Compare commits

..

14 Commits

Author SHA1 Message Date
Sven-Erik Schmidt
35c5e44bc3 fix(external-services): Add otterize annotations for clamav distributed 2025-10-07 14:01:49 +02:00
Sven-Erik Schmidt
93e7a52354 fix(opendesk-services): Add otterize annotation 2025-10-02 12:32:47 +02:00
Sven-Erik Schmidt
6c297db5a0 fix(opendesk-openproject-bootstrap): Add otterize annotations 2025-10-02 12:32:47 +02:00
Sven-Erik Schmidt
6fef220543 fix(jitsi): Add otterize annotations 2025-10-02 12:32:47 +02:00
Sven-Erik Schmidt
69cee5ded1 fix(cryptpad): Add otterize annotations 2025-10-02 12:32:46 +02:00
Sven-Erik Schmidt
87bbfd828f fix(collabora): Add otterize annotations 2025-10-02 12:32:46 +02:00
Sven-Erik Schmidt
89d9496bd7 fix(notes): Add otterize annotations 2025-10-02 12:32:46 +02:00
Sven-Erik Schmidt
3cd54edf18 fix(element): Add otterize annotations 2025-10-02 12:32:45 +02:00
Sven-Erik Schmidt
7fab08043e fix(opendesk-services): Add otterize annotations 2025-10-02 12:32:45 +02:00
Sven-Erik Schmidt
3b43e2c822 fix(services-external): Add otterize annotations 2025-10-02 12:32:44 +02:00
Sven-Erik Schmidt
82dcf7d582 fix(nextcloud): Add otterize annotations 2025-10-02 12:32:44 +02:00
Sven-Erik Schmidt
3e7c061d50 fix(openproject): Add otterize annotations 2025-10-02 12:32:44 +02:00
Sven-Erik Schmidt
98aba7f3d9 fix(open-xchange): Add otterize annotations 2025-10-02 12:32:43 +02:00
Sven-Erik Schmidt
19032c5377 fix(nubus): Add otterize annotations 2025-10-02 12:32:42 +02:00
55 changed files with 322 additions and 223 deletions

View File

@@ -1,59 +0,0 @@
## 🐛 Issue Report Template
Thank you for reporting an issue!
Please provide the details below to help us investigate and resolve it efficiently.
If you have a feature request, please select the "Feature Request" template.
### 📦 Deployment Details
- **Release version deployed**:
_(e.g. v1.4.2, commit hash, or branch name)_
- **Deployment type**:
- [ ] Fresh installation
- [ ] Upgrade (from version: ___ )
### ☸️ Kubernetes Environment
- **Kubernetes distribution** (select one):
- [ ] Rancher RKE / RKE2
- [ ] OpenShift
- [ ] k3s
- [ ] kind / minikube
- [ ] Other: ___________
- **Kubernetes version**:
_(e.g. v1.27.3)_
### 🌐 Ingress & Certificates
- **Ingress controller in use**:
- [ ] Ingress NGINX Controller version: ___
- [ ] Other: Currently only Ingress NGINX is supported
- **Certificate status**:
- [ ] Lets Encrypt
- [ ] Other publicly verifiable certificate (issuer: ___ )
- [ ] Self-signed certificate (see [`self-signed-certificated.md`](https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/-/blob/develop/docs/enhanced-configuration/self-signed-certificates.md))
- [ ] Option 1
- [ ] Option 2a
- [ ] Option 2b
### 🔧 Tooling Versions
- **Helm version (`helm version`)**: ___________
- **Helmfile version (`helmfile --version`)**: ___________
### 🔍 Problem Description
- **Expected behavior**:
- **Observed behavior / error message**:
- **Steps to reproduce**:
1.
2.
3.
### 📄 Additional context
- Relevant logs (please redact sensitive info):
- Screenshots (if applicable):
- Other notes that might help:
## 🙌 Thank you for contributing to the project!

View File

@@ -1,37 +0,0 @@
## 💡 Feature Request Template
Thank you for suggesting an improvement!
To help us understand and evaluate your idea, please provide the details below.
### 📝 Summary
- **Short description of the feature**:
_(One or two sentences that capture the core idea)_
### 🎯 Use Case / Motivation
- **Who would benefit from this feature?**
- [ ] Operators / Administrators
- [ ] Developers
- [ ] End users
- [ ] Other: ___________
- **Why is this feature needed?**
_(Describe the problem, pain point, or gap this would address)_
### 🔧 Proposed Solution
- **How should it work?**
_(Describe the desired functionality. If relevant, provide examples, CLI flags, configuration snippets, or workflows.)_
### 📊 Alternatives Considered
- **Other approaches youve tried or thought of**:
_(Whats possible now, and why is it not sufficient?)_
### 📄 Additional Context
- Links to related issues, merge requests, or external references:
- Screenshots, diagrams, or mockups (if available):
## 🙌 Thank you for helping improve the project!

View File

@@ -43,7 +43,7 @@ openDesk currently features the following functional main components:
| Portal & IAM | Nubus | AGPL-3.0-or-later | [1.14.0](https://docs.software-univention.de/nubus-kubernetes-release-notes/1.x/en/1.14.html) | [Univention's documentation website](https://docs.software-univention.de/n/en/nubus.html) |
| Project management | OpenProject | GPL-3.0-only | [16.4.1](https://www.openproject.org/docs/release-notes/16-4-1/) | [For the most recent release](https://www.openproject.org/docs/user-guide/) |
| Videoconferencing | Jitsi | Apache-2.0 | [2.0.10431](https://github.com/jitsi/jitsi-meet/releases/tag/stable%2Fjitsi-meet_10431) | [For the most recent release](https://jitsi.github.io/handbook/docs/category/user-guide/) |
| Weboffice | Collabora | MPL-2.0 | [25.04.5](https://www.collaboraoffice.com/code-25-04-release-notes/) | Online documentation available from within the installed application; [Additional resources](https://sdk.collaboraonline.com/) |
| Weboffice | Collabora | MPL-2.0 | [25.04.4](https://www.collaboraoffice.com/code-25-04-release-notes/) | Online documentation available from within the installed application; [Additional resources](https://sdk.collaboraonline.com/) |
While not all components are perfectly designed for the execution inside containers, one of the project's objectives is to
align the applications with best practices regarding container design and operations.

View File

@@ -37,8 +37,3 @@ SPDX-License-Identifier = "CC-BY-SA-4.0"
path = ".gitlab/merge_request_templates/*.md"
SPDX-FileCopyrightText = "2025 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH"
SPDX-License-Identifier = "Apache-2.0"
[[annotations]]
path = ".gitlab/issue_templates/*.md"
SPDX-FileCopyrightText = "2025 Zentrum für Digitale Souveränität der Öffentlichen Verwaltung (ZenDiS) GmbH"
SPDX-License-Identifier = "Apache-2.0"

View File

@@ -168,7 +168,7 @@ While you will find all the details for the CLI tool in the [MariaDB documentati
## Nextcloud
`occ` is the CLI for Nextcloud; all the details can be found in the [upstream documentation](https://docs.nextcloud.com/server/stable/admin_manual/occ_command.html).
`occ` is the CLI for Nextcloud; all the details can be found in the [upstream documentation](https://docs.nextcloud.com/server/latest/admin_manual/configuration_server/occ_command.html).
You can run occ commands in the `opendesk-nextcloud-aio` pod like this: `php /var/www/html/occ config:list`

View File

@@ -108,9 +108,9 @@ If you follow the "push early, push often" paradigm to save your work to the cen
existing documentation, you can avoid the CI and its linting being executed, as it might not offer additional value.
GitLab offers two options to skip the CI on a commit/push:
1. Add `[ci skip]` to your commit message ([details](https://docs.gitlab.com/ee/ci/pipelines/#skip-a-pipeline)).
- Add `[ci skip]` to your commit message ([details](https://docs.gitlab.com/ee/ci/pipelines/#skip-a-pipeline)).
**Note:** The string has to be removed before merging your feature branch into `develop`.
2. Use the related git push option `git push -o ci.skip` ([details](https://docs.gitlab.com/topics/git/commit/#push-options)).
- Use the related git push option `git push -o ci.skip` ([details](https://docs.gitlab.com/ee/user/project/push_options.html#push-options-for-gitlab-cicd)).
## Renovate

View File

@@ -139,6 +139,6 @@ Helmfile requires [HelmDiff](https://github.com/databus23/helm-diff) to compare
[^1]: Due to a [Helm bug](https://github.com/helm/helm/issues/30890) Helm 3.18.0 is not supported.
[^2]: Due to [restrictions on Kubernetes `emptyDir`](https://github.com/kubernetes/kubernetes/pull/130277) you need a volume provisioner that has sticky bit support, otherwise the OpenProject seeder job will fail. E.g. the `local-path-provisioner` does not have sticky bit support.
[^2]: Due to [restrictions on Kubernetes `emptyDir`](https://github.com/kubernetes/kubernetes/pull/130277) you need a volume provisioner that has sticky bit support, otherwise the OpenProject seeder job will fail.
[^3]: Required for Dovecot Pro as part of openDesk Enterprise Edition.

View File

@@ -47,7 +47,10 @@ ingress:
- "{{ .Values.global.hosts.collabora }}.{{ .Values.global.domain }}"
podAnnotations:
{{ .Values.annotations.coco.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: collabora-controller
{{- with .Values.annotations.coco.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
securityContext:
allowPrivilegeEscalation: false

View File

@@ -110,7 +110,11 @@ ingress:
- "{{ .Values.global.hosts.collabora }}.{{ .Values.global.domain }}"
podAnnotations:
{{ .Values.annotations.collabora.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: collabora
prometheus.io/scrape: "true"
{{- with .Values.annotations.collabora.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
fsGroup: 1001

View File

@@ -55,7 +55,10 @@ persistence:
enabled: false
podAnnotations:
{{ .Values.annotations.cryptpad.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: cryptpad
{{- with .Values.annotations.cryptpad.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
fsGroup: 4001

View File

@@ -143,7 +143,10 @@ ingress:
{{ .Values.annotations.element.ingress | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.element.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: opendesk-element
{{- with .Values.annotations.element.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -44,7 +44,10 @@ ingress:
{{ .Values.annotations.elementMatrixNeoboardWidget.ingress | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.elementMatrixNeoboardWidget.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: matrix-neoboard-widget
{{- with .Values.annotations.elementMatrixNeoboardWidget.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -44,7 +44,10 @@ ingress:
{{ .Values.annotations.elementMatrixNeochoiceWidget.ingress | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.elementMatrixNeochoiceWidget.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: matrix-neochoice-widget
{{- with .Values.annotations.elementMatrixNeochoiceWidget.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -25,7 +25,10 @@ image:
fullnameOverride: "matrix-neodatefix-bot-bootstrap"
podAnnotations:
{{ .Values.annotations.elementMatrixNeodatefixBotBootstrap.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: matrix-neodatefix-bot-bootstrap
{{- with .Values.annotations.elementMatrixNeodatefixBotBootstrap.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
securityContext:
allowPrivilegeEscalation: false

View File

@@ -90,7 +90,10 @@ persistence:
{{ .Values.annotations.elementMatrixNeodatefixBot.persistence | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.elementMatrixNeodatefixBot.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: matrix-neodatefix-bot
{{- with .Values.annotations.elementMatrixNeodatefixBot.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -49,7 +49,10 @@ ingress:
{{ .Values.annotations.elementMatrixNeodatefixWidget.ingress | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.elementMatrixNeodatefixWidget.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: matrix-neodatefix-widget
{{- with .Values.annotations.elementMatrixNeodatefixWidget.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -25,7 +25,10 @@ image:
fullnameOverride: "opendesk-matrix-user-verification-service-bootstrap"
podAnnotations:
{{ .Values.annotations.elementMatrixUserVerificationServiceBootstrap.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: opendesk-matrix-user-verification-service-bootstrap
{{- with .Values.annotations.elementMatrixUserVerificationServiceBootstrap.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
securityContext:
allowPrivilegeEscalation: false

View File

@@ -44,7 +44,10 @@ image:
tag: {{ .Values.images.matrixUserVerificationService.tag | quote }}
podAnnotations:
{{ .Values.annotations.elementMatrixUserVerificationService.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: opendesk-matrix-user-verification-service
{{- with .Values.annotations.elementMatrixUserVerificationService.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -56,7 +56,10 @@ ingress:
secretName: {{ .Values.ingress.tls.secretName | quote }}
podAnnotations:
{{ .Values.annotations.elementSynapseWeb.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: opendesk-synapse-web
{{- with .Values.annotations.elementSynapseWeb.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -242,7 +242,10 @@ persistence:
{{ .Values.annotations.elementSynapse.persistence | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.elementSynapse.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: opendesk-synapse
{{- with .Values.annotations.elementSynapse.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -49,7 +49,10 @@ ingress:
{{ .Values.annotations.elementWellKnown.ingress | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.elementWellKnown.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: opendesk-well-known
{{- with .Values.annotations.elementWellKnown.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -111,10 +111,11 @@ jitsi:
type: "RuntimeDefault"
seLinuxOptions:
{{ .Values.seLinuxOptions.jitsi | toYaml | nindent 8 }}
{{- if .Values.annotations.jitsiWeb.pod }}
podAnnotations:
{{ .Values.annotations.jitsiWeb.pod | toYaml | nindent 6 }}
{{- end }}
intents.otterize.com/service-name: "jitsi-web"
{{- with .Values.annotations.jitsiWeb.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
prosody:
image:
repository: "{{ coalesce .Values.repositories.image.registryOpencodeDe .Values.global.imageRegistry .Values.images.prosody.registry }}/{{ .Values.images.prosody.repository }}"
@@ -164,10 +165,11 @@ jitsi:
type: "RuntimeDefault"
seLinuxOptions:
{{ .Values.seLinuxOptions.prosody | toYaml | nindent 8 }}
{{- if .Values.annotations.jitsiProsody.pod }}
podAnnotations:
{{ .Values.annotations.jitsiProsody.pod | toYaml | nindent 6 }}
{{- end }}
intents.otterize.com/service-name: "jitsi-prosody"
{{- with .Values.annotations.jitsiProsody.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
jicofo:
replicaCount: {{ .Values.replicas.jicofo }}
image:
@@ -191,10 +193,11 @@ jitsi:
type: "RuntimeDefault"
seLinuxOptions:
{{ .Values.seLinuxOptions.jicofo | toYaml | nindent 8 }}
{{- if .Values.annotations.jitsiJicofo.pod }}
podAnnotations:
{{ .Values.annotations.jitsiJicofo.pod | toYaml | nindent 6 }}
{{- end }}
intents.otterize.com/service-name: "jitsi-jicofo"
{{- with .Values.annotations.jitsiJicofo.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
jigasi:
replicaCount: {{ .Values.replicas.jigasi }}
enabled: {{ .Values.sip.jigasi.enabled }}
@@ -224,10 +227,11 @@ jitsi:
type: "RuntimeDefault"
seLinuxOptions:
{{ .Values.seLinuxOptions.jigasi | toYaml | nindent 8 }}
{{- if .Values.annotations.jitsiJigasi.pod }}
podAnnotations:
{{ .Values.annotations.jitsiJigasi.pod | toYaml | nindent 6 }}
{{- end }}
intents.otterize.com/service-name: "jitsi-jigasi"
{{- with .Values.annotations.jitsiJigasi.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
jvb:
replicaCount: {{ .Values.replicas.jvb }}
# The `useNodeIP` option provided by the upstream charts does not support all relevant scenarios, but since
@@ -260,10 +264,11 @@ jitsi:
type: "RuntimeDefault"
seLinuxOptions:
{{ .Values.seLinuxOptions.jvb | toYaml | nindent 8 }}
{{- if .Values.annotations.jitsiJvb.pod }}
podAnnotations:
{{ .Values.annotations.jitsiJvb.pod | toYaml | nindent 6 }}
{{- end }}
intents.otterize.com/service-name: "jitsi-jvb"
{{- with .Values.annotations.jitsiJvb.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
metrics:
prometheusAnnotations:
{{ .Values.annotations.jitsiJvb.metricsPrometheus | toYaml | nindent 8 }}
@@ -288,10 +293,11 @@ jitsi:
# Chart does not allow to template more
capabilities:
add: ["SYS_ADMIN"]
{{- if .Values.annotations.jitsiJibri.pod }}
podAnnotations:
{{ .Values.annotations.jitsiJibri.pod | toYaml | nindent 6 }}
{{- end }}
intents.otterize.com/service-name: "jitsi-jibri"
{{- with .Values.annotations.jitsiJibri.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
imagePullSecrets:
{{- range .Values.global.imagePullSecrets }}
- name: {{ . | quote }}

View File

@@ -10,7 +10,7 @@ global:
{{ .Values.global.imagePullSecrets | toYaml | nindent 4 }}
additionalAnnotations:
intents.otterize.com/service-name: "opendesk-nextcloud-php"
intents.otterize.com/service-name: "opendesk-nextcloud-management"
{{- with .Values.annotations.nextcloudNextcloudMgmt.additional }}
{{ . | toYaml | nindent 2}}
{{- end }}

View File

@@ -10,7 +10,6 @@ global:
{{ .Values.global.imagePullSecrets | toYaml | nindent 4 }}
additionalAnnotations:
intents.otterize.com/service-name: "opendesk-nextcloud-notifypush"
{{- with .Values.annotations.nextcloudNotifyPush.additional }}
{{ . | toYaml | nindent 4 }}
{{- end }}
@@ -114,7 +113,10 @@ metrics:
{{ .Values.annotations.nextcloudNotifyPush.serviceMetrics | toYaml | nindent 6 }}
podAnnotations:
{{ .Values.annotations.nextcloudNotifyPush.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "opendesk-nextcloud-notifypush"
{{- with .Values.annotations.nextcloudNotifyPush.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
fsGroup: 101
# prometheus:

View File

@@ -39,7 +39,11 @@ exporter:
imagePullPolicy: {{ .Values.global.imagePullPolicy | quote }}
tag: {{ .Values.images.nextcloudExporter.tag | quote }}
podAnnotations:
{{ .Values.annotations.nextcloudExporter.pod | toYaml | nindent 4 }}
prometheus.io/scrape: "true"
intents.otterize.com/service-name: "opendesk-nextcloud-exporter"
{{- with .Values.annotations.nextcloudExporter.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
prometheus:
serviceMonitor:
enabled: {{ .Values.monitoring.prometheus.serviceMonitors.enabled }}
@@ -76,7 +80,7 @@ aio:
topologyKey: "kubernetes.io/hostname"
additionalAnnotations:
intents.otterize.com/service-name: "opendesk-nextcloud-aio"
intents.otterize.com/service-name: "opendesk-nextcloud-aio-cron"
{{- with .Values.annotations.nextcloudAio.additional }}
{{ . | toYaml | nindent 4 }}
{{- end }}

View File

@@ -117,11 +117,20 @@ backend:
seLinuxOptions:
{{ .Values.seLinuxOptions.notesBackend | toYaml | nindent 6 }}
podAnnotations:
{{ .Values.annotations.notesBackend.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "impress-backend"
{{- with .Values.annotations.notesBackend.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
podAnnotationsCreateUser:
{{ .Values.annotations.notesBackend.createUserJob | toYaml | nindent 4 }}
intents.otterize.com/service-name: "impress-create-user"
{{- with .Values.annotations.notesBackend.createUserJob }}
{{ . | toYaml | nindent 4 }}
{{- end }}
podAnnotationsMigrate:
{{ .Values.annotations.notesBackend.migrateJob | toYaml | nindent 4 }}
intents.otterize.com/service-name: "impress-migrate"
{{- with .Values.annotations.notesBackend.migrateJob }}
{{ . | toYaml | nindent 4 }}
{{- end }}
podSecurityContext:
enabled: true
fsGroup: 1000
@@ -149,7 +158,7 @@ backend:
subPath: "theme.json"
{{- if .Values.certificate.selfSigned }}
- name: "trusted-cert-secret-volume"
mountPath: "/usr/local/lib/python3.13/site-packages/certifi/cacert.pem"
mountPath: "/usr/local/lib/python3.12/site-packages/certifi/cacert.pem"
subPath: "ca-certificates.crt"
{{- end }}
@@ -189,7 +198,10 @@ frontend:
seLinuxOptions:
{{ .Values.seLinuxOptions.notesFrontend | toYaml | nindent 6 }}
podAnnotations:
{{ .Values.annotations.notesFrontend.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "impress-frontend"
{{- with .Values.annotations.notesFrontend.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
podSecurityContext:
enabled: true
fsGroup: 1000
@@ -257,7 +269,10 @@ y-provider:
{{ .Values.annotations.notesYProvider.ingressCollaborationWS | toYaml | nindent 6 }}
ingressClassName: {{ .Values.ingress.ingressClassName }}
podAnnotations:
{{ .Values.annotations.notesYProvider.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "impress-y-provider"
{{- with .Values.annotations.notesYProvider.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
podSecurityContext:
enabled: true
fsGroup: 1001

View File

@@ -109,7 +109,10 @@ ingress:
{{ .Values.annotations.nubusIntercomService.ingress | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.nubusIntercomService.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: intercom-service
{{- with .Values.annotations.nubusIntercomService.pod }}
{{ . | toYaml | nindent 2}}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -42,7 +42,10 @@ configuration:
value: {{ .Values.objectstores.nubus.secretKey | default .Values.secrets.minio.umsUser | quote }}
podAnnotations:
{{ .Values.annotations.nubusNginxS3Gateway.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: nubus-nginx-s3-gateway
{{- with .Values.annotations.nubusNginxS3Gateway.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
resources:
{{ .Values.resources.nginxS3Gateway | toYaml | nindent 2 }}

View File

@@ -274,7 +274,6 @@ nubusTwofaHelpdesk:
nubusNotificationsApi:
enabled: false
additionalAnnotations:
intents.otterize.com/service-name: "ums-notifications-api"
{{- with .Values.annotations.nubusNotificationsApi.additional }}
{{ . | toYaml | nindent 4 }}
{{- end }}
@@ -312,7 +311,10 @@ nubusNotificationsApi:
annotations:
{{ .Values.annotations.nubusNotificationsApi.persistence | toYaml | nindent 6 }}
podAnnotations:
{{ .Values.annotations.nubusNotificationsApi.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "ums-notifications-api"
{{- with .Values.annotations.nubusNotificationsApi.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
postgresql:
connection:
host: {{ .Values.databases.umsNotificationsApi.host | quote }}
@@ -339,7 +341,6 @@ nubusNotificationsApi:
nubusPortalFrontend:
additionalAnnotations:
intents.otterize.com/service-name: "ums-portal-frontend"
{{- with .Values.annotations.nubusPortalFrontend.additional }}
{{ . | toYaml | nindent 4 }}
{{- end }}
@@ -415,7 +416,10 @@ nubusPortalFrontend:
annotations:
{{ .Values.annotations.nubusPortalFrontend.persistence | toYaml | nindent 6 }}
podAnnotations:
{{ .Values.annotations.nubusPortalFrontend.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "ums-portal-frontend"
{{- with .Values.annotations.nubusPortalFrontend.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
portalFrontend:
branding:
css: {{ .Values.theme.styles.portal.main | toJson }}
@@ -666,7 +670,6 @@ nubusPortalConsumer:
nubusPortalServer:
additionalAnnotations:
intents.otterize.com/service-name: "ums-portal-server"
{{- with .Values.annotations.nubusPortalServer.additional }}
{{ . | toYaml | nindent 4 }}
{{- end }}
@@ -711,7 +714,10 @@ nubusPortalServer:
annotations:
{{ .Values.annotations.nubusPortalServer.persistence | toYaml | nindent 6 }}
podAnnotations:
{{ .Values.annotations.nubusPortalServer.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "ums-portal-server"
{{- with .Values.annotations.nubusPortalServer.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
portalServer:
centralNavigation:
enabled: true
@@ -839,7 +845,10 @@ nubusUdmRestApi:
annotations:
{{ .Values.annotations.nubusUdmRestApi.persistence | toYaml | nindent 6 }}
podAnnotations:
{{ .Values.annotations.nubusUdmRestApi.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: ums-udm-rest-api
{{- with .Values.annotations.nubusUdmRestApi.pod }}
{{ . | toYaml | nindent 4 }}
{{- end}}
replicaCount: {{ .Values.replicas.umsUdmRestApi }}
resources:
{{ .Values.resources.umsUdmRestApi | toYaml | nindent 4 }}
@@ -898,7 +907,7 @@ nubusLdapServer:
additionalAnnotations:
{{ .Values.annotations.nubusLdapServer.additional | toYaml | nindent 4 }}
additionalAnnotations:
intents.otterize.com/service-name: "ums-ldap-server"
{{ .Values.annotations.nubusLdapServer.additional | toYaml | nindent 4 }}
dhInitcontainer:
image:
registry: {{ coalesce .Values.repositories.image.registryOpencodeDe .Values.global.imageRegistry .Values.images.nubusLdapServerDhInitContainer.registry | quote }}
@@ -921,7 +930,10 @@ nubusLdapServer:
size: {{ .Values.persistence.storages.nubusLdapServerData.size | quote }}
storageClass: {{ coalesce .Values.persistence.storages.nubusLdapServerData.storageClassName .Values.persistence.storageClassNames.RWO | quote }}
podAnnotations:
{{ .Values.annotations.nubusLdapServer.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "ums-ldap-server"
{{- with .Values.annotations.nubusLdapServer.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
replicaCountPrimary: {{ .Values.replicas.umsLdapServerPrimary }}
replicaCountSecondary: {{ .Values.replicas.umsLdapServerSecondary }}
replicaCountProxy: {{ .Values.replicas.umsLdapServerProxy }}
@@ -947,7 +959,6 @@ nubusProvisioning:
{{ .Values.annotations.nubusProvisioning.additional | toYaml | nindent 4 }}
api:
additionalAnnotations:
intents.otterize.com/service-name: "ums-provisioning-api"
{{- with .Values.annotations.nubusProvisioning.apiAdditional }}
{{ . | toYaml | nindent 6 }}
{{- end }}
@@ -966,7 +977,10 @@ nubusProvisioning:
auth:
password: {{ .Values.secrets.nubus.provisioning.api.natsPassword | quote}}
podAnnotations:
{{ .Values.annotations.nubusProvisioning.apiPod | toYaml | nindent 6 }}
intents.otterize.com/service-name: "ums-provisioning-api"
{{- with .Values.annotations.nubusProvisioning.apiPod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
resources:
{{ .Values.resources.umsProvisioningApi | toYaml | nindent 6 }}
containerSecurityContext:
@@ -985,7 +999,6 @@ nubusProvisioning:
{{ .Values.seLinuxOptions.umsProvisioning | toYaml | nindent 6 }}
dispatcher:
additionalAnnotations:
intents.otterize.com/service-name: "ums-provisioning-dispatcher"
{{- with .Values.annotations.nubusProvisioning.dispatcherAdditional }}
{{ . | toYaml | nindent 6 }}
{{- end }}
@@ -997,12 +1010,14 @@ nubusProvisioning:
auth:
password: {{ .Values.secrets.nubus.provisioning.dispatcherNatsPassword | quote}}
podAnnotations:
{{ .Values.annotations.nubusProvisioning.dispatcherPod | toYaml | nindent 6 }}
intents.otterize.com/service-name: "ums-provisioning-dispatcher"
{{- with .Values.annotations.nubusProvisioning.dispatcherPod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
resources:
{{ .Values.resources.umsProvisioningDispatcher | toYaml | nindent 6 }}
nats:
additionalAnnotations:
intents.otterize.com/service-name: "ums-provisioning-nats"
{{- with .Values.annotations.nubusProvisioning.natsAdditional }}
{{ . | toYaml | nindent 6 }}
{{- end }}
@@ -1060,10 +1075,12 @@ nubusProvisioning:
serviceAccount:
create: true
podAnnotations:
{{ .Values.annotations.nubusProvisioning.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "ums-provisioning-nats"
{{- with .Values.annotations.nubusProvisioning.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
prefill:
additionalAnnotations:
intents.otterize.com/service-name: "ums-provisioning-prefill"
{{- with .Values.annotations.nubusProvisioning.prefillAdditional }}
{{ . | toYaml | nindent 6 }}
{{- end }}
@@ -1075,12 +1092,14 @@ nubusProvisioning:
auth:
password: {{ .Values.secrets.nubus.provisioning.prefillNatsPassword | quote}}
podAnnotations:
{{ .Values.annotations.nubusProvisioning.prefillPod | toYaml | nindent 6 }}
intents.otterize.com/service-name: "ums-provisioning-prefill"
{{- with .Values.annotations.nubusProvisioning.prefillPod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
resources:
{{ .Values.resources.umsProvisioningPrefill | toYaml | nindent 6 }}
udmTransformer:
additionalAnnotations:
intents.otterize.com/service-name: "ums-provisioning-udm-transformer"
{{- with .Values.annotations.nubusProvisioning.udmTransformerAdditional }}
{{ . | toYaml | nindent 6 }}
{{- end }}
@@ -1092,7 +1111,10 @@ nubusProvisioning:
auth:
password: {{ .Values.secrets.nubus.provisioning.udmTransformerNatsPassword | quote}}
podAnnotations:
{{ .Values.annotations.nubusProvisioning.udmTransformerPod | toYaml | nindent 6 }}
intents.otterize.com/service-name: "ums-provisioning-udm-transformer"
{{- with .Values.annotations.nubusProvisioning.udmTransformerPod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
resources:
{{ .Values.resources.umsProvisioningUdmTransformer | toYaml | nindent 6 }}
replicaCount:
@@ -1163,7 +1185,10 @@ nubusUdmListener:
size: {{ .Values.persistence.storages.nubusUdmListener.size | quote }}
# storageClass: -- coalesce .Values.persistence.storages.nubusUdmListener.storageClassName .Values.persistence.storageClassNames.RWO | quote --
podAnnotations:
{{ .Values.annotations.nubusUdmListener.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "ums-provisioning-udm-listener"
{{- with .Values.annotations.nubusUdmListener.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
replicaCount: {{ .Values.replicas.umsUdmListener }}
resources:
{{ .Values.resources.umsUdmListener | toYaml | nindent 4 }}
@@ -1219,9 +1244,9 @@ nubusSelfServiceConsumer:
# Nubus services
nubusStackDataUms:
additionalAnnotations:
intents.otterize.com/service-name: "ums-stack-data-ums"
argocd.argoproj.io/hook: "Sync"
argocd.argoproj.io/hook-delete-policy: "BeforeHookCreation"
intents.otterize.com/service-name: "ums-stack-data-ums"
{{- with .Values.annotations.nubusStackDataUms.additional }}
{{ . | toYaml | nindent 4 }}
{{- end }}
@@ -1270,7 +1295,10 @@ nubusStackDataUms:
connection:
host: {{ .Values.databases.umsSelfservice.host | quote }}
podAnnotations:
{{ .Values.annotations.nubusStackDataUms.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "ums-stack-data-ums"
{{- with .Values.annotations.nubusStackDataUms.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
resources:
{{ .Values.resources.umsStackDataUms | toYaml | nindent 4 }}
stackDataContext:
@@ -1458,7 +1486,10 @@ nubusUmcServer:
auth:
password: ""
podAnnotations:
{{ .Values.annotations.nubusUmcServer.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: ums-umc-server
{{- with .Values.annotations.nubusUmcServer.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
# Ref.: https://docs.software-univention.de/nubus-kubernetes-operation/1.x/en/reference.html#envvar-nubusUmcServer.podManagementPolicy
podManagementPolicy: "{{ if gt .Values.replicas.umsUmcServer 4 }}Parallel{{ else }}OrderedReady{{ end }}"
postgresql:
@@ -1554,7 +1585,10 @@ nubusUmcGateway:
initResources:
{{ .Values.resources.umsUmcGateway | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.nubusUmcGateway.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: ums-umc-gateway
{{- with .Values.annotations.nubusUmcGateway.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
replicaCount: {{ .Values.replicas.umsUmcGateway }}
serviceAccount:
annotations:

View File

@@ -126,7 +126,10 @@ persistence:
{{ .Values.annotations.openxchangeDovecot.persistence | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.openxchangeDovecot.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: open-xchange-dovecot
{{- with .Values.annotations.openxchangeDovecot.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
resources:
{{ .Values.resources.dovecot | toYaml | nindent 2 }}

View File

@@ -3,6 +3,7 @@
# SPDX-License-Identifier: Apache-2.0
---
additionalAnnotations:
intents.otterize.com/service-name: open-xchange-bootstrap
argocd.argoproj.io/hook: "Sync"
argocd.argoproj.io/hook-delete-policy: "HookSucceeded"
{{- with .Values.annotations.openxchangeBootstrap.additional }}

View File

@@ -5,6 +5,7 @@
appsuite:
core-mw:
podAnnotations:
intents.otterize.com/service-name: open-xchange-core-mw
logging.open-xchange.com/format: "appsuite-json"
{{- with .Values.annotations.openxchangeEnterpriseContactPicker.appsuiteCoreMwPod }}
{{ . | toYaml | nindent 6 }}

View File

@@ -31,7 +31,10 @@ nextcloud-integration-ui:
- name: {{ . | quote }}
{{- end }}
podAnnotations:
{{ .Values.annotations.openxchangeNextcloudIntegrationUi.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: open-xchange-nextcloud-integration-ui
{{- with .Values.annotations.openxchangeNextcloudIntegrationUi.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
replicaCount: {{ .Values.replicas.openxchangeNextcloudIntegrationUI }}
resources:
{{ .Values.resources.openxchangeNextcloudIntegrationUI | toYaml | nindent 4 }}
@@ -66,7 +69,10 @@ public-sector-ui:
pullPolicy: {{ .Values.global.imagePullPolicy | quote }}
replicaCount: {{ .Values.replicas.openxchangePublicSectorUI }}
podAnnotations:
{{ .Values.annotations.openxchangePublicSectorUi.pod | toYaml | nindent 4 }}
intents.otterize.com/service-name: open-xchange-public-sector-ui
{{- with .Values.annotations.openxchangePublicSectorUi.pod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
resources:
{{ .Values.resources.openxchangePublicSectorUI | toYaml | nindent 4 }}
securityContext:
@@ -307,7 +313,10 @@ appsuite:
jolokiaPassword: {{ .Values.secrets.oxAppSuite.jolokiaPassword | quote }}
hostname: "{{ .Values.global.hosts.openxchange }}.{{ .Values.global.domain }}"
podAnnotations:
{{ .Values.annotations.openxchangeAppsuiteCoreMw.pod | toYaml | nindent 6 }}
intents.otterize.com/service-name: open-xchange-core-mw
{{- with .Values.annotations.openxchangeAppsuiteCoreMw.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
serviceAccount:
annotations:
{{ .Values.annotations.openxchangeAppsuiteCoreMw.serviceAccount | toYaml | nindent 8 }}
@@ -334,7 +343,10 @@ appsuite:
pullPolicy: {{ .Values.global.imagePullPolicy | quote }}
replicaCount: {{ .Values.replicas.openxchangeGotenberg }}
podAnnotations:
{{ .Values.annotations.openxchangeAppsuiteCoreMw.gotenbergPod | toYaml | nindent 8 }}
intents.otterize.com/service-name: open-xchange-gotenberg
{{- with .Values.annotations.openxchangeAppsuiteCoreMw.gotenbergPod }}
{{ . | toYaml | nindent 8 }}
{{- end }}
resources:
{{ .Values.resources.openxchangeGotenberg | toYaml | nindent 8 }}
securityContext:
@@ -347,7 +359,6 @@ appsuite:
runAsNonRoot: true
runAsUser: 1001
runAsGroup: 1001
privileged: false
seccompProfile:
type: "RuntimeDefault"
seLinuxOptions:
@@ -763,7 +774,10 @@ appsuite:
pullPolicy: {{ .Values.global.imagePullPolicy | quote }}
replicaCount: {{ .Values.replicas.openxchangeCoreUI }}
podAnnotations:
{{ .Values.annotations.openxchangeAppsuiteCoreUi.pod | toYaml | nindent 6 }}
intents.otterize.com/service-name: open-xchange-core-ui
{{- with .Values.annotations.openxchangeAppsuiteCoreUi.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
resources:
{{ .Values.resources.openxchangeCoreUI | toYaml | nindent 6 }}
securityContext:
@@ -800,7 +814,10 @@ appsuite:
pullPolicy: {{ .Values.global.imagePullPolicy | quote }}
overrides: {}
podAnnotations:
{{ .Values.annotations.openxchangeAppsuiteCoreUiMiddleware.pod | toYaml | nindent 6 }}
intents.otterize.com/service-name: open-xchange-core-ui-middleware
{{- with .Values.annotations.openxchangeAppsuiteCoreUiMiddleware.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
redis: *redisConfiguration
replicaCount: {{ .Values.replicas.openxchangeCoreUIMiddleware }}
resources:
@@ -849,7 +866,10 @@ appsuite:
pullPolicy: {{ .Values.global.imagePullPolicy | quote }}
{{- if .Values.annotations.openxchangeAppsuiteCoreDocumentconverter.pod }}
podAnnotations:
{{ .Values.annotations.openxchangeAppsuiteCoreDocumentconverter.pod | toYaml | nindent 6 }}
intents.otterize.com/service-name: open-xchange-core-documentconverter
{{- with .Values.annotations.openxchangeAppsuiteCoreDocumentconverter.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
{{- end }}
redis: *redisConfiguration
replicaCount: {{ .Values.replicas.openxchangeCoreDocumentConverter }}
@@ -901,7 +921,10 @@ appsuite:
tag: {{ .Values.images.openxchangeCoreGuidedtours.tag | quote }}
pullPolicy: {{ .Values.global.imagePullPolicy | quote }}
podAnnotations:
{{ .Values.annotations.openxchangeAppsuiteCoreGuidedtours.pod | toYaml | nindent 6 }}
intents.otterize.com/service-name: open-xchange-guidedtours
{{- with .Values.annotations.openxchangeAppsuiteCoreGuidedtours.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
replicaCount: {{ .Values.replicas.openxchangeCoreGuidedtours }}
resources:
{{- .Values.resources.openxchangeCoreGuidedtours | toYaml | nindent 6 }}
@@ -945,7 +968,10 @@ appsuite:
secretKey: "."
{{- if .Values.annotations.openxchangeAppsuiteCoreImageconverter.pod }}
podAnnotations:
{{ .Values.annotations.openxchangeAppsuiteCoreImageconverter.pod | toYaml | nindent 6 }}
intents.otterize.com/service-name: open-xchange-core-imageconverter
{{- with .Values.annotations.openxchangeAppsuiteCoreImageconverter.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
{{- end }}
redis: *redisConfiguration
replicaCount: {{ .Values.replicas.openxchangeCoreImageConverter }}
@@ -981,7 +1007,8 @@ appsuite:
repository: {{ .Values.images.openxchangeGuardUI.repository | quote }}
tag: {{ .Values.images.openxchangeGuardUI.tag | quote }}
pullPolicy: {{ .Values.global.imagePullPolicy | quote }}
podAnnotations: {}
podAnnotations:
intents.otterize.com/service-name: open-xchange-guard-ui
replicaCount: {{ .Values.replicas.openxchangeGuardUI }}
resources:
{{- .Values.resources.openxchangeGuardUI | toYaml | nindent 6 }}
@@ -1017,7 +1044,10 @@ appsuite:
- name: {{ . | quote }}
{{- end }}
podAnnotations:
{{ .Values.annotations.openxchangeAppsuiteCoreUserGuide.pod | toYaml | nindent 6 }}
intents.otterize.com/service-name: open-xchange-core-user-guide
{{- with .Values.annotations.openxchangeAppsuiteCoreUserGuide.pod }}
{{ . | toYaml | nindent 6 }}
{{- end }}
replicaCount: {{ .Values.replicas.openxchangeCoreUserGuide }}
resources:
{{- .Values.resources.openxchangeCoreUserGuide | toYaml | nindent 6 }}

View File

@@ -49,11 +49,11 @@ oxConnector:
oxMasterAdmin: "admin"
oxMasterPassword: {{ .Values.secrets.oxAppSuite.adminPassword | quote }}
oxSmtpServer: "smtp://127.0.0.1:587"
oxSoapServer: {{ printf "http://%s.%s.svc.%s" "open-xchange-core-mw-admin" (.Values.apps.oxAppSuite.namespace | default .Release.Namespace) .Values.cluster.networking.domain | quote }}
oxSoapServer: "http://open-xchange-core-mw-admin"
provisioningApi:
connection:
baseUrl: {{ printf "http://%s.%s.svc.%s" "ums-provisioning-api" (.Values.apps.nubus.namespace | default .Release.Namespace) .Values.cluster.networking.domain | quote }}
baseUrl: "http://ums-provisioning-api"
auth:
username: "ox-connector"
password: {{ .Values.secrets.oxConnector.provisioningApiPassword | quote }}
@@ -68,7 +68,10 @@ persistence:
#storageClass: {{ coalesce .Values.persistence.storages.oxConnector.storageClassName .Values.persistence.storageClassNames.RWO | quote }}
podAnnotations:
{{ .Values.annotations.nubusOxConnector.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: open-xchange-connector
{{- with .Values.annotations.nubusOxConnector.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
replicaCount: {{ .Values.replicas.oxConnector }}

View File

@@ -63,9 +63,10 @@ postfix:
value: {{ .Values.smtp.username }}
password:
value: {{ .Values.smtp.password }}
smtpSASLAuthEnable: "yes"
{{- end }}
allowRelayNets: false
smtpSASLAuthEnable: "yes"
smtpSASLPasswordMaps: "lmdb:/etc/postfix/sasl_passwd.map"
smtpTLSSecurityLevel: "encrypt"
smtpdSASLAuthEnable: "yes"
smtpdSASLSecurityOptions: "noanonymous"
@@ -91,7 +92,10 @@ postfix:
virtualTransport: "lmtps:dovecot:24"
podAnnotations:
{{ .Values.annotations.openxchangePostfix.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: open-xchange-postfix
{{- with .Values.annotations.openxchangePostfix.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
replicaCount: {{ .Values.replicas.postfix }}

View File

@@ -19,7 +19,7 @@ cleanup:
config:
debug:
enabled: {{ .Values.debug.enabled }}
enabled: true
openproject:
fileshareName: "Nextcloud at {{ .Values.global.domain }}"
admin:

View File

@@ -64,7 +64,7 @@ repositories:
releases:
- name: "opendesk-otterize"
chart: "otterize-repo/{{ .Values.charts.otterize.name }}"
chart: "/home/svenn/git/opendesk-otterize/charts/opendesk-otterize"
version: "{{ .Values.charts.otterize.version }}"
values:
- "values-otterize.yaml.gotmpl"

View File

@@ -116,7 +116,10 @@ image:
imagePullPolicy: {{ .Values.global.imagePullPolicy | quote }}
podAnnotations:
{{ .Values.annotations.opendeskServicesStaticFiles.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: opendesk-static-files
{{- with .Values.annotations.opendeskServicesStaticFiles.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -10,6 +10,8 @@ additionalAnnotations:
{{ .Values.annotations.opendeskServicesOtterize.additional | toYaml | nindent 2 }}
apps:
cassandra:
enabled: {{ .Values.apps.cassandra.enabled }}
clamavDistributed:
enabled: {{ .Values.apps.clamavDistributed.enabled }}
clamavSimple:
@@ -42,7 +44,7 @@ apps:
enabled: {{ .Values.apps.nubus.enabled }}
openproject:
enabled: {{ .Values.apps.openproject.enabled }}
oxAppsuite:
oxAppSuite:
enabled: {{ .Values.apps.oxAppSuite.enabled }}
postfix:
enabled: {{ .Values.apps.postfix.enabled }}

View File

@@ -131,7 +131,10 @@ persistence:
enabled: false
podAnnotations:
{{ .Values.annotations.openproject.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: "openproject"
{{- with .Values.annotations.openproject.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
postgresql:
bundled: false

View File

@@ -73,8 +73,10 @@ persistence:
storageClass: {{ coalesce .Values.persistence.storages.cassandra.storageClassName .Values.persistence.storageClassNames.RWO | quote }}
podAnnotations:
{{ .Values.annotations.cassandra.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: "cassandra"
{{- with .Values.annotations.cassandra.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true
fsGroup: 1001

View File

@@ -26,7 +26,10 @@ clamd:
tag: {{ .Values.images.clamd.tag | quote }}
imagePullPolicy: {{ .Values.global.imagePullPolicy | quote }}
podAnnotations:
{{ .Values.annotations.servicesExternalClamavDistributed.clamdPod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "clamav-distributed"
{{- with .Values.annotations.servicesExternalClamavDistributed.clamdPod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
podSecurityContext:
enabled: true
fsGroup: 101
@@ -81,7 +84,10 @@ freshclam:
tag: {{ .Values.images.freshclam.tag | quote }}
imagePullPolicy: {{ .Values.global.imagePullPolicy | quote }}
podAnnotations:
{{ .Values.annotations.servicesExternalClamavDistributed.freshclamPod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "clamav-freshclam"
{{- with .Values.annotations.servicesExternalClamavDistributed.freshclamPod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
podSecurityContext:
enabled: true
fsGroup: 101
@@ -129,7 +135,10 @@ icap:
tag: {{ .Values.images.icap.tag | quote }}
imagePullPolicy: {{ .Values.global.imagePullPolicy | quote }}
podAnnotations:
{{ .Values.annotations.servicesExternalClamavDistributed.icapPod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "clamav-icap"
{{- with .Values.annotations.servicesExternalClamavDistributed.icapPod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
podSecurityContext:
enabled: true
fsGroup: 101
@@ -169,7 +178,10 @@ milter:
tag: {{ .Values.images.milter.tag | quote }}
imagePullPolicy: {{ .Values.global.imagePullPolicy | quote }}
podAnnotations:
{{ .Values.annotations.servicesExternalClamavDistributed.milterPod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "clamav-milter"
{{- with .Values.annotations.servicesExternalClamavDistributed.milterPod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
podSecurityContext:
enabled: true
fsGroup: 101

View File

@@ -44,7 +44,10 @@ persistence:
{{ .Values.annotations.servicesExternalClamavSimple.persistence | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.servicesExternalClamavSimple.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: "clamav-simple"
{{- with .Values.annotations.servicesExternalClamavSimple.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -30,7 +30,10 @@ image:
imagePullPolicy: {{ .Values.global.imagePullPolicy | quote }}
podAnnotations:
{{ .Values.annotations.servicesExternalDkimpy.service | toYaml | nindent 2 }}
intents.otterize.com/service-name: "dkimpy-milter"
{{- with .Values.annotations.servicesExternalDkimpy.service }}
{{ . | toYaml | nindent 2 }}
{{- end }}
podSecurityContext:
enabled: true

View File

@@ -78,6 +78,7 @@ persistence:
{{ .Values.annotations.servicesExternalMariadb.persistence | toYaml | nindent 4 }}
podAnnotations:
intents.otterize.com/service-name: "mariadb"
argocd.argoproj.io/hook: "PostSync"
argocd.argoproj.io/hook-delete-policy: "BeforeHookCreation"
{{- with .Values.annotations.servicesExternalMariadb.pod }}

View File

@@ -34,8 +34,10 @@ image:
pullPolicy: {{ .Values.global.imagePullPolicy | quote }}
podAnnotations:
{{ .Values.annotations.servicesExternalMemcached.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: "memcached"
{{- with .Values.annotations.servicesExternalMemcached.pod }}
{{ . | toYaml | nindent 2 }}
{{- end}}
replicaCount: {{ .Values.replicas.memcached }}
resources:

View File

@@ -134,7 +134,10 @@ provisioning:
withLock: false
{{- end }}
podAnnotations:
{{ .Values.annotations.servicesExternalMinio.provisioningPod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "minio-provisioning"
{{- with .Values.annotations.servicesExternalMinio.provisioningPod }}
{{ . | toYaml | nindent 4}}
{{- end }}
policies:
- name: "migrations-bucket-policy"
statements:
@@ -271,7 +274,10 @@ provisioning:
{{ .Values.resources.minio | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.servicesExternalMinio.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: "minio"
{{- with .Values.annotations.servicesExternalMinio.pod }}
{{ . | toYaml | nindent 2 }}
{{- end }}
readinessProbe:
enabled: true

View File

@@ -41,7 +41,10 @@ persistence:
{{ .Values.annotations.servicesExternalPostfix.persistence | toYaml | nindent 4 }}
podAnnotations:
{{ .Values.annotations.servicesExternalPostfix.pod | toYaml | nindent 2 }}
intents.otterize.com/service-name: "postfix"
{{- with .Values.annotations.servicesExternalPostfix.pod }}
{{ . | toYaml | nindent 2}}
{{- end}}
podSecurityContext:
enabled: true
@@ -68,13 +71,14 @@ postfix:
value: {{ .Values.smtp.username }}
password:
value: {{ .Values.smtp.password }}
smtpSASLAuthEnable: "yes"
{{- end }}
# Warning: This setting allows unauthenticated mail relay from relayNets!
allowRelayNets: true
relayNets: {{ join " " .Values.cluster.networking.cidr | quote }}
minTLSVersion: "TLSv1.2"
smtpdTLSMandatoryCiphers: "medium"
smtpSASLAuthEnable: "yes"
smtpSASLPasswordMaps: "lmdb:/etc/postfix/sasl_passwd.map"
smtpTLSSecurityLevel: "encrypt"
smtpdSASLAuthEnable: "yes"
smtpdSASLSecurityOptions: "noanonymous"
@@ -106,8 +110,6 @@ postfix:
virtualTransport: "lmtps:dovecot:24"
{{- end }}
podAnnotations: {}
replicaCount: {{ .Values.replicas.postfix }}
resources:

View File

@@ -115,6 +115,7 @@ persistence:
{{ .Values.annotations.servicesExternalPostgresql.persistence | toYaml | nindent 4 }}
podAnnotations:
intents.otterize.com/service-name: "postgresql"
argocd.argoproj.io/hook: "PostSync"
argocd.argoproj.io/hook-delete-policy: "BeforeHookCreation"
{{- with .Values.annotations.servicesExternalPostgresql.pod}}

View File

@@ -44,7 +44,10 @@ master:
annotations:
{{ .Values.annotations.servicesExternalRedis.masterPersistence | toYaml | nindent 6 }}
podAnnotations:
{{ .Values.annotations.servicesExternalRedis.masterPod | toYaml | nindent 4 }}
intents.otterize.com/service-name: "redis"
{{- with .Values.annotations.servicesExternalRedis.masterPod }}
{{ . | toYaml | nindent 4 }}
{{- end }}
resources:
{{ .Values.resources.redis | toYaml | nindent 4 }}
service:

View File

@@ -5,7 +5,7 @@ images:
collabora:
registry: "registry.opencode.de"
repository: "zendis/opendesk-enterprise/components/supplier/collabora/images/collabora-online-for-opendesk"
tag: "25.04.5.3.1@sha256:d22407cd3bd83dd832f986a697d81c1a4642f55129c76a5a20e637274ce7bf62"
tag: "25.04.4.3.1@sha256:b0b5fa9b061df1e8473dff9bb2cf295ab41bd7b35a78b785de518883b07e97c2"
dovecot:
registry: "registry.opencode.de"
repository: "zendis/opendesk-enterprise/components/supplier/open-xchange/images-mirror/dovecot-pro"

View File

@@ -376,7 +376,12 @@ annotations:
clamdPod: ~
clamdService: ~
clamdServiceAccount: ~
icapCommon: ~
icapPod: ~
icapService: ~
icapServiceAccount: ~
freshclamCommon: ~
freshclamPod: ~
freshclamService: ~
freshclamServiceAccount: ~
milterCommon: ~

View File

@@ -437,7 +437,7 @@ charts:
registry: "registry.opencode.de"
repository: "bmi/opendesk/components/platform-development/charts/opendesk-postfix"
name: "postfix"
version: "5.0.1"
version: "5.0.0"
verify: true
postgresql:
# providerCategory: "Platform"

View File

@@ -50,7 +50,7 @@ images:
# upstreamRepository: "bmi/opendesk/components/supplier/collabora/images/collabora-online-for-opendesk"
registry: "registry.opencode.de"
repository: "bmi/opendesk/components/supplier/collabora/images/collabora-online-for-opendesk"
tag: "25.04.5.3.1@sha256:0e1ccf43308121c657936510de27244057c3826777a491495a0f7e55a196bc59"
tag: "25.04.4.3.1@sha256:2ba934fb0dc18965bfaf19151017205b0a85af8b069bc34c994a8eae0b4bee34"
collaboraController:
# Enterprise Component
# providerCategory: "Supplier"
@@ -354,7 +354,7 @@ images:
# upstreamRepository: "lasuite/impress-backend"
registry: "registry.opencode.de"
repository: "bmi/opendesk/components/platform-development/images/opendesk-notes"
tag: "1.12.1-docs-v3.4.0-backend@sha256:9d611d924056bd945499ef038ee7ac4c7a1196adfe0fc464d600d163dc42291a"
tag: "1.11.0-docs-v3.4.0-backend@sha256:a07acb86ee260fd9242c4173a01c67c36552d149a2af91220348bdb588c19bf5"
notesFrontend:
# providerCategory: "Supplier"
# providerResponsible: "DINUM"
@@ -362,7 +362,7 @@ images:
# upstreamRepository: "lasuite/impress-frontend"
registry: "registry.opencode.de"
repository: "bmi/opendesk/components/platform-development/images/opendesk-notes"
tag: "1.12.1-docs-v3.4.0-frontend@sha256:51cb96a97dd5668366d9f664977cbb869e4a59499bf30bc1766528dd41843ac7"
tag: "1.11.0-docs-v3.4.0-frontend@sha256:e7316700442455419ebb2e37fe2ae246bb90a7d09ad30477df608b5eb6089095"
notesYProvider:
# providerCategory: "Supplier"
# providerResponsible: "DINUM"
@@ -370,7 +370,7 @@ images:
# upstreamRepository: "lasuite/impress-y-provider"
registry: "registry-1.docker.io"
repository: "lasuite/impress-y-provider"
tag: "v3.4.0@sha256:fce38ca22cdc80c06803ded6f7147b6d1df22dd21f58ef834adef1d3aa83d667"
tag: "v3.2.1@sha256:9dd7068336c02fe71806bc3576e7dc8636d7ccb139667c6303f0753e18d3ab7e"
nubusBlocklistCleanup:
# providerCategory: "Supplier"
# providerResponsible: "Univention"

View File

@@ -22,8 +22,8 @@ name: "openDesk"
platforms:
- "web"
developmentStatus: "stable"
softwareVersion: "1.8.0"
releaseDate: "2025-09-25"
softwareVersion: "1.7.1"
releaseDate: "2025-08-26"
softwareType: "standalone/web"
url: "https://gitlab.opencode.de/bmi/opendesk/"
logo: ".opencode/openDesk-logo-rgb-color.svg"