chore(release): 0.5.17 [skip ci]

## [0.5.17](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.16...v0.5.17) (2023-10-28)

### Bug Fixes

* **nextcloud:** Update swp_integration app and prepare CryptPad integration ([a046dea](a046deaf17))

CHANGELOG.md

@@ -1,3 +1,24 @@
+## [0.5.17](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.16...v0.5.17) (2023-10-28)
+
+
+### Bug Fixes
+
+* **nextcloud:** Update swp_integration app and prepare CryptPad integration ([a046dea](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/commit/a046deaf173ab41029c2ab5e3161bd89e0fdabcb))
+
+## [0.5.16](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.15...v0.5.16) (2023-10-26)
+
+
+### Bug Fixes
+
+* **openproject:** Slim container with upgraded helm-chart ([535823e](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/commit/535823e0a8b2bde72d159835248b2287fd136af7))
+
+## [0.5.15](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.14...v0.5.15) (2023-10-25)
+
+
+### Bug Fixes
+
+* **helmfile:** Add XWiki Jetty and UniventionKeycloak to image.yaml for Compliance checks. They are not yet part of standard deployment. ([8e376bb](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/commit/8e376bb4a5e37e16d76ea527cd02a5f614cdfe3d))
+
 ## [0.5.14](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.13...v0.5.14) (2023-10-20)
 
 

helmfile/apps/element/values-matrix-user-verification-service.yaml

@@ -9,10 +9,10 @@ containerSecurityContext:
   enabled: true
   privileged: false
   # TODO: the service can't run with read only filesystem or as non-root
-  #readOnlyRootFilesystem: true
+  # readOnlyRootFilesystem: true
-  #runAsGroup: 101
+  # runAsGroup: 101
-  #runAsNonRoot: true
+  # runAsNonRoot: true
-  #runAsUser: 101
+  # runAsUser: 101
   seccompProfile:
     type: "RuntimeDefault"
 

helmfile/apps/nextcloud/helmfile.yaml

@@ -24,7 +24,7 @@ repositories:
 releases:
   - name: "opendesk-nextcloud-bootstrap"
     chart: "opendesk-nextcloud-bootstrap-repo/opendesk-nextcloud-bootstrap"
-    version: "3.1.2"
+    version: "3.2.2"
     wait: true
     waitForJobs: true
     values:

helmfile/apps/nextcloud/values-nextcloud.yaml

@@ -44,6 +44,18 @@ externalDatabase:
 metrics:
   enabled: false
 
+nextcloud:
+  configs:
+    mimetypealiases.json: |-
+      {
+        "application/x-drawio": "image"
+      }
+
+    mimetypemapping.json: |-
+      {
+        "drawio": ["application/x-drawio"]
+      }
+
 # this is not documented but can be found in values.yaml
 service:
   port: "80"

helmfile/apps/openproject/helmfile.yaml

@@ -12,7 +12,9 @@ repositories:
 releases:
   - name: "openproject"
     chart: "openproject-repo/openproject"
-    version: "1.8.0"
+    version: "2.0.4"
+    wait: true
+    waitForJobs: true
     values:
       - "values.yaml"
       - "values.gotmpl"

helmfile/apps/openproject/values.gotmpl

@@ -68,7 +68,7 @@ environment:
 
 persistence:
   size: "{{ .Values.persistence.size.openproject }}"
-  storageClassName: "{{ .Values.persistence.storageClassNames.RWO }}"
+  storageClassName: "{{ .Values.persistence.storageClassNames.RWX }}"
 
 replicaCount: {{ .Values.replicas.openproject }}
 

helmfile/apps/openproject/values.yaml

@@ -36,6 +36,10 @@ securityContext:
     type: "RuntimeDefault"
   readOnlyRootFilesystem: false
 
+persistence:
+  accessModes:
+    - "ReadWriteMany"
+
 # For more details and more options see
 # https://www.openproject.org/docs/installation-and-operations/configuration/environment/
 environment:

helmfile/environments/default/images.yaml

@@ -58,6 +58,11 @@ images:
     repository: "bitnami/keycloak"
     tag: "19.0.3-debian-11-r22@sha256:4ac04104d20d4861ecca24ff2d07d71b34a98ee1148c6e6b6e7969a6b2ad085e"
     # @supplier: "Univention"
+  keycloakUnivention:
+    # This is a preview and not part of the standard deployment.
+    repository: "souvap/tooling/images/univention/keycloak-app-on-use-base-manpub-tr"
+    tag: "latest"
+    # @supplier: "Univention"
   keycloakBootstrap:
     repository: "souvap/tooling/images/ansible"
     tag: "4.10.0@sha256:89d8212c20e03b0fd079e08afaf3247c1b96b380c4db1b572d68d0b4a6abc0ac"
@@ -108,8 +113,8 @@ images:
     tag: "27.1.1-apache@sha256:47325758ffcd54563021e697905aaba6aac8c21bceefb245c67d40194813ce39"
     # @supplier: "Nextcloud Community"
   openproject:
-    repository: "souvap/tooling/images/openproject/opendesk"
+    repository: "openproject/open_desk"
-    tag: "fat-dev@sha256:e5d0fb5125df968ba98cb3005b7051ddff25b05da54922c94bb2ee61e6ec842c"
+    tag: "dev@sha256:e907515ebbc758ea93b7efd9209c27a449e99adc0a3fc725a73c89508140a2f4"
     # @supplier: "OpenProject"
   openxchangeBootstrap:
     repository: "alpine/k8s"
@@ -194,54 +199,67 @@ images:
     tag: "20230829T094822@sha256:6415847851ee3b474cea756212698f4a110fbbde74882e22da92500a6358a4f8"
     # @supplier: "Univention"
   umsConfigHtpasswd:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/config-htpasswd"
     tag: "latest"
     # @supplier: "Univention"
   umsDataLoader:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/data-loader"
     tag: "latest"
     # @supplier: "Univention"
   umsLdapNotifier:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/ldap-notifier"
     tag: "latest"
     # @supplier: "Univention"
   umsLdapServer:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/ldap-server"
     tag: "latest"
     # @supplier: "Univention"
   umsNotificationsApi:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/notifications-api"
     tag: "latest"
     # @supplier: "Univention"
   umsPortalListener:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/portal-listener"
     tag: "latest"
     # @supplier: "Univention"
   umsPortalFrontend:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/portal-frontend"
     tag: "latest"
     # @supplier: "Univention"
   umsPortalServer:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/portal-server"
     tag: "latest"
     # @supplier: "Univention"
   umsWaitForDependency:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/wait-for-dependency"
     tag: "latest"
     # @supplier: "Univention"
   umsStoreDav:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/store-dav"
     tag: "latest"
     # @supplier: "Univention"
   umsUdmRestApi:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/udm-rest-api"
     tag: "latest"
     # @supplier: "Univention"
   umsUmcGateway:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/umc-gateway"
     tag: "latest"
     # @supplier: "Univention"
   umsUmcServer:
+    # This is a preview and not part of the standard deployment.
     repository: "souvap/tooling/images/univention/umc-server"
     tag: "latest"
     # @supplier: "Univention"
@@ -253,4 +271,10 @@ images:
     repository: "xwikisas/swp/xwiki"
     tag: "0.10-mariadb-tomcat@sha256:02f0ff6407ccdd8dab17814202e28991fe0aa8d44fa106ba171cff5249eaf58f"
     # @supplier: "XWiki"
+  xwikiJetty:
+    # This is a preview and not part of the standard deployment.
+    repository: "xwikisas/swp/xwiki"
+    tag: "0.11-SNAPSHOT-mariadb-jetty-alpine"
+    # @supplier: "XWiki"
+
 ...

helmfile/environments/default/persistence.yaml

@@ -11,7 +11,7 @@ persistence:
     mariadb: "1Gi"
     matrixNeoDateFixBot: "1Gi"
     nextcloud:
-      main: "1Gi"
+      main: "1.2Gi"
       data: "10Gi"
     openproject: "1Gi"
     postfix: "1Gi"