
|
||||||
extraEnvVars:
|
extraEnvVars:
|
||||||
|
- name: "REDIS_USER"
|
||||||
|
value: {{ .Values.cache.intercomService.username }}
|
||||||
|
{{- if .Values.certificate.selfSigned }}
|
||||||
- name: "NODE_EXTRA_CA_CERTS"
|
- name: "NODE_EXTRA_CA_CERTS"
|
||||||
value: "/etc/ssl/certs/ca-certificates.crt"
|
value: "/etc/ssl/certs/ca-certificates.crt"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
global:
|
global:
|
||||||
domain: {{ .Values.global.domain | quote }}
|
domain: {{ .Values.global.domain | quote }}
|
||||||
|
|||||||
39
helmfile/apps/nubus/values-nginx-s3-gateway.yaml.gotmpl
Normal file
39
helmfile/apps/nubus/values-nginx-s3-gateway.yaml.gotmpl
Normal file
@@ -0,0 +1,39 @@
|
|||||||
|
{{/*
|
||||||
|
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
|
||||||
|
SPDX-License-Identifier: Apache-2.0
|
||||||
|
*/}}
|
||||||
|
---
|
||||||
|
image:
|
||||||
|
registry: {{ coalesce .Values.repositories.image.dockerHub .Values.global.imageRegistry .Values.images.nginxS3Gateway.registry | quote }}
|
||||||
|
repository: {{ .Values.images.nginxS3Gateway.repository | quote }}
|
||||||
|
imagePullPolicy: {{ .Values.global.imagePullPolicy | quote }}
|
||||||
|
tag: {{ .Values.images.nginxS3Gateway.tag | quote }}
|
||||||
|
|
||||||
|
ingress:
|
||||||
|
enabled: {{ .Values.ingress.enabled }}
|
||||||
|
ingressClassName: {{ .Values.ingress.ingressClassName | quote }}
|
||||||
|
host: "{{ .Values.global.hosts.nubus }}.{{ .Values.global.domain }}"
|
||||||
|
annotations:
|
||||||
|
nginx.ingress.kubernetes.io/rewrite-target: "/portal-assets/icons/$2/$3"
|
||||||
|
nginx.ingress.kubernetes.io/use-regex: "true"
|
||||||
|
path: "/univention/(portal|selfservice)/icons/(logos|entries)/(.*)$"
|
||||||
|
tls:
|
||||||
|
secretName: {{ .Values.ingress.tls.secretName | quote }}
|
||||||
|
|
||||||
|
configuration:
|
||||||
|
bucket: {{ .Values.objectstores.nubus.bucket | quote }}
|
||||||
|
endpoint: {{ .Values.objectstores.nubus.endpoint | default (printf "%s.%s" .Values.global.hosts.minioApi .Values.global.domain) | quote }}
|
||||||
|
port: 443
|
||||||
|
region: {{ .Values.objectstores.nubus.region | quote }}
|
||||||
|
style: "path"
|
||||||
|
credentials:
|
||||||
|
accessKey:
|
||||||
|
value: {{ .Values.objectstores.nubus.username | quote }}
|
||||||
|
secretKey:
|
||||||
|
value: {{ .Values.objectstores.nubus.secretKey | default .Values.secrets.minio.umsUser | quote }}
|
||||||
|
|
||||||
|
resources:
|
||||||
|
{{ .Values.resources.nginxS3Gateway | toYaml | nindent 2 }}
|
||||||
|
|
||||||
|
replicaCount: {{ .Values.replicas.nginxS3Gateway }}
|
||||||
|
...
|
||||||
@@ -144,6 +144,10 @@ global:
|
|||||||
groups: __DELETE_KEY__
|
groups: __DELETE_KEY__
|
||||||
|
|
||||||
ingress:
|
ingress:
|
||||||
|
# temporary fix
|
||||||
|
{{- if not .Values.minio.enabled }}
|
||||||
|
enabled: false
|
||||||
|
{{- end }}
|
||||||
certManager:
|
certManager:
|
||||||
enabled: false
|
enabled: false
|
||||||
tls:
|
tls:
|
||||||
@@ -333,7 +337,7 @@ nubusPortalConsumer:
|
|||||||
enabled: true
|
enabled: true
|
||||||
portalConsumer:
|
portalConsumer:
|
||||||
logLevel: {{ if .Values.debug.enabled }}"DEBUG"{{ else }}"INFO"{{ end }}
|
logLevel: {{ if .Values.debug.enabled }}"DEBUG"{{ else }}"INFO"{{ end }}
|
||||||
objectStorageEndpoint: {{ .Values.objectstores.nubus.endpoint | default (printf "https://%s.%s" .Values.global.hosts.minioApi .Values.global.domain) | quote }}
|
objectStorageEndpoint: {{ printf "https://%s" (.Values.objectstores.nubus.endpoint | default (printf "%s.%s" .Values.global.hosts.minioApi .Values.global.domain)) | quote }}
|
||||||
objectStorageBucket: {{ .Values.objectstores.nubus.bucket | quote }}
|
objectStorageBucket: {{ .Values.objectstores.nubus.bucket | quote }}
|
||||||
provisioningApi:
|
provisioningApi:
|
||||||
auth:
|
auth:
|
||||||
@@ -341,7 +345,7 @@ nubusPortalConsumer:
|
|||||||
|
|
||||||
nubusPortalServer:
|
nubusPortalServer:
|
||||||
portalServer:
|
portalServer:
|
||||||
objectStorageEndpoint: {{ .Values.objectstores.nubus.endpoint | default (printf "https://%s.%s" .Values.global.hosts.minioApi .Values.global.domain) | quote }}
|
objectStorageEndpoint: {{ printf "https://%s" (.Values.objectstores.nubus.endpoint | default (printf "%s.%s" .Values.global.hosts.minioApi .Values.global.domain)) | quote }}
|
||||||
objectStorageBucket: {{ .Values.objectstores.nubus.bucket | quote }}
|
objectStorageBucket: {{ .Values.objectstores.nubus.bucket | quote }}
|
||||||
objectStorageCredentialSecret:
|
objectStorageCredentialSecret:
|
||||||
name: "ums-portal-server-minio-opendesk-credentials"
|
name: "ums-portal-server-minio-opendesk-credentials"
|
||||||
@@ -397,6 +401,7 @@ nubusStackDataUms:
|
|||||||
templateContext:
|
templateContext:
|
||||||
# creates the default.user and default.admin
|
# creates the default.user and default.admin
|
||||||
loadDevData: true
|
loadDevData: true
|
||||||
|
portalEnforceLogin: {{ .Values.functional.portal.enforceLogin }}
|
||||||
portalHeaderLogo: {{ toYaml .Values.theme.imagery.logoHeaderSvgB64 | quote }}
|
portalHeaderLogo: {{ toYaml .Values.theme.imagery.logoHeaderSvgB64 | quote }}
|
||||||
portalTiles: {{ toYaml .Values.theme.imagery.portalTiles | nindent 6 }}
|
portalTiles: {{ toYaml .Values.theme.imagery.portalTiles | nindent 6 }}
|
||||||
portalRealtimeCollaborationLinkBase: {{ printf "https://%s.%s" .Values.global.hosts.element .Values.global.domain }}
|
portalRealtimeCollaborationLinkBase: {{ printf "https://%s.%s" .Values.global.hosts.element .Values.global.domain }}
|
||||||
|
|||||||
@@ -15,22 +15,22 @@ repositories:
|
|||||||
# Open-Xchange
|
# Open-Xchange
|
||||||
- name: "open-xchange-repo"
|
- name: "open-xchange-repo"
|
||||||
keyring: "../../files/gpg-pubkeys/open-xchange-com.gpg"
|
keyring: "../../files/gpg-pubkeys/open-xchange-com.gpg"
|
||||||
verify: {{ .Values.charts.openXchangeAppSuite.verify }}
|
verify: {{ .Values.charts.oxAppSuite.verify }}
|
||||||
username: {{ env "OD_PRIVATE_REGISTRY_USERNAME" | quote }}
|
username: {{ env "OD_PRIVATE_REGISTRY_USERNAME" | quote }}
|
||||||
password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
|
password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
|
||||||
oci: true
|
oci: true
|
||||||
url: "{{ .Values.global.helmRegistry | default .Values.charts.openXchangeAppSuite.registry }}/{{ .Values.charts.openXchangeAppSuite.repository }}"
|
url: "{{ .Values.global.helmRegistry | default .Values.charts.oxAppSuite.registry }}/{{ .Values.charts.oxAppSuite.repository }}"
|
||||||
|
|
||||||
# openDesk Open-Xchange Bootstrap
|
# openDesk Open-Xchange Bootstrap
|
||||||
# Source:
|
# Source:
|
||||||
# https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-open-xchange-bootstrap
|
# https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-open-xchange-bootstrap
|
||||||
- name: "open-xchange-bootstrap-repo"
|
- name: "open-xchange-bootstrap-repo"
|
||||||
keyring: "../../files/gpg-pubkeys/opencode.gpg"
|
keyring: "../../files/gpg-pubkeys/opencode.gpg"
|
||||||
verify: {{ .Values.charts.openXchangeAppSuiteBootstrap.verify }}
|
verify: {{ .Values.charts.oxAppSuiteBootstrap.verify }}
|
||||||
username: {{ env "OD_PRIVATE_REGISTRY_USERNAME" | quote }}
|
username: {{ env "OD_PRIVATE_REGISTRY_USERNAME" | quote }}
|
||||||
password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
|
password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
|
||||||
oci: true
|
oci: true
|
||||||
url: "{{ .Values.global.helmRegistry | default .Values.charts.openXchangeAppSuiteBootstrap.registry }}/{{ .Values.charts.openXchangeAppSuiteBootstrap.repository }}"
|
url: "{{ .Values.global.helmRegistry | default .Values.charts.oxAppSuiteBootstrap.registry }}/{{ .Values.charts.oxAppSuiteBootstrap.repository }}"
|
||||||
|
|
||||||
# OX Connector
|
# OX Connector
|
||||||
- name: "ox-connector-repo"
|
- name: "ox-connector-repo"
|
||||||
@@ -45,27 +45,33 @@ releases:
|
|||||||
version: "{{ .Values.charts.dovecot.version }}"
|
version: "{{ .Values.charts.dovecot.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-dovecot.yaml.gotmpl"
|
- "values-dovecot.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.dovecot | default "additionalValues: false" }}
|
{{ range .Values.customization.release.dovecot }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.dovecot.enabled }}
|
installed: {{ .Values.dovecot.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
- name: "open-xchange"
|
- name: "open-xchange"
|
||||||
chart: "open-xchange-repo/{{ .Values.charts.openXchangeAppSuite.name }}"
|
chart: "open-xchange-repo/{{ .Values.charts.oxAppSuite.name }}"
|
||||||
version: "{{ .Values.charts.openXchangeAppSuite.version }}"
|
version: "{{ .Values.charts.oxAppSuite.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-openxchange.yaml.gotmpl"
|
- "values-openxchange.yaml.gotmpl"
|
||||||
- "values-openxchange-enterprise-contact-picker.yaml.gotmpl"
|
- "values-openxchange-enterprise-contact-picker.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.openXchange | default "additionalValues: false" }}
|
{{ range .Values.customization.release.openxchange }}
|
||||||
installed: {{ .Values.oxAppsuite.enabled }}
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
|
installed: {{ .Values.oxAppSuite.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
- name: "opendesk-open-xchange-bootstrap"
|
- name: "opendesk-open-xchange-bootstrap"
|
||||||
chart: "open-xchange-bootstrap-repo/{{ .Values.charts.openXchangeAppSuiteBootstrap.name }}"
|
chart: "open-xchange-bootstrap-repo/{{ .Values.charts.oxAppSuiteBootstrap.name }}"
|
||||||
version: "{{ .Values.charts.openXchangeAppSuiteBootstrap.version }}"
|
version: "{{ .Values.charts.oxAppSuiteBootstrap.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-openxchange-bootstrap.yaml.gotmpl"
|
- "values-openxchange-bootstrap.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskOpenXchangeBootstrap | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskOpenxchangeBootstrap }}
|
||||||
installed: {{ .Values.oxAppsuite.enabled }}
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
|
installed: {{ .Values.oxAppSuite.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
- name: "ox-connector"
|
- name: "ox-connector"
|
||||||
@@ -73,12 +79,14 @@ releases:
|
|||||||
version: "{{ .Values.charts.oxConnector.version }}"
|
version: "{{ .Values.charts.oxConnector.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-oxconnector.yaml.gotmpl"
|
- "values-oxconnector.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.oxConnector | default "additionalValues: false" }}
|
{{ range .Values.customization.release.oxConnector }}
|
||||||
installed: {{ .Values.oxAppsuite.enabled }}
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
|
installed: {{ .Values.oxAppSuite.enabled }}
|
||||||
needs:
|
needs:
|
||||||
- "open-xchange"
|
- "open-xchange"
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-1"
|
deployStage: "050-components"
|
||||||
component: "open-xchange"
|
component: "open-xchange"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -17,8 +17,8 @@ dovecot:
|
|||||||
mailDomain: {{ .Values.global.mailDomain | default .Values.global.domain | quote }}
|
mailDomain: {{ .Values.global.mailDomain | default .Values.global.domain | quote }}
|
||||||
password: {{ .Values.secrets.dovecot.doveadm | quote }}
|
password: {{ .Values.secrets.dovecot.doveadm | quote }}
|
||||||
migration:
|
migration:
|
||||||
enabled: {{ .Values.functional.migration.oxAppsuite.enabled }}
|
enabled: {{ .Values.functional.migration.oxAppSuite.enabled }}
|
||||||
masterPassword: {{ .Values.secrets.oxAppsuite.migrationsMasterPassword | quote }}
|
masterPassword: {{ .Values.secrets.oxAppSuite.migrationsMasterPassword | quote }}
|
||||||
ldap:
|
ldap:
|
||||||
enabled: true
|
enabled: true
|
||||||
host: {{ .Values.ldap.host | quote }}
|
host: {{ .Values.ldap.host | quote }}
|
||||||
|
|||||||
@@ -7,16 +7,16 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
global:
|
global:
|
||||||
hostname: "{{ .Values.global.hosts.openxchange }}.{{ .Values.global.domain }}"
|
hostname: "{{ .Values.global.hosts.openxchange }}.{{ .Values.global.domain }}"
|
||||||
appsuite:
|
appsuite:
|
||||||
cookieHashSalt: {{ .Values.secrets.oxAppsuite.cookieHashSalt }}
|
cookieHashSalt: {{ .Values.secrets.oxAppSuite.cookieHashSalt }}
|
||||||
shareCryptKey: {{ .Values.secrets.oxAppsuite.shareCryptKey }}
|
shareCryptKey: {{ .Values.secrets.oxAppSuite.shareCryptKey }}
|
||||||
sessiondEncryptionKey: {{ .Values.secrets.oxAppsuite.sessiondEncryptionKey }}
|
sessiondEncryptionKey: {{ .Values.secrets.oxAppSuite.sessiondEncryptionKey }}
|
||||||
mysql:
|
mysql:
|
||||||
host: {{ .Values.databases.oxAppsuite.host | quote }}
|
host: {{ .Values.databases.oxAppSuite.host | quote }}
|
||||||
database: {{ .Values.databases.oxAppsuite.name | quote }}
|
database: {{ .Values.databases.oxAppSuite.name | quote }}
|
||||||
auth:
|
auth:
|
||||||
user: {{ .Values.databases.oxAppsuite.username | quote }}
|
user: {{ .Values.databases.oxAppSuite.username | quote }}
|
||||||
password: {{ .Values.databases.oxAppsuite.password | default .Values.secrets.mariadb.rootPassword | quote }}
|
password: {{ .Values.databases.oxAppSuite.password | default .Values.secrets.mariadb.rootPassword | quote }}
|
||||||
rootPassword: {{ .Values.databases.oxAppsuite.password | default .Values.secrets.mariadb.rootPassword | quote }}
|
rootPassword: {{ .Values.databases.oxAppSuite.password | default .Values.secrets.mariadb.rootPassword | quote }}
|
||||||
|
|
||||||
nextcloud-integration-ui:
|
nextcloud-integration-ui:
|
||||||
image:
|
image:
|
||||||
@@ -105,9 +105,9 @@ appsuite:
|
|||||||
routes:
|
routes:
|
||||||
http-api-routes-appsuite-api:
|
http-api-routes-appsuite-api:
|
||||||
annotations:
|
annotations:
|
||||||
nginx.ingress.kubernetes.io/proxy-body-size: "{{ .Values.ingress.parameters.bodySize.openXchangeAppSuite }}"
|
nginx.ingress.kubernetes.io/proxy-body-size: "{{ .Values.ingress.parameters.bodySize.oxAppSuite }}"
|
||||||
nginx.ingress.kubernetes.io/proxy-read-timeout: "{{ .Values.ingress.parameters.bodyTimeout.openXchangeAppSuite }}"
|
nginx.ingress.kubernetes.io/proxy-read-timeout: "{{ .Values.ingress.parameters.bodyTimeout.oxAppSuite }}"
|
||||||
nginx.ingress.kubernetes.io/proxy-send-timeout: "{{ .Values.ingress.parameters.bodyTimeout.openXchangeAppSuite }}"
|
nginx.ingress.kubernetes.io/proxy-send-timeout: "{{ .Values.ingress.parameters.bodyTimeout.oxAppSuite }}"
|
||||||
trailslash:
|
trailslash:
|
||||||
enabled: false
|
enabled: false
|
||||||
core-mw:
|
core-mw:
|
||||||
@@ -119,13 +119,13 @@ appsuite:
|
|||||||
oidcLogin: true
|
oidcLogin: true
|
||||||
oidcPath: "/oidc"
|
oidcPath: "/oidc"
|
||||||
masterAdmin: "admin"
|
masterAdmin: "admin"
|
||||||
masterPassword: {{ .Values.secrets.oxAppsuite.adminPassword | quote }}
|
masterPassword: {{ .Values.secrets.oxAppSuite.adminPassword | quote }}
|
||||||
hzGroupName: "hzgroup"
|
hzGroupName: "hzgroup"
|
||||||
hzGroupPassword: {{ .Values.secrets.oxAppsuite.hzGroupPassword | quote }}
|
hzGroupPassword: {{ .Values.secrets.oxAppSuite.hzGroupPassword | quote }}
|
||||||
basicAuthLogin: "oxlogin"
|
basicAuthLogin: "oxlogin"
|
||||||
basicAuthPassword: {{ .Values.secrets.oxAppsuite.basicAuthPassword | quote }}
|
basicAuthPassword: {{ .Values.secrets.oxAppSuite.basicAuthPassword | quote }}
|
||||||
jolokiaLogin: "jolokia"
|
jolokiaLogin: "jolokia"
|
||||||
jolokiaPassword: {{ .Values.secrets.oxAppsuite.jolokiaPassword | quote }}
|
jolokiaPassword: {{ .Values.secrets.oxAppSuite.jolokiaPassword | quote }}
|
||||||
hostname: "{{ .Values.global.hosts.openxchange }}.{{ .Values.global.domain }}"
|
hostname: "{{ .Values.global.hosts.openxchange }}.{{ .Values.global.domain }}"
|
||||||
podAnnotations: {}
|
podAnnotations: {}
|
||||||
serviceAccount:
|
serviceAccount:
|
||||||
@@ -174,7 +174,7 @@ appsuite:
|
|||||||
chown open-xchange:open-xchange /opt/open-xchange/guard-files
|
chown open-xchange:open-xchange /opt/open-xchange/guard-files
|
||||||
packages:
|
packages:
|
||||||
status:
|
status:
|
||||||
{{- if .Values.functional.migration.oxAppsuite.enabled }}
|
{{- if .Values.functional.migration.oxAppSuite.enabled }}
|
||||||
open-xchange-authentication-masterpassword: "enabled"
|
open-xchange-authentication-masterpassword: "enabled"
|
||||||
open-xchange-authentication-ldap: "disabled"
|
open-xchange-authentication-ldap: "disabled"
|
||||||
open-xchange-authentication-oauth: "disabled"
|
open-xchange-authentication-oauth: "disabled"
|
||||||
@@ -301,7 +301,7 @@ appsuite:
|
|||||||
{{- if .Values.certificate.selfSigned }}
|
{{- if .Values.certificate.selfSigned }}
|
||||||
extraEnv:
|
extraEnv:
|
||||||
- name: "JAVA_OPTS_APPEND"
|
- name: "JAVA_OPTS_APPEND"
|
||||||
value: {{ printf "%s %s=%s" "-Djavax.net.ssl.trustStore=/etc/ssl/certs/truststore.jks -Djavax.net.ssl.trustStoreType=jks" "-Djavax.net.ssl.trustStorePassword" (.Values.secrets.certificates.password | quote) | quote }}
|
value: {{ printf "%s %s=%s" "-Djavax.net.ssl.trustStore=/etc/ssl/certs/truststore.jks -Djavax.net.ssl.trustStoreType=jks" "-Djavax.net.ssl.trustStorePassword" .Values.secrets.certificates.password | quote }}
|
||||||
extraVolumes:
|
extraVolumes:
|
||||||
- name: "trusted-cert-secret-volume"
|
- name: "trusted-cert-secret-volume"
|
||||||
secret:
|
secret:
|
||||||
@@ -316,13 +316,13 @@ appsuite:
|
|||||||
mountPath: "/etc/ssl/certs/"
|
mountPath: "/etc/ssl/certs/"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
secretProperties:
|
secretProperties:
|
||||||
com.openexchange.cookie.hash.salt: {{ .Values.secrets.oxAppsuite.cookieHashSalt | quote }}
|
com.openexchange.cookie.hash.salt: {{ .Values.secrets.oxAppSuite.cookieHashSalt | quote }}
|
||||||
com.openexchange.sessiond.encryptionKey: {{ .Values.secrets.oxAppsuite.sessiondEncryptionKey | quote }}
|
com.openexchange.sessiond.encryptionKey: {{ .Values.secrets.oxAppSuite.sessiondEncryptionKey | quote }}
|
||||||
com.openexchange.share.cryptKey: {{ .Values.secrets.oxAppsuite.shareCryptKey | quote }}
|
com.openexchange.share.cryptKey: {{ .Values.secrets.oxAppSuite.shareCryptKey | quote }}
|
||||||
com.openexchange.conference.element.authToken: {{ .Values.secrets.oxAppsuite.synapseAsToken | quote }}
|
com.openexchange.conference.element.authToken: {{ .Values.secrets.oxAppSuite.synapseAsToken | quote }}
|
||||||
propertiesFiles:
|
propertiesFiles:
|
||||||
/opt/open-xchange/etc/masterpassword-authentication.properties:
|
/opt/open-xchange/etc/masterpassword-authentication.properties:
|
||||||
com.openexchange.authentication.masterpassword.password: {{ .Values.secrets.oxAppsuite.migrationsMasterPassword | quote }}
|
com.openexchange.authentication.masterpassword.password: {{ .Values.secrets.oxAppSuite.migrationsMasterPassword | quote }}
|
||||||
/opt/open-xchange/etc/AdminDaemon.properties:
|
/opt/open-xchange/etc/AdminDaemon.properties:
|
||||||
MASTER_ACCOUNT_OVERRIDE: "true"
|
MASTER_ACCOUNT_OVERRIDE: "true"
|
||||||
/opt/open-xchange/etc/AdminUser.properties:
|
/opt/open-xchange/etc/AdminUser.properties:
|
||||||
@@ -336,12 +336,17 @@ appsuite:
|
|||||||
bindOnly: "false"
|
bindOnly: "false"
|
||||||
/opt/open-xchange/etc/antivirus.properties:
|
/opt/open-xchange/etc/antivirus.properties:
|
||||||
com.openexchange.antivirus.enabled: "true"
|
com.openexchange.antivirus.enabled: "true"
|
||||||
|
{{- if .Values.antivirus.icap.host }}
|
||||||
|
com.openexchange.antivirus.server: {{ .Values.antivirus.icap.host | quote }}
|
||||||
|
com.openexchange.antivirus.port: {{ .Values.antivirus.icap.port | quote }}
|
||||||
|
{{- else }}
|
||||||
{{- if .Values.clamavDistributed.enabled }}
|
{{- if .Values.clamavDistributed.enabled }}
|
||||||
com.openexchange.antivirus.server: "clamav-icap"
|
com.openexchange.antivirus.server: "clamav-icap"
|
||||||
{{- else if .Values.clamavSimple.enabled }}
|
{{- else if .Values.clamavSimple.enabled }}
|
||||||
com.openexchange.antivirus.server: "clamav-simple"
|
com.openexchange.antivirus.server: "clamav-simple"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
com.openexchange.antivirus.port: "1344"
|
com.openexchange.antivirus.port: "1344"
|
||||||
|
{{- end }}
|
||||||
com.openexchange.antivirus.maxFileSize: "1024"
|
com.openexchange.antivirus.maxFileSize: "1024"
|
||||||
uiSettings:
|
uiSettings:
|
||||||
io.ox.nextcloud//server: "https://{{ .Values.global.hosts.intercomService }}.{{ .Values.global.domain }}/fs/"
|
io.ox.nextcloud//server: "https://{{ .Values.global.hosts.intercomService }}.{{ .Values.global.domain }}/fs/"
|
||||||
@@ -387,16 +392,17 @@ appsuite:
|
|||||||
# MC+base64(20 random bytes)
|
# MC+base64(20 random bytes)
|
||||||
# RC+base64(20 random bytes)
|
# RC+base64(20 random bytes)
|
||||||
oxguardpass: |
|
oxguardpass: |
|
||||||
{{ .Values.secrets.oxAppsuite.oxguardMC }}
|
{{ .Values.secrets.oxAppSuite.oxguardMC }}
|
||||||
{{ .Values.secrets.oxAppsuite.oxguardRC }}
|
{{ .Values.secrets.oxAppSuite.oxguardRC }}
|
||||||
redis: &redisConfiguration
|
redis: &redisConfiguration
|
||||||
enabled: true
|
enabled: true
|
||||||
mode: "standalone"
|
mode: "standalone"
|
||||||
hosts:
|
hosts:
|
||||||
- "redis-master:6379"
|
- {{ printf "%s:%v" .Values.cache.oxAppSuite.host .Values.cache.oxAppSuite.port | quote }}
|
||||||
auth:
|
auth:
|
||||||
enabled: true
|
enabled: true
|
||||||
password: {{ .Values.secrets.redis.password | quote }}
|
username: {{ .Values.cache.oxAppSuite.username | quote }}
|
||||||
|
password: {{ .Values.cache.oxAppSuite.password | default .Values.secrets.redis.password | quote }}
|
||||||
image:
|
image:
|
||||||
registry: {{ coalesce .Values.repositories.image.registryOpencodeDe .Values.global.imageRegistry .Values.images.openxchangeCoreMW.registry | quote }}
|
registry: {{ coalesce .Values.repositories.image.registryOpencodeDe .Values.global.imageRegistry .Values.images.openxchangeCoreMW.registry | quote }}
|
||||||
repository: {{ .Values.images.openxchangeCoreMW.repository | quote }}
|
repository: {{ .Values.images.openxchangeCoreMW.repository | quote }}
|
||||||
@@ -495,9 +501,9 @@ appsuite:
|
|||||||
|
|
||||||
core-documentconverter:
|
core-documentconverter:
|
||||||
adminUser: "admin"
|
adminUser: "admin"
|
||||||
adminPassword: {{ .Values.secrets.oxAppsuite.adminPassword | quote }}
|
adminPassword: {{ .Values.secrets.oxAppSuite.adminPassword | quote }}
|
||||||
basicAuthLogin: "oxlogin"
|
basicAuthLogin: "oxlogin"
|
||||||
basicAuthPassword: {{ .Values.secrets.oxAppsuite.basicAuthPassword | quote }}
|
basicAuthPassword: {{ .Values.secrets.oxAppSuite.basicAuthPassword | quote }}
|
||||||
enabled: true
|
enabled: true
|
||||||
documentConverter:
|
documentConverter:
|
||||||
cache:
|
cache:
|
||||||
@@ -582,9 +588,9 @@ appsuite:
|
|||||||
core-imageconverter:
|
core-imageconverter:
|
||||||
enabled: true
|
enabled: true
|
||||||
adminUser: "admin"
|
adminUser: "admin"
|
||||||
adminPassword: {{ .Values.secrets.oxAppsuite.adminPassword | quote }}
|
adminPassword: {{ .Values.secrets.oxAppSuite.adminPassword | quote }}
|
||||||
basicAuthLogin: "oxlogin"
|
basicAuthLogin: "oxlogin"
|
||||||
basicAuthPassword: {{ .Values.secrets.oxAppsuite.basicAuthPassword | quote }}
|
basicAuthPassword: {{ .Values.secrets.oxAppSuite.basicAuthPassword | quote }}
|
||||||
image:
|
image:
|
||||||
registry: {{ coalesce .Values.repositories.image.registryOpencodeDe .Values.global.imageRegistry .Values.images.openxchangeImageConverter.registry | quote }}
|
registry: {{ coalesce .Values.repositories.image.registryOpencodeDe .Values.global.imageRegistry .Values.images.openxchangeImageConverter.registry | quote }}
|
||||||
repository: {{ .Values.images.openxchangeImageConverter.repository | quote }}
|
repository: {{ .Values.images.openxchangeImageConverter.repository | quote }}
|
||||||
|
|||||||
@@ -50,7 +50,7 @@ oxConnector:
|
|||||||
oxLocalTimezone: "Europe/Berlin"
|
oxLocalTimezone: "Europe/Berlin"
|
||||||
oxLanguage: "de_DE"
|
oxLanguage: "de_DE"
|
||||||
oxMasterAdmin: "admin"
|
oxMasterAdmin: "admin"
|
||||||
oxMasterPassword: {{ .Values.secrets.oxAppsuite.adminPassword | quote }}
|
oxMasterPassword: {{ .Values.secrets.oxAppSuite.adminPassword | quote }}
|
||||||
oxSmtpServer: "smtp://127.0.0.1:587"
|
oxSmtpServer: "smtp://127.0.0.1:587"
|
||||||
oxSoapServer: "https://{{ .Values.global.hosts.openxchange }}.{{ .Values.global.domain }}"
|
oxSoapServer: "https://{{ .Values.global.hosts.openxchange }}.{{ .Values.global.domain }}"
|
||||||
|
|
||||||
|
|||||||
@@ -20,11 +20,13 @@ releases:
|
|||||||
waitForJobs: true
|
waitForJobs: true
|
||||||
values:
|
values:
|
||||||
- "values.yaml.gotmpl"
|
- "values.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskOpenprojectBootstrap | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskOpenprojectBootstrap }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.openproject.enabled }}
|
installed: {{ .Values.openproject.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-2"
|
deployStage: "060-components"
|
||||||
component: "opendesk-openproject-bootstrap"
|
component: "opendesk-openproject-bootstrap"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -20,11 +20,13 @@ releases:
|
|||||||
waitForJobs: true
|
waitForJobs: true
|
||||||
values:
|
values:
|
||||||
- "values.yaml.gotmpl"
|
- "values.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.openproject | default "additionalValues: false" }}
|
{{ range .Values.customization.release.openproject }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.openproject.enabled }}
|
installed: {{ .Values.openproject.enabled }}
|
||||||
timeout: 1800
|
timeout: 1800
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-1"
|
deployStage: "050-components"
|
||||||
component: "openproject"
|
component: "openproject"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -40,7 +40,9 @@ dbInit:
|
|||||||
environment:
|
environment:
|
||||||
# For more details and more options see
|
# For more details and more options see
|
||||||
# https://www.openproject.org/docs/installation-and-operations/configuration/environment/
|
# https://www.openproject.org/docs/installation-and-operations/configuration/environment/
|
||||||
OPENPROJECT_LOG__LEVEL: {{ if .Values.debug.enabled }}"debug"{{ else }}"warn"{{ end }}
|
OPENPROJECT_APP__TITLE: "Projects | {{ .Values.theme.texts.productName }}"
|
||||||
|
OPENPROJECT_LOG__LEVEL: {{ if .Values.debug.enabled }}"debug"{{ else }}"info"{{ end }}
|
||||||
|
OPENPROJECT_APP__TITLE: "Projects | {{ .Values.theme.texts.productName }}"
|
||||||
OPENPROJECT_LOGIN__REQUIRED: "true"
|
OPENPROJECT_LOGIN__REQUIRED: "true"
|
||||||
OPENPROJECT_USER__DEFAULT__TIMEZONE: "Europe/Berlin"
|
OPENPROJECT_USER__DEFAULT__TIMEZONE: "Europe/Berlin"
|
||||||
OPENPROJECT_OAUTH__ALLOW__REMAPPING__OF__EXISTING__USERS: "true"
|
OPENPROJECT_OAUTH__ALLOW__REMAPPING__OF__EXISTING__USERS: "true"
|
||||||
@@ -84,9 +86,6 @@ environment:
|
|||||||
OPENPROJECT_HOME__URL: {{ printf "https://%s.%s/" .Values.global.hosts.nubus .Values.global.domain | quote }}
|
OPENPROJECT_HOME__URL: {{ printf "https://%s.%s/" .Values.global.hosts.nubus .Values.global.domain | quote }}
|
||||||
OPENPROJECT_OPENID__CONNECT_KEYCLOAK_ISSUER: "https://{{ .Values.global.hosts.keycloak }}.{{ .Values.global.domain }}/realms/{{ .Values.platform.realm }}"
|
OPENPROJECT_OPENID__CONNECT_KEYCLOAK_ISSUER: "https://{{ .Values.global.hosts.keycloak }}.{{ .Values.global.domain }}/realms/{{ .Values.platform.realm }}"
|
||||||
OPENPROJECT_OPENID__CONNECT_KEYCLOAK_POST__LOGOUT__REDIRECT__URI: "https://{{ .Values.global.hosts.openproject }}.{{ .Values.global.domain }}/"
|
OPENPROJECT_OPENID__CONNECT_KEYCLOAK_POST__LOGOUT__REDIRECT__URI: "https://{{ .Values.global.hosts.openproject }}.{{ .Values.global.domain }}/"
|
||||||
{{- if .Values.enterprise.openproject.token }}
|
|
||||||
OPENPROJECT_ENTERPRISE__TOKEN: {{ .Values.enterprise.openproject.token | quote }}
|
|
||||||
{{- end }}
|
|
||||||
{{- if .Values.certificate.selfSigned }}
|
{{- if .Values.certificate.selfSigned }}
|
||||||
SSL_CERT_FILE: "/etc/ssl/certs/ca-certificates.crt"
|
SSL_CERT_FILE: "/etc/ssl/certs/ca-certificates.crt"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
@@ -192,8 +191,8 @@ s3:
|
|||||||
enabled: true
|
enabled: true
|
||||||
directUploads: {{ .Values.objectstores.openproject.directUploads }}
|
directUploads: {{ .Values.objectstores.openproject.directUploads }}
|
||||||
enableSignatureV4Streaming: {{ .Values.objectstores.openproject.enableSignatureV4Streaming }}
|
enableSignatureV4Streaming: {{ .Values.objectstores.openproject.enableSignatureV4Streaming }}
|
||||||
endpoint: {{ .Values.objectstores.openproject.endpoint | default (printf "https://%s.%s" .Values.global.hosts.minioApi .Values.global.domain) | quote }}
|
endpoint: {{ printf "https://%s" (.Values.objectstores.openproject.endpoint | default (printf "%s.%s" .Values.global.hosts.minioApi .Values.global.domain)) | quote }}
|
||||||
host: {{ .Values.objectstores.openproject.endpoint | default (printf "https://%s.%s" .Values.global.hosts.minioApi .Values.global.domain) | quote }}
|
host: {{ printf "https://%s" (.Values.objectstores.openproject.endpoint | default (printf "%s.%s" .Values.global.hosts.minioApi .Values.global.domain)) | quote }}
|
||||||
pathStyle: {{ .Values.objectstores.openproject.pathStyle }}
|
pathStyle: {{ .Values.objectstores.openproject.pathStyle }}
|
||||||
region: {{ .Values.objectstores.openproject.region | quote }}
|
region: {{ .Values.objectstores.openproject.region | quote }}
|
||||||
bucketName: {{ .Values.objectstores.openproject.bucket | quote }}
|
bucketName: {{ .Values.objectstores.openproject.bucket | quote }}
|
||||||
|
|||||||
@@ -89,6 +89,16 @@ repositories:
|
|||||||
oci: true
|
oci: true
|
||||||
url: "{{ .Values.global.helmRegistry | default .Values.charts.clamavSimple.registry }}/{{ .Values.charts.clamavSimple.repository }}"
|
url: "{{ .Values.global.helmRegistry | default .Values.charts.clamavSimple.registry }}/{{ .Values.charts.clamavSimple.repository }}"
|
||||||
|
|
||||||
|
# openDesk Alerts
|
||||||
|
# https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-alerts
|
||||||
|
- name: "opendesk-alerts-repo"
|
||||||
|
keyring: "../../files/gpg-pubkeys/opencode.gpg"
|
||||||
|
verify: {{ .Values.charts.opendeskAlerts.verify }}
|
||||||
|
username: {{ env "OD_PRIVATE_REGISTRY_USERNAME" | quote }}
|
||||||
|
password: {{ env "OD_PRIVATE_REGISTRY_PASSWORD" | quote }}
|
||||||
|
oci: true
|
||||||
|
url: "{{ .Values.global.helmRegistry | default .Values.charts.opendeskAlerts.registry }}/{{ .Values.charts.opendeskAlerts.repository }}"
|
||||||
|
|
||||||
# VMWare Bitnami
|
# VMWare Bitnami
|
||||||
# Source: https://github.com/bitnami/charts/
|
# Source: https://github.com/bitnami/charts/
|
||||||
- name: "memcached-repo"
|
- name: "memcached-repo"
|
||||||
@@ -113,13 +123,27 @@ repositories:
|
|||||||
oci: true
|
oci: true
|
||||||
url: "{{ .Values.global.helmRegistry | default .Values.charts.minio.registry }}/{{ .Values.charts.minio.repository }}"
|
url: "{{ .Values.global.helmRegistry | default .Values.charts.minio.registry }}/{{ .Values.charts.minio.repository }}"
|
||||||
|
|
||||||
|
# openDesk Enterprise Repositories
|
||||||
|
|
||||||
|
# Cassandra
|
||||||
|
# Source: https://github.com/bitnami/charts/
|
||||||
|
- name: "cassandra-repo"
|
||||||
|
keyring: "../../files/gpg-pubkeys/opencode.gpg"
|
||||||
|
verify: {{ .Values.charts.cassandra.verify }}
|
||||||
|
username: {{ env "OD_ENTERPRISE_PRIVATE_REGISTRY_USERNAME" | quote }}
|
||||||
|
password: {{ env "OD_ENTERPRISE_PRIVATE_REGISTRY_PASSWORD" | quote }}
|
||||||
|
oci: true
|
||||||
|
url: "{{ .Values.global.helmRegistry | default .Values.charts.cassandra.registry }}/{{ .Values.charts.cassandra.repository }}"
|
||||||
|
|
||||||
releases:
|
releases:
|
||||||
- name: "opendesk-otterize"
|
- name: "opendesk-otterize"
|
||||||
chart: "otterize-repo/{{ .Values.charts.otterize.name }}"
|
chart: "otterize-repo/{{ .Values.charts.otterize.name }}"
|
||||||
version: "{{ .Values.charts.otterize.version }}"
|
version: "{{ .Values.charts.otterize.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-otterize.yaml.gotmpl"
|
- "values-otterize.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskOtterize | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskOtterize }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.security.otterizeIntents.enabled }}
|
installed: {{ .Values.security.otterizeIntents.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -128,7 +152,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.home.version }}"
|
version: "{{ .Values.charts.home.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-home.yaml.gotmpl"
|
- "values-home.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskHome | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskHome }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.home.enabled }}
|
installed: {{ .Values.home.enabled }}
|
||||||
|
|
||||||
- name: "opendesk-certificates"
|
- name: "opendesk-certificates"
|
||||||
@@ -136,16 +162,31 @@ releases:
|
|||||||
version: "{{ .Values.charts.certificates.version }}"
|
version: "{{ .Values.charts.certificates.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-certificates.yaml.gotmpl"
|
- "values-certificates.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskCertificates | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskCertificates }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.certificates.enabled }}
|
installed: {{ .Values.certificates.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
|
- name: "opendesk-alerts"
|
||||||
|
chart: "opendesk-alerts-repo/{{ .Values.charts.opendeskAlerts.name }}"
|
||||||
|
version: "{{ .Values.charts.opendeskAlerts.version }}"
|
||||||
|
values:
|
||||||
|
- "values-opendesk-alerts.yaml.gotmpl"
|
||||||
|
{{ range .Values.customization.release.opendeskAlerts}}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
|
installed: {{ .Values.monitoring.prometheus.prometheusRules.enabled }}
|
||||||
|
timeout: 900
|
||||||
|
|
||||||
- name: "redis"
|
- name: "redis"
|
||||||
chart: "redis-repo/{{ .Values.charts.redis.name }}"
|
chart: "redis-repo/{{ .Values.charts.redis.name }}"
|
||||||
version: "{{ .Values.charts.redis.version }}"
|
version: "{{ .Values.charts.redis.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-redis.yaml.gotmpl"
|
- "values-redis.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.redis | default "additionalValues: false" }}
|
{{ range .Values.customization.release.redis }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.redis.enabled }}
|
installed: {{ .Values.redis.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -154,7 +195,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.memcached.version }}"
|
version: "{{ .Values.charts.memcached.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-memcached.yaml.gotmpl"
|
- "values-memcached.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.memcached | default "additionalValues: false" }}
|
{{ range .Values.customization.release.memcached }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.memcached.enabled }}
|
installed: {{ .Values.memcached.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -163,7 +206,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.postgresql.version }}"
|
version: "{{ .Values.charts.postgresql.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-postgresql.yaml.gotmpl"
|
- "values-postgresql.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.postgresql | default "additionalValues: false" }}
|
{{ range .Values.customization.release.postgresql }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.postgresql.enabled }}
|
installed: {{ .Values.postgresql.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -172,7 +217,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.mariadb.version }}"
|
version: "{{ .Values.charts.mariadb.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-mariadb.yaml.gotmpl"
|
- "values-mariadb.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.mariadb | default "additionalValues: false" }}
|
{{ range .Values.customization.release.mariadb }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.mariadb.enabled }}
|
installed: {{ .Values.mariadb.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -181,7 +228,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.postfix.version }}"
|
version: "{{ .Values.charts.postfix.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-postfix.yaml.gotmpl"
|
- "values-postfix.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.postfix | default "additionalValues: false" }}
|
{{ range .Values.customization.release.postfix }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.postfix.enabled }}
|
installed: {{ .Values.postfix.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -190,7 +239,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.dkimpy.version }}"
|
version: "{{ .Values.charts.dkimpy.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-dkimpy.yaml.gotmpl"
|
- "values-dkimpy.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.opendeskDkimpyMilter | default "additionalValues: false" }}
|
{{ range .Values.customization.release.opendeskDkimpyMilter }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.dkimpy.enabled }}
|
installed: {{ .Values.dkimpy.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -199,7 +250,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.clamav.version }}"
|
version: "{{ .Values.charts.clamav.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-clamav-distributed.yaml.gotmpl"
|
- "values-clamav-distributed.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.clamav | default "additionalValues: false" }}
|
{{ range .Values.customization.release.clamav }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.clamavDistributed.enabled }}
|
installed: {{ .Values.clamavDistributed.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -208,7 +261,9 @@ releases:
|
|||||||
version: "{{ .Values.charts.clamavSimple.version }}"
|
version: "{{ .Values.charts.clamavSimple.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-clamav-simple.yaml.gotmpl"
|
- "values-clamav-simple.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.clamavSimple | default "additionalValues: false" }}
|
{{ range .Values.customization.release.clamavSimple }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.clamavSimple.enabled }}
|
installed: {{ .Values.clamavSimple.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
@@ -217,11 +272,24 @@ releases:
|
|||||||
version: "{{ .Values.charts.minio.version }}"
|
version: "{{ .Values.charts.minio.version }}"
|
||||||
values:
|
values:
|
||||||
- "values-minio.yaml.gotmpl"
|
- "values-minio.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.minio | default "additionalValues: false" }}
|
{{ range .Values.customization.release.minio }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.minio.enabled }}
|
installed: {{ .Values.minio.enabled }}
|
||||||
timeout: 900
|
timeout: 900
|
||||||
|
|
||||||
|
# openDesk Enterprise Releases
|
||||||
|
- name: "cassandra"
|
||||||
|
chart: "cassandra-repo/{{ .Values.charts.cassandra.name }}"
|
||||||
|
version: "{{ .Values.charts.cassandra.version }}"
|
||||||
|
values:
|
||||||
|
{{ range .Values.customization.release.cassandra }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
|
installed: {{ .Values.cassandra.enabled }}
|
||||||
|
timeout: 900
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "services"
|
deployStage: "030-services"
|
||||||
component: "services"
|
component: "services"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -39,7 +39,7 @@ global:
|
|||||||
{{- if .Values.openproject.enabled }}
|
{{- if .Values.openproject.enabled }}
|
||||||
openproject: {{ .Values.global.hosts.openproject }}
|
openproject: {{ .Values.global.hosts.openproject }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.oxAppsuite.enabled }}
|
{{- if .Values.oxAppSuite.enabled }}
|
||||||
openxchange: {{ .Values.global.hosts.openxchange }}
|
openxchange: {{ .Values.global.hosts.openxchange }}
|
||||||
{{- end }}
|
{{- end }}
|
||||||
{{- if .Values.nubus.enabled }}
|
{{- if .Values.nubus.enabled }}
|
||||||
@@ -52,6 +52,7 @@ global:
|
|||||||
|
|
||||||
issuerRef:
|
issuerRef:
|
||||||
name: {{ .Values.certificate.issuerRef.name | quote }}
|
name: {{ .Values.certificate.issuerRef.name | quote }}
|
||||||
|
kind: {{ .Values.certificate.issuerRef.kind | quote }}
|
||||||
|
|
||||||
cleanup:
|
cleanup:
|
||||||
keepRessourceOnDelete: {{ .Values.debug.cleanup.keepRessourceOnDelete }}
|
keepRessourceOnDelete: {{ .Values.debug.cleanup.keepRessourceOnDelete }}
|
||||||
|
|||||||
@@ -47,9 +47,9 @@ job:
|
|||||||
- username: "openxchange_user"
|
- username: "openxchange_user"
|
||||||
# - username: {{ .Values.databases.xwiki.username | quote }}
|
# - username: {{ .Values.databases.xwiki.username | quote }}
|
||||||
password: {{ .Values.secrets.mariadb.openxchangeUser | quote }}
|
password: {{ .Values.secrets.mariadb.openxchangeUser | quote }}
|
||||||
connectionLimit: {{ .Values.databases.oxAppsuite.connectionLimit | default .Values.databases.defaults.userConnectionLimit }}
|
connectionLimit: {{ .Values.databases.oxAppSuite.connectionLimit | default .Values.databases.defaults.userConnectionLimit }}
|
||||||
- username: "xwiki_user"
|
- username: "xwiki_user"
|
||||||
# - username: {{ .Values.databases.oxAppsuite.username | quote }}
|
# - username: {{ .Values.databases.oxAppSuite.username | quote }}
|
||||||
password: {{ .Values.secrets.mariadb.xwikiUser | quote }}
|
password: {{ .Values.secrets.mariadb.xwikiUser | quote }}
|
||||||
connectionLimit: {{ .Values.databases.xwiki.connectionLimit | default .Values.databases.defaults.userConnectionLimit }}
|
connectionLimit: {{ .Values.databases.xwiki.connectionLimit | default .Values.databases.defaults.userConnectionLimit }}
|
||||||
databases:
|
databases:
|
||||||
@@ -59,8 +59,8 @@ job:
|
|||||||
# users for the moment.
|
# users for the moment.
|
||||||
- name: "openxchange"
|
- name: "openxchange"
|
||||||
user: "openxchange_user"
|
user: "openxchange_user"
|
||||||
# - name: {{ .Values.databases.oxAppsuite.name | quote }}
|
# - name: {{ .Values.databases.oxAppSuite.name | quote }}
|
||||||
# user: {{ .Values.databases.oxAppsuite.username | quote }}
|
# user: {{ .Values.databases.oxAppSuite.username | quote }}
|
||||||
- name: "xwiki"
|
- name: "xwiki"
|
||||||
user: "xwiki_user"
|
user: "xwiki_user"
|
||||||
# - name: {{ .Values.databases.xwiki.name | quote }}
|
# - name: {{ .Values.databases.xwiki.name | quote }}
|
||||||
|
|||||||
52
helmfile/apps/services/values-opendesk-alerts.yaml.gotmpl
Normal file
52
helmfile/apps/services/values-opendesk-alerts.yaml.gotmpl
Normal file
@@ -0,0 +1,52 @@
|
|||||||
|
{{/*
|
||||||
|
SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
|
||||||
|
SPDX-License-Identifier: Apache-2.0
|
||||||
|
*/}}
|
||||||
|
---
|
||||||
|
additionalAnnotations:
|
||||||
|
{{ .Values.monitoring.prometheus.prometheusRules.annotations | toYaml | nindent 2 }}
|
||||||
|
additionalLabels:
|
||||||
|
{{ .Values.monitoring.prometheus.prometheusRules.labels | toYaml | nindent 2 }}
|
||||||
|
|
||||||
|
config:
|
||||||
|
collabora:
|
||||||
|
enable: {{ .Values.collabora.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.collabora.namespace | quote }}
|
||||||
|
matrix:
|
||||||
|
enable: {{ .Values.element.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.element.namespace | quote }}
|
||||||
|
diagrams:
|
||||||
|
enable: {{ .Values.cryptpad.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.cryptpad.namespace | quote }}
|
||||||
|
nextcloud:
|
||||||
|
enable: {{ .Values.nextcloud.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.nextcloud.namespace | quote }}
|
||||||
|
openXChange:
|
||||||
|
enable: {{ .Values.oxAppSuite.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.oxAppSuite.namespace | quote }}
|
||||||
|
xwiki:
|
||||||
|
enable: {{ .Values.xwiki.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.xwiki.namespace | quote }}
|
||||||
|
nubus:
|
||||||
|
enable: {{ .Values.nubus.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.nubus.namespace | quote }}
|
||||||
|
openProject:
|
||||||
|
enable: {{ .Values.openproject.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.openproject.namespace | quote }}
|
||||||
|
jitsi:
|
||||||
|
enable: {{ .Values.jitsi.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.jitsi.namespace | quote }}
|
||||||
|
collabora:
|
||||||
|
enable: {{ .Values.collabora.enabled }}
|
||||||
|
selectors:
|
||||||
|
namespace: {{ .Values.collabora.namespace | quote }}
|
||||||
|
|
||||||
@@ -29,7 +29,7 @@ apps:
|
|||||||
openproject:
|
openproject:
|
||||||
enabled: {{ .Values.openproject.enabled }}
|
enabled: {{ .Values.openproject.enabled }}
|
||||||
oxAppsuite:
|
oxAppsuite:
|
||||||
enabled: {{ .Values.oxAppsuite.enabled }}
|
enabled: {{ .Values.oxAppSuite.enabled }}
|
||||||
postfix:
|
postfix:
|
||||||
enabled: {{ .Values.postfix.enabled }}
|
enabled: {{ .Values.postfix.enabled }}
|
||||||
postgresql:
|
postgresql:
|
||||||
|
|||||||
@@ -68,11 +68,15 @@ postfix:
|
|||||||
smtpdTLSCertFile: "/etc/tls/tls.crt"
|
smtpdTLSCertFile: "/etc/tls/tls.crt"
|
||||||
smtpdKeyFile: "/etc/tls/tls.key"
|
smtpdKeyFile: "/etc/tls/tls.key"
|
||||||
smtpdSASLPath: "inet:dovecot:3659"
|
smtpdSASLPath: "inet:dovecot:3659"
|
||||||
|
{{- if .Values.antivirus.milter.host }}
|
||||||
|
smtpdMilters: "inet:{{ .Values.antivirus.milter.host }}:{{ .Values.antivirus.milter.port }}"
|
||||||
|
{{- else }}
|
||||||
{{- if .Values.clamavDistributed.enabled }}
|
{{- if .Values.clamavDistributed.enabled }}
|
||||||
smtpdMilters: "inet:clamav-milter:7357"
|
smtpdMilters: "inet:clamav-milter:7357"
|
||||||
{{- else if .Values.clamavSimple.enabled }}
|
{{- else if .Values.clamavSimple.enabled }}
|
||||||
smtpdMilters: "inet:clamav-simple:7357"
|
smtpdMilters: "inet:clamav-simple:7357"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
virtualMailboxDomains: {{ .Values.global.mailDomain | default .Values.global.domain | quote }}
|
virtualMailboxDomains: {{ .Values.global.mailDomain | default .Values.global.domain | quote }}
|
||||||
virtualTransport: "lmtps:dovecot:24"
|
virtualTransport: "lmtps:dovecot:24"
|
||||||
|
|
||||||
|
|||||||
@@ -19,11 +19,13 @@ releases:
|
|||||||
wait: true
|
wait: true
|
||||||
values:
|
values:
|
||||||
- "values.yaml.gotmpl"
|
- "values.yaml.gotmpl"
|
||||||
- {{ .Values.customization.release.xwiki | default "additionalValues: false" }}
|
{{ range .Values.customization.release.xwiki }}
|
||||||
|
- {{ . }}
|
||||||
|
{{ end }}
|
||||||
installed: {{ .Values.xwiki.enabled }}
|
installed: {{ .Values.xwiki.enabled }}
|
||||||
timeout: 1800
|
timeout: 1800
|
||||||
|
|
||||||
commonLabels:
|
commonLabels:
|
||||||
deploy-stage: "component-1"
|
deployStage: "050-components"
|
||||||
component: "xwiki"
|
component: "xwiki"
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -23,7 +23,7 @@ externalDB:
|
|||||||
password: {{ .Values.databases.xwiki.password | default .Values.secrets.mariadb.rootPassword | quote }}
|
password: {{ .Values.databases.xwiki.password | default .Values.secrets.mariadb.rootPassword | quote }}
|
||||||
database: {{ .Values.databases.xwiki.name | quote }}
|
database: {{ .Values.databases.xwiki.name | quote }}
|
||||||
user: {{ .Values.databases.xwiki.username | quote }}
|
user: {{ .Values.databases.xwiki.username | quote }}
|
||||||
host: {{ .Values.databases.xwiki.host | quote }}
|
host: {{ printf "%s:%d" .Values.databases.xwiki.host .Values.databases.xwiki.port | quote }}
|
||||||
customKeyRef:
|
customKeyRef:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|
||||||
@@ -57,8 +57,10 @@ customConfigs:
|
|||||||
xwiki.authentication.ldap.photo_attribute: "jpegPhoto"
|
xwiki.authentication.ldap.photo_attribute: "jpegPhoto"
|
||||||
## Enable the synchronization of the LDAP profile picture
|
## Enable the synchronization of the LDAP profile picture
|
||||||
xwiki.authentication.ldap.update_photo: 1
|
xwiki.authentication.ldap.update_photo: 1
|
||||||
## Password of default user
|
{{ if .Values.debug.enabled }}
|
||||||
|
## Password of "superadmin" user, disables account if not password is set
|
||||||
xwiki.superadminpassword: {{ .Values.secrets.xwiki.superadminpassword | quote }}
|
xwiki.superadminpassword: {{ .Values.secrets.xwiki.superadminpassword | quote }}
|
||||||
|
{{ end }}
|
||||||
## LDAP Server configuration
|
## LDAP Server configuration
|
||||||
xwiki.authentication.ldap.server: {{ .Values.ldap.host | quote }}
|
xwiki.authentication.ldap.server: {{ .Values.ldap.host | quote }}
|
||||||
xwiki.authentication.ldap.port: 389
|
xwiki.authentication.ldap.port: 389
|
||||||
|
|||||||
11
helmfile/environments/default/antivirus.yaml
Normal file
11
helmfile/environments/default/antivirus.yaml
Normal file
@@ -0,0 +1,11 @@
|
|||||||
|
# SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
|
||||||
|
# SPDX-License-Identifier: Apache-2.0
|
||||||
|
---
|
||||||
|
antivirus:
|
||||||
|
icap:
|
||||||
|
host: ~
|
||||||
|
port: 1344
|
||||||
|
milter:
|
||||||
|
host: ~
|
||||||
|
port: 7357
|
||||||
|
...
|
||||||
@@ -5,14 +5,22 @@ cache:
|
|||||||
intercomService:
|
intercomService:
|
||||||
host: "redis-headless"
|
host: "redis-headless"
|
||||||
port: 6379
|
port: 6379
|
||||||
|
username: "default"
|
||||||
password: ""
|
password: ""
|
||||||
nextcloud:
|
nextcloud:
|
||||||
host: "redis-headless"
|
host: "redis-headless"
|
||||||
port: 6379
|
port: 6379
|
||||||
|
username: "default"
|
||||||
password: ""
|
password: ""
|
||||||
|
tls: false
|
||||||
openproject:
|
openproject:
|
||||||
host: "memcached"
|
host: "memcached"
|
||||||
port: 11211
|
port: 11211
|
||||||
|
oxAppSuite:
|
||||||
|
host: "redis-headless"
|
||||||
|
port: 6379
|
||||||
|
username: "default"
|
||||||
|
password: ""
|
||||||
umsSelfservice:
|
umsSelfservice:
|
||||||
host: "memcached"
|
host: "memcached"
|
||||||
port: 11211
|
port: 11211
|
||||||
|
|||||||
@@ -5,6 +5,7 @@
|
|||||||
certificate:
|
certificate:
|
||||||
issuerRef:
|
issuerRef:
|
||||||
name: "letsencrypt-prod"
|
name: "letsencrypt-prod"
|
||||||
|
kind: "ClusterIssuer"
|
||||||
wildcard: false
|
wildcard: false
|
||||||
selfSigned: false
|
selfSigned: false
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -6,6 +6,16 @@
|
|||||||
# yamllint disable rule:line-length
|
# yamllint disable rule:line-length
|
||||||
---
|
---
|
||||||
charts:
|
charts:
|
||||||
|
cassandra:
|
||||||
|
# providerCategory: "Community"
|
||||||
|
# providerResponsible: "openDesk"
|
||||||
|
# upstreamRegistry: "https://registry-1.docker.io"
|
||||||
|
# upstreamRepository: "bitnamicharts/cassandra"
|
||||||
|
registry: "registry.opencode.de"
|
||||||
|
repository: "bmi/opendesk/components/external/charts/bitnami-charts"
|
||||||
|
name: "cassandra"
|
||||||
|
version: "12.0.4"
|
||||||
|
verify: true
|
||||||
certificates:
|
certificates:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
# providerResponsible: "openDesk"
|
# providerResponsible: "openDesk"
|
||||||
@@ -90,7 +100,17 @@ charts:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
||||||
name: "opendesk-element"
|
name: "opendesk-element"
|
||||||
version: "3.4.1"
|
version: "5.0.0"
|
||||||
|
verify: true
|
||||||
|
elementWeb:
|
||||||
|
# providerCategory: "Platform"
|
||||||
|
# providerResponsible: "openDesk"
|
||||||
|
# upstreamRegistry: "https://registry.opencode.de"
|
||||||
|
# upstreamRepository: "bmi/opendesk/components/platform-development/charts/opendesk-element/opendesk-element"
|
||||||
|
registry: "registry.opencode.de"
|
||||||
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
||||||
|
name: "opendesk-element-web"
|
||||||
|
version: "5.0.0"
|
||||||
verify: true
|
verify: true
|
||||||
elementWellKnown:
|
elementWellKnown:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
@@ -100,7 +120,7 @@ charts:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
||||||
name: "opendesk-well-known"
|
name: "opendesk-well-known"
|
||||||
version: "3.4.1"
|
version: "5.0.0"
|
||||||
verify: true
|
verify: true
|
||||||
home:
|
home:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
@@ -132,7 +152,7 @@ charts:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/charts/opendesk-jitsi"
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-jitsi"
|
||||||
name: "opendesk-jitsi"
|
name: "opendesk-jitsi"
|
||||||
version: "2.1.0"
|
version: "2.1.1"
|
||||||
verify: true
|
verify: true
|
||||||
mariadb:
|
mariadb:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
@@ -232,7 +252,7 @@ charts:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/charts/opendesk-nextcloud"
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-nextcloud"
|
||||||
name: "opendesk-nextcloud"
|
name: "opendesk-nextcloud"
|
||||||
version: "3.4.1"
|
version: "3.6.2"
|
||||||
verify: true
|
verify: true
|
||||||
nextcloudManagement:
|
nextcloudManagement:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
@@ -242,7 +262,7 @@ charts:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/charts/opendesk-nextcloud"
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-nextcloud"
|
||||||
name: "opendesk-nextcloud-management"
|
name: "opendesk-nextcloud-management"
|
||||||
version: "3.4.1"
|
version: "3.6.2"
|
||||||
verify: true
|
verify: true
|
||||||
nginx:
|
nginx:
|
||||||
# providerCategory: "Community"
|
# providerCategory: "Community"
|
||||||
@@ -254,6 +274,16 @@ charts:
|
|||||||
name: "nginx"
|
name: "nginx"
|
||||||
version: "15.9.3"
|
version: "15.9.3"
|
||||||
verify: true
|
verify: true
|
||||||
|
nginxS3Gateway:
|
||||||
|
# providerCategory: "Platform"
|
||||||
|
# providerResponsible: "openDesk"
|
||||||
|
# upstreamRegistry: "https://registry.opencode.de"
|
||||||
|
# packageName=bmi/opendesk/components/platform-development/charts/nginx-s3-gateway/nginx-s3-gateway
|
||||||
|
registry: "registry.opencode.de"
|
||||||
|
repository: "bmi/opendesk/components/platform-development/charts/nginx-s3-gateway"
|
||||||
|
name: "nginx-s3-gateway"
|
||||||
|
version: "1.0.1"
|
||||||
|
verify: true
|
||||||
nubus:
|
nubus:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Univention"
|
# providerResponsible: "Univention"
|
||||||
@@ -266,6 +296,16 @@ charts:
|
|||||||
name: "nubus"
|
name: "nubus"
|
||||||
version: "0.64.2"
|
version: "0.64.2"
|
||||||
verify: true
|
verify: true
|
||||||
|
opendeskAlerts:
|
||||||
|
# providerCategory: "Platform"
|
||||||
|
# providerResponsible: "openDesk"
|
||||||
|
# upstreamRegistry: "https://registry.opencode.de"
|
||||||
|
# upstreamRepository: "bmi/opendesk/components/platform-development/charts/opendesk-alerts"
|
||||||
|
registry: "registry.opencode.de"
|
||||||
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-alerts"
|
||||||
|
name: "opendesk-alerts"
|
||||||
|
version: "1.1.0"
|
||||||
|
verify: true
|
||||||
opendeskKeycloakBootstrap:
|
opendeskKeycloakBootstrap:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
# providerResponsible: "openDesk"
|
# providerResponsible: "openDesk"
|
||||||
@@ -286,7 +326,7 @@ charts:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/supplier/openproject/charts-mirror"
|
repository: "bmi/opendesk/components/supplier/openproject/charts-mirror"
|
||||||
name: "openproject"
|
name: "openproject"
|
||||||
version: "8.3.2"
|
version: "9.0.1"
|
||||||
verify: true
|
verify: true
|
||||||
openprojectBootstrap:
|
openprojectBootstrap:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
@@ -298,7 +338,17 @@ charts:
|
|||||||
name: "opendesk-openproject-bootstrap"
|
name: "opendesk-openproject-bootstrap"
|
||||||
version: "2.1.1"
|
version: "2.1.1"
|
||||||
verify: true
|
verify: true
|
||||||
openXchangeAppSuite:
|
otterize:
|
||||||
|
# providerCategory: "Platform"
|
||||||
|
# providerResponsible: "openDesk"
|
||||||
|
# upstreamRegistry: "https://registry.opencode.de"
|
||||||
|
# upstreamRepository: "bmi/opendesk/components/platform-development/charts/opendesk-otterize/opendesk-otterize"
|
||||||
|
registry: "registry.opencode.de"
|
||||||
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-otterize"
|
||||||
|
name: "opendesk-otterize"
|
||||||
|
version: "2.1.0"
|
||||||
|
verify: true
|
||||||
|
oxAppSuite:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Open-Xchange"
|
# providerResponsible: "Open-Xchange"
|
||||||
# upstreamMirrorTagFilterRegEx: '^(\d+)\.(\d+)\.(\d+)$'
|
# upstreamMirrorTagFilterRegEx: '^(\d+)\.(\d+)\.(\d+)$'
|
||||||
@@ -310,7 +360,7 @@ charts:
|
|||||||
name: "appsuite-public-sector"
|
name: "appsuite-public-sector"
|
||||||
version: "2.12.85"
|
version: "2.12.85"
|
||||||
verify: false
|
verify: false
|
||||||
openXchangeAppSuiteBootstrap:
|
oxAppSuiteBootstrap:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
# providerResponsible: "openDesk"
|
# providerResponsible: "openDesk"
|
||||||
# upstreamRegistry: "https://registry.opencode.de"
|
# upstreamRegistry: "https://registry.opencode.de"
|
||||||
@@ -320,16 +370,6 @@ charts:
|
|||||||
name: "opendesk-open-xchange-bootstrap"
|
name: "opendesk-open-xchange-bootstrap"
|
||||||
version: "2.1.2"
|
version: "2.1.2"
|
||||||
verify: true
|
verify: true
|
||||||
otterize:
|
|
||||||
# providerCategory: "Platform"
|
|
||||||
# providerResponsible: "openDesk"
|
|
||||||
# upstreamRegistry: "https://registry.opencode.de"
|
|
||||||
# upstreamRepository: "bmi/opendesk/components/platform-development/charts/opendesk-otterize/opendesk-otterize"
|
|
||||||
registry: "registry.opencode.de"
|
|
||||||
repository: "bmi/opendesk/components/platform-development/charts/opendesk-otterize"
|
|
||||||
name: "opendesk-otterize"
|
|
||||||
version: "2.1.0"
|
|
||||||
verify: true
|
|
||||||
oxConnector:
|
oxConnector:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Univention"
|
# providerResponsible: "Univention"
|
||||||
@@ -380,7 +420,7 @@ charts:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
||||||
name: "opendesk-synapse"
|
name: "opendesk-synapse"
|
||||||
version: "3.4.1"
|
version: "5.0.0"
|
||||||
verify: true
|
verify: true
|
||||||
synapseCreateAccount:
|
synapseCreateAccount:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
@@ -390,7 +430,7 @@ charts:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
||||||
name: "opendesk-synapse-create-account"
|
name: "opendesk-synapse-create-account"
|
||||||
version: "3.4.1"
|
version: "5.0.0"
|
||||||
verify: true
|
verify: true
|
||||||
synapseWeb:
|
synapseWeb:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
@@ -400,7 +440,7 @@ charts:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
repository: "bmi/opendesk/components/platform-development/charts/opendesk-element"
|
||||||
name: "opendesk-synapse-web"
|
name: "opendesk-synapse-web"
|
||||||
version: "3.4.1"
|
version: "5.0.0"
|
||||||
verify: true
|
verify: true
|
||||||
xwiki:
|
xwiki:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
|
|||||||
@@ -2,56 +2,69 @@
|
|||||||
# SPDX-License-Identifier: Apache-2.0
|
# SPDX-License-Identifier: Apache-2.0
|
||||||
---
|
---
|
||||||
# This variable allows customization of helmfile releases by loading custom values file.
|
# This variable allows customization of helmfile releases by loading custom values file.
|
||||||
|
#
|
||||||
|
# **Warning**: Customizations are a very powerful tool to apply individual changes to your
|
||||||
|
# openDesk installation. As there are no limits set for what you use it, openDesk cannot
|
||||||
|
# support the configurations you are about to create using the customization-option. If you
|
||||||
|
# have the demand for a specific configuration, try to get it into the openDesk standard
|
||||||
|
# by creating a ticket at https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/-/issues
|
||||||
|
#
|
||||||
# Example:
|
# Example:
|
||||||
# customization:
|
# customization:
|
||||||
# release:
|
# release:
|
||||||
# collaboraOnline: /path/to/additional/file.yaml
|
# collaboraOnline:
|
||||||
|
# myCustomConfig: "/path/to/additional/file.yaml"
|
||||||
customization:
|
customization:
|
||||||
release:
|
release:
|
||||||
# collabora
|
# collabora
|
||||||
collaboraOnline: ~
|
collaboraOnline: {}
|
||||||
# cryptpad
|
# cryptpad
|
||||||
cryptpad: ~
|
cryptpad: {}
|
||||||
# element
|
# element
|
||||||
opendeskElement: ~
|
opendeskElement: {}
|
||||||
opendeskWellKnown: ~
|
opendeskWellKnown: {}
|
||||||
opendeskSynapseWeb: ~
|
opendeskSynapseWeb: {}
|
||||||
opendeskSynapse: ~
|
opendeskSynapse: {}
|
||||||
# jitsi
|
# jitsi
|
||||||
jitsi: ~
|
jitsi: {}
|
||||||
# migrations-post
|
# migrations-post
|
||||||
migrationsPost: ~
|
migrationsPost: {}
|
||||||
# migrations-pre
|
# migrations-pre
|
||||||
migrationsPre: ~
|
migrationsPre: {}
|
||||||
# nextcloud
|
# nextcloud
|
||||||
opendeskNextcloudManagement: ~
|
opendeskNextcloudManagement: {}
|
||||||
opendeskNextcloud: ~
|
opendeskNextcloud: {}
|
||||||
# nubus
|
# nubus
|
||||||
ums: ~
|
ums: {}
|
||||||
intercomService: ~
|
intercomService: {}
|
||||||
opendeskKeycloakBootstrap: ~
|
opendeskKeycloakBootstrap: {}
|
||||||
|
nginxS3Gateway: {}
|
||||||
# open-xchange
|
# open-xchange
|
||||||
dovecot: ~
|
dovecot: {}
|
||||||
openXchange: ~
|
openxchange: {}
|
||||||
opendeskOpenXchangeBootstrap: ~
|
opendeskOpenxchangeBootstrap: {}
|
||||||
oxConnector: ~
|
oxConnector: {}
|
||||||
# openproject
|
# openproject
|
||||||
openproject: ~
|
openproject: {}
|
||||||
# openproject-bootstrap
|
# openproject-bootstrap
|
||||||
opendeskOpenprojectBootstrap: ~
|
opendeskOpenprojectBootstrap: {}
|
||||||
# services
|
# services
|
||||||
opendeskOtterize: ~
|
opendeskOtterize: {}
|
||||||
opendeskHome: ~
|
opendeskHome: {}
|
||||||
opendeskCertificates: ~
|
opendeskCertificates: {}
|
||||||
redis: ~
|
opendeskAlerts: {}
|
||||||
memcached: ~
|
redis: {}
|
||||||
postgresql: ~
|
memcached: {}
|
||||||
mariadb: ~
|
postgresql: {}
|
||||||
postfix: ~
|
mariadb: {}
|
||||||
opendeskDkimpyMilter: ~
|
postfix: {}
|
||||||
clamav: ~
|
opendeskDkimpyMilter: {}
|
||||||
clamavSimple: ~
|
clamav: {}
|
||||||
minio: ~
|
clamavSimple: {}
|
||||||
|
minio: {}
|
||||||
# xwiki
|
# xwiki
|
||||||
xwiki: ~
|
xwiki: {}
|
||||||
|
|
||||||
|
# openDesk Enterprise Components
|
||||||
|
cassandra: {}
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -32,7 +32,7 @@ databases:
|
|||||||
username: "openproject_user"
|
username: "openproject_user"
|
||||||
password: ""
|
password: ""
|
||||||
connectionLimit: ~
|
connectionLimit: ~
|
||||||
oxAppsuite:
|
oxAppSuite:
|
||||||
name: "configdb"
|
name: "configdb"
|
||||||
host: "mariadb"
|
host: "mariadb"
|
||||||
port: 3306
|
port: 3306
|
||||||
@@ -45,6 +45,21 @@ databases:
|
|||||||
port: 5432
|
port: 5432
|
||||||
username: "matrix_user"
|
username: "matrix_user"
|
||||||
password: ""
|
password: ""
|
||||||
|
requireAuth: []
|
||||||
|
channelBinding: "prefer"
|
||||||
|
connectTimeout: 10
|
||||||
|
clientEncoding: "auto"
|
||||||
|
keepalives: 1
|
||||||
|
keepalivesIdle: 10
|
||||||
|
keepalivesInterval: 10
|
||||||
|
keepalivesCount: 3
|
||||||
|
replication: false
|
||||||
|
gssencmode: "prefer"
|
||||||
|
sslmode: "prefer"
|
||||||
|
sslcompression: 0
|
||||||
|
sslMinProtocolVersion: "TLSv1.2"
|
||||||
|
connectionPoolMin: "3"
|
||||||
|
connectionPoolMax: "5"
|
||||||
connectionLimit: ~
|
connectionLimit: ~
|
||||||
umsGuardianManagementApi:
|
umsGuardianManagementApi:
|
||||||
name: "guardianmanagementapi"
|
name: "guardianmanagementapi"
|
||||||
|
|||||||
@@ -1,9 +0,0 @@
|
|||||||
# SPDX-FileCopyrightText: 2024 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH
|
|
||||||
# SPDX-License-Identifier: Apache-2.0
|
|
||||||
# The variables set in this file are required to upgrade components to their "Enterprise" product variant.
|
|
||||||
---
|
|
||||||
enterprise:
|
|
||||||
openproject:
|
|
||||||
# Enterprise token must match the deployment's OpenProject host name.
|
|
||||||
token: ""
|
|
||||||
...
|
|
||||||
@@ -45,6 +45,8 @@ functional:
|
|||||||
enabled: false
|
enabled: false
|
||||||
# Enforces passwords to be used on external shares.
|
# Enforces passwords to be used on external shares.
|
||||||
enforcePasswords: false
|
enforcePasswords: false
|
||||||
|
# Let Nextcloud send the password set for the share by mail to the recipient of the share.
|
||||||
|
sendPasswordMail: true
|
||||||
# Expiry settings for the external shares.
|
# Expiry settings for the external shares.
|
||||||
expiry:
|
expiry:
|
||||||
# If true the check box for the expiry date is enabled by default.
|
# If true the check box for the expiry date is enabled by default.
|
||||||
@@ -85,6 +87,10 @@ functional:
|
|||||||
# Ref.:
|
# Ref.:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|
||||||
|
portal:
|
||||||
|
# Configure if the a re-direct to the login dialogue is enforced, or if the portal is shown and the user as to actively
|
||||||
|
# trigger the login flow, e.g. but clicking on the "Login" portal tile.
|
||||||
|
enforceLogin: true
|
||||||
chat:
|
chat:
|
||||||
matrix:
|
matrix:
|
||||||
profile:
|
profile:
|
||||||
@@ -99,10 +105,10 @@ functional:
|
|||||||
useImmutableIdentifierForLocalpart: false
|
useImmutableIdentifierForLocalpart: false
|
||||||
|
|
||||||
migration:
|
migration:
|
||||||
oxAppsuite:
|
oxAppSuite:
|
||||||
# Note: Only available in openDesk Enterprise.
|
# Note: Only available in openDesk Enterprise.
|
||||||
# Turn on temporary for migration purposes only. Will enable master password auth in OX AppSuite and Dovecot using
|
# Turn on temporary for migration purposes only. Will enable master password auth in OX AppSuite and Dovecot using
|
||||||
# `secrets.oxAppsuite.migrationsMasterPassword`.
|
# `secrets.oxAppSuite.migrationsMasterPassword`.
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -20,7 +20,7 @@ images:
|
|||||||
# upstreamRepository: "bmi/opendesk/components/supplier/collabora/images/collabora-online-for-opendesk"
|
# upstreamRepository: "bmi/opendesk/components/supplier/collabora/images/collabora-online-for-opendesk"
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/supplier/collabora/images/collabora-online-for-opendesk"
|
repository: "bmi/opendesk/components/supplier/collabora/images/collabora-online-for-opendesk"
|
||||||
tag: "24.04.7.2.1@sha256:5b00478f2c6c7372b2a67e68783d9b1a91265679bbd4afdc1416e50720d50ce6"
|
tag: "24.04.9.2.1@sha256:749917bf9146d8507b3a63d422a30ebe4f499700421c30527e32f322a015c73d"
|
||||||
cryptpad:
|
cryptpad:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "XWiki"
|
# providerResponsible: "XWiki"
|
||||||
@@ -89,7 +89,7 @@ images:
|
|||||||
# upstreamMirrorStartFrom: ["8922"]
|
# upstreamMirrorStartFrom: ["8922"]
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/jibri"
|
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/jibri"
|
||||||
tag: "stable-9779@sha256:7a0dfa397e7c6c03eb1dc2b49d94f0dc2d6fc44fe85761f67a45ea0e34056b3e"
|
tag: "stable-9823@sha256:dd7a330cb14d95b7661167d7b4e1a8f2e988952ba4ea24baa0a96e09bebd40b1"
|
||||||
jicofo:
|
jicofo:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Nordeck"
|
# providerResponsible: "Nordeck"
|
||||||
@@ -99,7 +99,7 @@ images:
|
|||||||
# upstreamMirrorStartFrom: ["8922"]
|
# upstreamMirrorStartFrom: ["8922"]
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/jicofo"
|
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/jicofo"
|
||||||
tag: "stable-9779@sha256:6b00d53a899e01058a99fa71a3238442e18c43bc62d4212b6647b4f7aa67aae1"
|
tag: "stable-9823@sha256:551aa2adf078f8872474481a9bda7b7526fc5cae2853ce0be2aa1f6d91bf2ecc"
|
||||||
jitsi:
|
jitsi:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Nordeck"
|
# providerResponsible: "Nordeck"
|
||||||
@@ -109,7 +109,7 @@ images:
|
|||||||
# upstreamMirrorStartFrom: ["8922"]
|
# upstreamMirrorStartFrom: ["8922"]
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/web"
|
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/web"
|
||||||
tag: "stable-9779@sha256:77f9cb45bb8c1053002b1ce8987ac26aa1d3724e79b23b0403ca0e92469b7d14"
|
tag: "stable-9823@sha256:d37d0d34715a0089437c5c030251010e068926f93395d46753e1767d0ee16247"
|
||||||
jitsiKeycloakAdapter:
|
jitsiKeycloakAdapter:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Nordeck"
|
# providerResponsible: "Nordeck"
|
||||||
@@ -137,7 +137,7 @@ images:
|
|||||||
# upstreamMirrorStartFrom: ["8922"]
|
# upstreamMirrorStartFrom: ["8922"]
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/jvb"
|
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/jvb"
|
||||||
tag: "stable-9779@sha256:126719d4bd6fc3a85b61e786936a561a41527223b7b6a9c6204df41b1af48a50"
|
tag: "stable-9823@sha256:e6e43071ce26628c816bea46a259c7462c8d5edbbd2ed66f983b1e0f2d9a6cb2"
|
||||||
mariadb:
|
mariadb:
|
||||||
# providerCategory: "Community"
|
# providerCategory: "Community"
|
||||||
# providerResponsible: "openDesk"
|
# providerResponsible: "openDesk"
|
||||||
@@ -235,7 +235,7 @@ images:
|
|||||||
# upstreamRepository: "bmi/opendesk/components/platform-development/images/opendesk-nextcloud"
|
# upstreamRepository: "bmi/opendesk/components/platform-development/images/opendesk-nextcloud"
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/images/opendesk-nextcloud"
|
repository: "bmi/opendesk/components/platform-development/images/opendesk-nextcloud"
|
||||||
tag: "2.2.5@sha256:1ad3d78f790f39826a855ac49324b24395ffe93ccb3ff50e2b9ea1da02b46bda"
|
tag: "2.3.4@sha256:46c596818861486ee621cf8a454c2539a4e230e58b1aebb5735022de849de8e6"
|
||||||
nextcloudExporter:
|
nextcloudExporter:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
# providerResponsible: "openDesk"
|
# providerResponsible: "openDesk"
|
||||||
@@ -244,6 +244,14 @@ images:
|
|||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/images/opendesk-nextcloud-exporter"
|
repository: "bmi/opendesk/components/platform-development/images/opendesk-nextcloud-exporter"
|
||||||
tag: "1.0.1@sha256:63e63c7420e37d3989fa0ffdbcf18a07b2a603ab9b2a849c2e7e44342dd82af0"
|
tag: "1.0.1@sha256:63e63c7420e37d3989fa0ffdbcf18a07b2a603ab9b2a849c2e7e44342dd82af0"
|
||||||
|
nginxS3Gateway:
|
||||||
|
# providerCategory: "Community"
|
||||||
|
# providerResponsible: "openDesk"
|
||||||
|
# upstreamRegistry: "https://registry-1.docker.io"
|
||||||
|
# upstreamRepository: "nginxinc/nginx-s3-gateway"
|
||||||
|
registry: "registry-1.docker.io"
|
||||||
|
repository: "nginxinc/nginx-s3-gateway"
|
||||||
|
tag: "unprivileged-oss-20241111@sha256:20d6b6ec5fc987b18c3e345de33674374a8335c593d6d0841ac64eb49ae2dea4"
|
||||||
nubusDataLoader:
|
nubusDataLoader:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Univention"
|
# providerResponsible: "Univention"
|
||||||
@@ -403,7 +411,7 @@ images:
|
|||||||
# upstreamRepository: "bmi/opendesk/components/platform-development/images/opendesk-nubus"
|
# upstreamRepository: "bmi/opendesk/components/platform-development/images/opendesk-nubus"
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/images/opendesk-nubus"
|
repository: "bmi/opendesk/components/platform-development/images/opendesk-nubus"
|
||||||
tag: "1.7.5@sha256:cc38d339abea18dc3644b7764d7be13798956161d1c87e34b26b5d8b7a11edc6"
|
tag: "1.8.1@sha256:8101e27a930cb2252914440680f16eb4bb395cb89b630a251e91b7301e0f7d41"
|
||||||
nubusOpenPolicyAgent:
|
nubusOpenPolicyAgent:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Univention"
|
# providerResponsible: "Univention"
|
||||||
@@ -451,7 +459,7 @@ images:
|
|||||||
# upstreamRepository: "nubus/images/portal-frontend"
|
# upstreamRepository: "nubus/images/portal-frontend"
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/platform-development/images/opendesk-nubus-portal-update"
|
repository: "bmi/opendesk/components/platform-development/images/opendesk-nubus-portal-update"
|
||||||
tag: "1.8.1@sha256:dd2c8e16b57d5b2a97f465b15e108231782e3ee2df1cc07cee0388459bf40e1c"
|
tag: "1.10.5@sha256:75461683a2233c2e5c99499791ceb576b717c68baa28eef2c307e7052aaaf754"
|
||||||
nubusPortalServer:
|
nubusPortalServer:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Univention"
|
# providerResponsible: "Univention"
|
||||||
@@ -583,11 +591,11 @@ images:
|
|||||||
# providerResponsible: "OpenProject"
|
# providerResponsible: "OpenProject"
|
||||||
# upstreamRegistry: "https://registry-1.docker.io"
|
# upstreamRegistry: "https://registry-1.docker.io"
|
||||||
# upstreamRepository: "openproject/open_desk"
|
# upstreamRepository: "openproject/open_desk"
|
||||||
# upstreamMirrorTagFilterRegEx: '^(\d+)\.(\d+)\.(\d+)$'
|
# upstreamMirrorTagFilterRegEx: '^(\d+)\.(\d+)\.(\d+)'
|
||||||
# upstreamMirrorStartFrom: ["13", "1", "1"]
|
# upstreamMirrorStartFrom: ["13", "1", "1"]
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/supplier/openproject/images-mirror/open_desk"
|
repository: "bmi/opendesk/components/supplier/openproject/images-mirror/open_desk"
|
||||||
tag: "15.0.2@sha256:b476947e8cbd5e0ed15aaa38ee49a76920015dbcb530b3dd11b32a95f9119c08"
|
tag: "15.0.3@sha256:5deb1da1ae5769904b6d363d6c03b234de6087240f985bedb63e25246a7e74a1"
|
||||||
openprojectBootstrap:
|
openprojectBootstrap:
|
||||||
# providerCategory: "Platform"
|
# providerCategory: "Platform"
|
||||||
# providerResponsible: "openDesk"
|
# providerResponsible: "openDesk"
|
||||||
@@ -757,16 +765,15 @@ images:
|
|||||||
# upstreamMirrorStartFrom: ["8922"]
|
# upstreamMirrorStartFrom: ["8922"]
|
||||||
registry: "registry.opencode.de"
|
registry: "registry.opencode.de"
|
||||||
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/prosody"
|
repository: "bmi/opendesk/components/supplier/nordeck/images-mirror/prosody"
|
||||||
tag: "stable-9779@sha256:5864f3f72d3605a52a1b90ec845a4a1837a851d7774dcbfdc9490beb4bdda18a"
|
tag: "stable-9823@sha256:1c52b4ca8397545d54067c67a54c50473d83242c75f001fbf20ee628dfc80b7b"
|
||||||
redis:
|
redis:
|
||||||
# providerCategory: "Community"
|
# providerCategory: "Community"
|
||||||
# providerResponsible: "openDesk"
|
# providerResponsible: "openDesk"
|
||||||
# upstreamRegistry: "https://registry-1.docker.io"
|
# upstreamRegistry: "https://registry-1.docker.io"
|
||||||
# upstreamRepository: "bitnami/redis"
|
# upstreamRepository: "bitnami/redis"
|
||||||
# WE ARE STUCK WITH <7.4 because of https://redis.com/blog/redis-adopts-dual-source-available-licensing/
|
|
||||||
registry: "registry-1.docker.io"
|
registry: "registry-1.docker.io"
|
||||||
repository: "bitnami/redis"
|
repository: "bitnami/redis"
|
||||||
tag: "7.2.3-debian-11-r2@sha256:9ac3bbf7740969d32689e360ddcfa5f672538c47f6f6cf296173c3078de0edf2"
|
tag: "7.4.1-debian-12-r2@sha256:3cfa11e8fef45c006a101ed7cfaae2cdaed7a5167c8ada2a3f76a1de54488cd0"
|
||||||
synapse:
|
synapse:
|
||||||
# providerCategory: "Supplier"
|
# providerCategory: "Supplier"
|
||||||
# providerResponsible: "Element"
|
# providerResponsible: "Element"
|
||||||
|
|||||||
@@ -13,13 +13,13 @@ ingress:
|
|||||||
element: "100M"
|
element: "100M"
|
||||||
nextcloud: "100M"
|
nextcloud: "100M"
|
||||||
openproject: "100M"
|
openproject: "100M"
|
||||||
openXchangeAppSuite: "100M"
|
oxAppSuite: "100M"
|
||||||
xwiki: "100M"
|
xwiki: "100M"
|
||||||
bodyTimeout:
|
bodyTimeout:
|
||||||
collabora: 600
|
collabora: 600
|
||||||
element: 60
|
element: 60
|
||||||
nextcloud: 600
|
nextcloud: 600
|
||||||
openproject: 60
|
openproject: 60
|
||||||
openXchangeAppSuite: 60
|
oxAppSuite: 60
|
||||||
xwiki: 60
|
xwiki: 60
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -13,6 +13,7 @@ monitoring:
|
|||||||
release: "kube-prometheus-stack"
|
release: "kube-prometheus-stack"
|
||||||
prometheusRules:
|
prometheusRules:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
annotations: {}
|
||||||
labels:
|
labels:
|
||||||
release: "kube-prometheus-stack"
|
release: "kube-prometheus-stack"
|
||||||
|
|
||||||
|
|||||||
@@ -55,7 +55,7 @@ nubus:
|
|||||||
openproject:
|
openproject:
|
||||||
enabled: true
|
enabled: true
|
||||||
namespace: ~
|
namespace: ~
|
||||||
oxAppsuite:
|
oxAppSuite:
|
||||||
enabled: true
|
enabled: true
|
||||||
namespace: ~
|
namespace: ~
|
||||||
postfix:
|
postfix:
|
||||||
@@ -70,4 +70,9 @@ redis:
|
|||||||
xwiki:
|
xwiki:
|
||||||
enabled: true
|
enabled: true
|
||||||
namespace: ~
|
namespace: ~
|
||||||
|
|
||||||
|
# openDesk Enterprise Components
|
||||||
|
cassandra:
|
||||||
|
enabled: false
|
||||||
|
namespace: ~
|
||||||
...
|
...
|
||||||
|
|||||||
@@ -122,6 +122,8 @@ replicas:
|
|||||||
umsUmcServer: 1
|
umsUmcServer: 1
|
||||||
# -- scalable: tbd
|
# -- scalable: tbd
|
||||||
umsUmcServerProxy: 1
|
umsUmcServerProxy: 1
|
||||||
|
# -- scalable: true
|
||||||
|
nginxS3Gateway: 1
|
||||||
|
|
||||||
# -- component: Video conference (Jitsi)
|
# -- component: Video conference (Jitsi)
|
||||||
# -- scalable: tbd
|
# -- scalable: tbd
|
||||||
@@ -162,7 +164,7 @@ replicas:
|
|||||||
# dedicated workers for specific queues are possible with OpenProject.
|
# dedicated workers for specific queues are possible with OpenProject.
|
||||||
openprojectWorker: 1
|
openprojectWorker: 1
|
||||||
|
|
||||||
# -- component: Groupware (OX Appsuite)
|
# -- component: Groupware (OX App Suite)
|
||||||
# -- scalable: tbd
|
# -- scalable: tbd
|
||||||
openxchangeCoreDocumentConverter: 1
|
openxchangeCoreDocumentConverter: 1
|
||||||
# -- scalable: tbd
|
# -- scalable: tbd
|
||||||
|
|||||||
@@ -218,6 +218,13 @@ resources:
|
|||||||
requests:
|
requests:
|
||||||
cpu: 0.1
|
cpu: 0.1
|
||||||
memory: "32Mi"
|
memory: "32Mi"
|
||||||
|
nginxS3Gateway:
|
||||||
|
limits:
|
||||||
|
cpu: 99
|
||||||
|
memory: "64Mi"
|
||||||
|
requests:
|
||||||
|
cpu: "100m"
|
||||||
|
memory: "16Mi"
|
||||||
openproject:
|
openproject:
|
||||||
limits:
|
limits:
|
||||||
cpu: 99
|
cpu: 99
|
||||||
|
|||||||
@@ -5,7 +5,7 @@ SPDX-License-Identifier: Apache-2.0
|
|||||||
*/}}
|
*/}}
|
||||||
---
|
---
|
||||||
secrets:
|
secrets:
|
||||||
oxAppsuite:
|
oxAppSuite:
|
||||||
adminPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "ox_appsuite" "admin_password" | sha1sum | quote }}
|
adminPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "ox_appsuite" "admin_password" | sha1sum | quote }}
|
||||||
migrationsMasterPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "opendesk") "ox_appsuite" "migrations_master_password" | sha1sum | quote }}
|
migrationsMasterPassword: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "opendesk") "ox_appsuite" "migrations_master_password" | sha1sum | quote }}
|
||||||
cookieHashSalt: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "ox_appsuite" "cookie_hash_salt" | sha1sum | quote }}
|
cookieHashSalt: {{ derivePassword 1 "long" (env "MASTER_PASSWORD" | default "sovereign-workplace") "ox_appsuite" "cookie_hash_salt" | sha1sum | quote }}
|
||||||
|
|||||||
Reference in New Issue
Block a user