chore(release): 0.5.10 [skip ci]

## [0.5.10](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.9...v0.5.10) (2023-10-11) ### Bug Fixes * **intercom-service:** Update intercom-service chart to v2.0.0 ([c3129f1](c3129f1443))
fix(intercom-service): Update intercom-service chart to v2.0.0
2025-12-06 23:41:43 +01:00 · 2023-10-11 07:01:57 +00:00 · 2023-10-10 19:09:37 +02:00 · 2023-10-10 11:42:54 +00:00 · 2023-10-10 09:39:34 +00:00 · 2023-10-10 07:01:29 +00:00
9 changed files with 51 additions and 14 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,39 @@
+## [0.5.10](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.9...v0.5.10) (2023-10-11)
+
+
+### Bug Fixes
+
+* **intercom-service:** Update intercom-service chart to v2.0.0 ([c3129f1](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/commit/c3129f14437728be890187bb7c4a1bfc42d90958))
+
+## [0.5.9](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.8...v0.5.9) (2023-10-10)
+
+
+### Bug Fixes
+
+* **element:** Enable the guest module in Synapse ([da1bf35](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/commit/da1bf3581c5790786601948cabcef8a1d1c680ad))
+
+## [0.5.8](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.7...v0.5.8) (2023-10-10)
+
+
+### Bug Fixes
+
+* **helmfile:** Add default port for SMTP in environment ([74f9ec2](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/commit/74f9ec28e401f7caeefc4e50ac0a7e95fea41a53))
+
+## [0.5.7](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.6...v0.5.7) (2023-10-09)
+
+
+### Bug Fixes
+
+* **openproject:** Mail sender address ([711d29e](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/commit/711d29e374d13a3c8b7bcdf3e8440d03e0ef2b7d))
+
+## [0.5.6](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.5...v0.5.6) (2023-10-09)
+
+
+### Bug Fixes
+
+* **helmfile:** Use signed bitnami charts from openDesk Mirror Builds ([70744d0](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/commit/70744d04c66f32d65dc968c8570ed7a397f4efcc))
+* **services:** Bump redis chart to 18.1.2 ([d4c751d](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/commit/d4c751d29f15c718957f6bc388a99347e2923c87))
+
 ## [0.5.5](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.4...v0.5.5) (2023-10-09)


--- a/README.md
+++ b/README.md
@@ -383,7 +383,7 @@ Helm Charts which are released via openDesk CI/CD process are always signed. The

 | Repository                           | OCI |     Verifiable     |
 |--------------------------------------|:---:|:------------------:|
-| bitnami-repo                         | yes |        :x:         |
+| bitnami-repo (openDesk build)        | yes | :white_check_mark: |
 | clamav-repo                          | yes | :white_check_mark: |
 | collabora-online-repo                | no  |        :x:         |
 | intercom-service-repo                | yes | :white_check_mark: |
--- a/helmfile/apps/element/values-synapse.yaml
+++ b/helmfile/apps/element/values-synapse.yaml
@@ -4,7 +4,7 @@
 configuration:
  homeserver:
    guestModule:
-      enabled: false
+      enabled: true

 containerSecurityContext:
  allowPrivilegeEscalation: false
--- a/helmfile/apps/intercom-service/helmfile.yaml
+++ b/helmfile/apps/intercom-service/helmfile.yaml
@@ -15,7 +15,7 @@ repositories:
 releases:
  - name: "intercom-service"
    chart: "intercom-service-repo/intercom-service"
-    version: "1.1.3"
+    version: "2.0.0"
    values:
      - "values.yaml"
      - "values.gotmpl"
--- a/helmfile/apps/intercom-service/values.gotmpl
+++ b/helmfile/apps/intercom-service/values.gotmpl
@@ -4,6 +4,7 @@ SPDX-License-Identifier: Apache-2.0
 */}}
 ---
 global:
+  imageRegistry: "{{ .Values.global.imageRegistry }}"
  domain: "{{ .Values.global.domain }}"
  hosts:
    {{ .Values.global.hosts | toYaml | nindent 4 }}
@@ -30,7 +31,6 @@ ics:

 image:
  imagePullPolicy: "{{ .Values.global.imagePullPolicy }}"
-  registry: "{{ .Values.global.imageRegistry }}"
  repository: "{{ .Values.images.intercom.repository }}"
  tag: "{{ .Values.images.intercom.tag }}"

--- a/helmfile/apps/keycloak/helmfile.yaml
+++ b/helmfile/apps/keycloak/helmfile.yaml
@@ -7,10 +7,10 @@ repositories:
  - name: "bitnami-repo"
    oci: true
    url: >-
-      {{ env "PRIVATE_CHART_REPOSITORY_URL" |
-         default "registry-1.docker.io/bitnamicharts" }}
-    # Bitnami charts are not signed, see https://github.com/bitnami/charts/issues/14491
-    verify: false
+      {{ env "PRIVATE_IMAGE_REGISTRY_URL" |
+         default "external-registry.souvap-univention.de/sovereign-workplace/souvap/tooling/charts/bitnami-charts" }}
+    verify: true
+    keyring: "../../files/gpg-pubkeys/souvap-univention-de.gpg"
  # openDesk Keycloak Theme
  # Source: https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/components/charts/opendesk-keycloak-theme
  - name: "keycloak-theme-repo"
@@ -35,7 +35,7 @@ releases:
    condition: "keycloak.enabled"
  - name: "keycloak"
    chart: "bitnami-repo/keycloak"
-    version: "12.2.0"
+    version: "12.1.5"
    values:
      - "values-keycloak.gotmpl"
      - "values-keycloak.yaml"
--- a/helmfile/apps/openproject/values.gotmpl
+++ b/helmfile/apps/openproject/values.gotmpl
@@ -59,7 +59,7 @@ environment:
  OPENPROJECT_SMTP__PORT: "{{ .Values.smtp.port }}"
  OPENPROJECT_SMTP__SSL: "false" # (default=false)
  OPENPROJECT_SMTP__ADDRESS: "{{ .Values.smtp.host }}"
-  OPENPROJECT_MAIL__FROM="do-not-reply@{{ .Values.global.domain }}"
+  OPENPROJECT_MAIL__FROM: "do-not-reply@{{ .Values.global.domain }}"
  # Details: https://www.openproject-edge.com/docs/installation-and-operations/configuration/#seeding-ldap-connections
  OPENPROJECT_SEED_LDAP_OPENDESK_BINDPASSWORD: "{{ .Values.secrets.univentionCorporateServer.ldapSearch.openproject }}"

--- a/helmfile/apps/services/helmfile.yaml
+++ b/helmfile/apps/services/helmfile.yaml
@@ -64,9 +64,9 @@ repositories:
    oci: true
    url: >-
      {{ env "PRIVATE_IMAGE_REGISTRY_URL" |
-         default "registry-1.docker.io/bitnamicharts" }}
-    # Bitnami charts are not signed, see https://github.com/bitnami/charts/issues/14491
-    verify: false
+         default "external-registry.souvap-univention.de/sovereign-workplace/souvap/tooling/charts/bitnami-charts" }}
+    verify: true
+    keyring: "../../files/gpg-pubkeys/souvap-univention-de.gpg"

 releases:
  - name: "opendesk-certificates"
@@ -77,7 +77,7 @@ releases:
    condition: "certificates.enabled"
  - name: "redis"
    chart: "bitnami-repo/redis"
-    version: "18.0.4"
+    version: "18.1.2"
    values:
      - "values-redis.gotmpl"
      - "values-redis.yaml"
--- a/helmfile/environments/default/smtp.gotmpl
+++ b/helmfile/environments/default/smtp.gotmpl
@@ -5,6 +5,7 @@ SPDX-License-Identifier: Apache-2.0
 ---
 smtp:
  host: ""
+  port: 587
  username: ""
  password: "{{ env "SMTP_PASSWORD" }}"
 ...
Author	SHA1	Message	Date
Thorsten Roßner	85b8fcaab5	chore(release): 0.5.10 [skip ci] ## [0.5.10](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.9...v0.5.10) (2023-10-11) ### Bug Fixes * intercom-service: Update intercom-service chart to v2.0.0 ([`c3129f1`](`c3129f1443`))	2023-10-11 07:01:57 +00:00
Dominik Kaminski	c3129f1443	fix(intercom-service): Update intercom-service chart to v2.0.0	2023-10-10 19:09:37 +02:00
Thorsten Roßner	000be8b032	chore(release): 0.5.9 [skip ci] ## [0.5.9](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.8...v0.5.9) (2023-10-10) ### Bug Fixes * element: Enable the guest module in Synapse ([`da1bf35`](`da1bf3581c`))	2023-10-10 11:42:54 +00:00
Dominik Henneke	da1bf3581c	fix(element): Enable the guest module in Synapse	2023-10-10 09:39:34 +00:00
Thorsten Roßner	4d0011d957	chore(release): 0.5.8 [skip ci] ## [0.5.8](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.7...v0.5.8) (2023-10-10) ### Bug Fixes * helmfile: Add default port for SMTP in environment ([`74f9ec2`](`74f9ec28e4`))	2023-10-10 07:01:29 +00:00
Dominik Kaminski	74f9ec28e4	fix(helmfile): Add default port for SMTP in environment	2023-10-09 18:30:50 +02:00
Thorsten Roßner	b1d4b2d8ea	chore(release): 0.5.7 [skip ci] ## [0.5.7](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.6...v0.5.7) (2023-10-09) ### Bug Fixes * openproject: Mail sender address ([`711d29e`](`711d29e374`))	2023-10-09 09:41:26 +00:00
Thorsten Roßner	711d29e374	fix(openproject): Mail sender address	2023-10-09 09:31:39 +00:00
Thorsten Roßner	0ba7be2a5f	chore(release): 0.5.6 [skip ci] ## [0.5.6](https://gitlab.opencode.de/bmi/souveraener_arbeitsplatz/deployment/sovereign-workplace/compare/v0.5.5...v0.5.6) (2023-10-09) ### Bug Fixes * helmfile: Use signed bitnami charts from openDesk Mirror Builds ([`70744d0`](`70744d04c6`)) * services: Bump redis chart to 18.1.2 ([`d4c751d`](`d4c751d29f`))	2023-10-09 09:30:56 +00:00
Dominik Kaminski	d4c751d29f	fix(services): Bump redis chart to 18.1.2	2023-10-09 11:19:50 +02:00
Dominik Kaminski	70744d04c6	fix(helmfile): Use signed bitnami charts from openDesk Mirror Builds	2023-10-09 11:19:50 +02:00