fix(openproject): New functional setting for guest login (see authentication.openProject.guestAccess.enabled in functional.yaml) and bump Helm chart to 5.2.0.

helmfile/apps/openproject/values.yaml.gotmpl

@@ -30,7 +30,9 @@ environment:
   OPENPROJECT_LOGIN__REQUIRED: "true"
   OPENPROJECT_USER__DEFAULT__TIMEZONE: "Europe/Berlin"
   OPENPROJECT_OAUTH__ALLOW__REMAPPING__OF__EXISTING__USERS: "true"
+  {{ if not .Values.authentication.openProject.guestAccess.enabled }}
   OPENPROJECT_OMNIAUTH__DIRECT__LOGIN__PROVIDER: "keycloak"
+  {{- end }}
   OPENPROJECT_PER__PAGE__OPTIONS: "20, 50, 100, 200"
   OPENPROJECT_EMAIL__DELIVERY__METHOD: "smtp"
   OPENPROJECT_SMTP__AUTHENTICATION: "plain"

helmfile/environments/default/charts.yaml

@@ -252,7 +252,7 @@ charts:
     registry: "registry.opencode.de"
     repository: "bmi/opendesk/components/supplier/openproject/charts-mirror"
     name: "openproject"
-    version: "5.1.4"
+    version: "5.2.0"
     verify: true
   openprojectBootstrap:
     # providerCategory: "Platform"

helmfile/environments/default/functional.yaml

@@ -7,6 +7,12 @@ authentication:
     # Note: Removing a group from the list will not disable 2FA for the removed group.
     groups:
       - "Domain Admins"
+  openProject:
+    guestAccess:
+      # If enabled links pointing to OpenProject no longer redirect to SSO/Keycloak login but show the
+      # OpenDesk login screen, where SSO users can click on "Keycloak" to access the SSO login, but guest
+      # users can authenticate with their own credentials.
+      enabled: false
 
 externalServices:
   nubus: