opendesk/CHANGELOG.md

0.7.0 (2024-05-06)

Bug Fixes

• ci: Add debug option. Has to be supported by stage specific configuration containing: debug.enabled: {{ env "DEBUG_ENABLED" | default false }} (3dc6484)
• element: Provide the internal cluster domain to synapse web (b9ac5ec)
• univention-management-stack: Add the image configuration for NATS (e9ec2f3)
• univention-management-stack: Fix #55, #35 by updating chart "ums" to 0.11.2 and image "portal-listener" to 0.20.6; To update an existing installation you need to manually delete the ums-portal-listener stateful set before the update: kubectl -n <your_namespace> delete statefulsets ums-portal-listener (2ad0270)
• univention-management-stack: Migrate UDM-REST-API image to new Univention registry (9be3b78)
• univention-management-stack: Objectstore credentials (d1bd43f)
• univention-management-stack: Update Helm chart to 0.12.0 including required changes to openDesk Helmfile deployment. (fefd2f6)
• univention-management-stack: Use the NATS related image configuration (cd22570)

Features

• element: Add support for Matrix federation (36139b4)
• helmfile: Introduce additional variables for mailDomain and synapseDomain (e6fe2a7)
• services: Add opendesk-home service, which redirects on domain to portal (c7e2172)

0.6.0 (2024-04-11)

Bug Fixes

• helmfile: Improve support for external Objectstore, and fix issue with DoveCot storageClassName (1b748b6), closes #57 #60 #56
• nextcloud: Bump to 28.0.4 (cb33a92)
• univention-management-stack: add Guardian provisioning job image (79c52d0)
• univention-management-stack: Update UMC to 0.11.8 (5e3f4fa)
• univention-management-stack: Use umbrella helm chart (10ecb44)
• xwiki: Bump to 15.10.8 and enable OIDC backchannel logout (c395d35)

Features

• open-xchange: Bump to 8.23 and remove Istio prerequisite (3be3564)

0.5.81 (2024-03-28)

Bug Fixes

• docs: Various updates (50e2638)
• element: Update Element Web to v1.11.59 with widget sync fix and NeoBoard v1.14.0 (0fd4a26)
• helmfile: Fix OpenAPI validations for Kubernetes v1.28 (0aa4cfb)
• nextcloud: Bump to 28.0.3 (34d2c05)
• nextcloud: Rename default shared folder to __Shared_with_me__ (5f9d015)
• open-xchange: Bump to 8.22 (5ebf291)
• openproject: Bump OpenProject to 13.4.0 (d565c05)
• openproject: Bump version to 13.4.1 (7cc3964)
• services: Update Otterize Policies (42f63e3)
• univention-management-stack: Add missing authenticator secret mount to portal-server (5a39e87)
• univention-management-stack: Update LDAP server for BSI base security compliance (8e889db)
• univention-management-stack: Update ldap-notifier and ldap-server (a41ddd5)
• univention-management-stack: Update provisioning charts, images and helm value to add authentication (8c97bcf)

0.5.80 (2024-03-11)

Bug Fixes

• ci: Remove creation of release artefacts, use the images.yaml and charts.yaml in ./helmfile/environments/default for information about the artefacts instead. (ee99eef)
• collabora: Bump image to 23.05.9.4.1 (9c32058)
• docs: Add development.md and refactor images.yaml and charts.yaml (a2b333b)
• helmfile: YAML handling of seLinuxOptions and align overall toYaml syntax (011ad2c)
• nextcloud: Update images digests (bc18724)
• openproject: Bump to 13.3.1 (7ee9e47)

0.5.79 (2024-02-29)

Bug Fixes

• collabora: Bump image to 23.05.9.2.1 (f4b8226)
• collabora: Fix aliasgroups configuration whitelisting the Nextcloud host (8b065fd)
• docs: Update version numbers of functional components for release in README.md (31e5cf3)
• element: Provide end-to-end encryption as user controlled option (3d31127)
• helmfile: Enhance objectore environment variables to allow external Object Store (d444226)
• helmfile: Set debuglevel to WARN instead of INFO when debug is not enabled. (2efceef)
• nextcloud: Bump images to enable password_policy and fix email with groupware (8807b24)
• univention-management-stack: Bump Keycloak Extensions chart and configure the /univention/meta.json to be retrieved from ums-stack-gateway to avoid the inline 404 during Keycloak login. (2023d5b)
• univention-management-stack: Provisioning version bump (410a023)
• univention-management-stack: Template more Keycloak Extension values incl. logLevel (7ec123b)

0.5.78 (2024-02-23)

Bug Fixes

• ci: Move main development repo OpenCoDE (43718b8)
• ci: Run release pipeline only on pushes to main (13dcb00)
• ci: Update kyverno rules (d9263c9)
• docs: Add missing footnote regarding Nubus (bc6e4f8)
• nextcloud: Set admin priviledges for users in central IAM (a3e415d)
• univention-management-stack: Scaling udm-rest-api (57d0f61)
• univention-management-stack: Set Keycloak CSP header to allow session continuation in admin portal. (a398e5a)
• univention-management-stack: UMS portal-server scalability (b1b4c28)
• univention-management-stack: Univention Portal upstream codefixes version bump (c2f62f7)
• univention-management-stack: Update provisioning to fix high CPU usage when in idle (d9c23bd)

0.5.77 (2024-02-16)

Bug Fixes

• ci: Complete CI var usage for external registry (3bcdcd0)
• ci: Update openDesk CI Lint to v2.3.1 (250ef2b)
• collabora: Add chart validation (0159902)
• collabora: Bump to 23.05.9.1.1 (b525a81)
• cryptpad: Update chart to v0.0.18 (6f0b1f3)
• docs: Add functional component table referencing the component versions to README.md (bc7eeb8)
• docs: Add generated security-context.md (d9e07ff)
• element: Change name of neodatefix bot job (dd535da)
• element: Disable e2ee (ba0824b)
• helmfile: Add additional provisioning components and configuration (110ff56)
• helmfile: Add seLinuxOptions for all applications (02d04fa)
• helmfile: Annotations in image.yaml (7ebbd03)
• helmfile: Bump Collabora Chart to 1.11.1 and Image to 23.05.8.4.1 (d2b1f0b)
• helmfile: Fix annotations in images.yaml (acaec3b)
• helmfile: Fix umsPortalFrontend image annotation (8f83261)
• helmfile: Improve debugging (56f5e35)
• nextcloud: Bump openincryptpad to 0.3.3 and disable circles app (f2b8acf)
• nextcloud: Set backchannel logout url (c0fc225)
• nextcloud: Update image, nextcloud apps and chart (fd2a66f)
• nextcloud: Update nextcloud image and chart to support upgrades (5d95e7a)
• nextcloud: Update to Nextcloud to v28 (7c9f38f)
• open-xchange: Bump Gotenberg image (49f126d)
• open-xchange: Dovecot image on OpenCoDE without mirror (1396071)
• openproject: Bump version to 13.3.0 (c2087ef)
• univention-management-stack: New device login notifications on first login with 2FA (ee1a337)
• univention-management-stack: Patches not applied to uldap (2909e1d)
• univention-management-stack: Support for object-storage icons and portal files (83ac645)
• univention-management-stack: Update NGINX Helm chart to 15.9.3 (c16c0ac)
• univention-management-stack: Update otterize to allow umc-server communication with memcached (6c15dc1)
• xwiki: Add bottom border to top nav bar to be aligned with the other components (affa92c)
• xwiki: Bump XWiki chart to 1.3.0 (cabee0c)

0.5.76 (2024-01-24)

Bug Fixes

• nextcloud: Correct indent in monitoring resources (bea1413)
• services: Monitoring for minio with correct labels and there are no prometheusRule (af63e5c)
• univention-management-stack: Fix external registry for nats charts (cbb33b9)

0.5.75 (2024-01-24)

Bug Fixes

• ci: Add Kyverno CI Lint (e778a59)
• helmfile: Cleanup and small conformity fixes (db0a544)
• helmfile: Merge .yaml and .gotmpl files for Services, Provisioning, Cryptpad, Intercom-Service and Element (a49daa6)
• helmfile: Split image and helm registry (89c149a)
• univention-management-stack: UMC secure session cookie (67f7c05)
• univention-management-stack: Update guardian to version 2 (a99f338)

0.5.74 (2024-01-12)

Bug Fixes

• ci: Add opendesk-ci linter (b23152b)
• ci: Scan all images for malware on release (807b73c)
• ci: Switch to 'on_success' instead of 'always' (e1f6370)
• collabora: Migrate collabora to yaml.gotmpl file (09d001b)
• cryptpad: Bump image (90152bd)
• cryptpad: Bump image to 5.6.0 (1c4db30)
• cryptpad: Verify against GPG key (fec0d1f)
• docs: Update Helm Chart Trust Chain information (f894370)
• element: Fix rights & roles of neoboard (7daa93f)
• element: Fix rights and roles configuration (452624c)
• helmfile: Add image annotations for mirroring (41e777c)
• helmfile: Add logLevel to globals (8db9bf3)
• helmfile: Add XWiki GPG key (712605e)
• helmfile: Increase timeouts for deployment of services (3b557a8)
• helmfile: Merge fix values filename for Jitsi (7a14531)
• helmfile: Remove oci flag from charts.yaml and move user/password (2ad48b6)
• helmfile: Sort images and charts (acf6816)
• helmfile: Switch artefacts to be pulled from Open CoDE or upstream (6b3d99d)
• intercom-service: Add scaling option. (969c42a)
• jitsi: Add available securityContexts here (8f09740)
• nextcloud: Replace community Nextcloud with openDesk Nextcloud (813a2e2)
• open-xchange: Enable ICAP and merge yaml and gotmpl files (306252d)
• openproject: Consolidate env values set by Helm chart (08754cc)
• openproject: Merge yaml and gotmpl value files (45967c7)
• services: Add scaling to all services (0492420)
• univention-management-stack: Add guardian components (db749d8)
• univention-management-stack: Add missing image template for ums stack gateway and imagePullSecrets to keycloak extensions (0bf059e)
• univention-management-stack: Add ums provisioning service (d039c65)
• univention-management-stack: Bump Keycloak Bootstrap image (bb289d5)
• univention-management-stack: Bump Keycloak chart and image and provide settings for IT-Grundschutz (c2e9204)
• univention-management-stack: Keycloak clients for guardian (b30b29d)
• univention-management-stack: Provide openDesk version info for admins in portal menu (5f5a65f)
• univention-management-stack: SAML join using internal Keycloak hostname (acbef3a)
• univention-management-stack: Streamline timeouts for deployment (506ef4a)
• univention-management-stack: Updated base image (78993e1)
• xwiki: Bump Helm chart und image, fix favicon (87b6fcf)
• xwiki: Ldap group sync filter (9aa907a)
• xwiki: Update default XWiki configuration (f13f39a)
• xwiki: Update Image to include XWiki 15.10.4 (9ff6056)
• xwiki: Update to 1.2.6 and add imagePullSecrets (2d2455f)
• xwiki: Verify against GPG key (a0d5fb8)

0.5.73 (2023-12-21)

Bug Fixes

• docs: Add and reference workflow.md (0e1e875)
• helmfile: Make GPG keys to use CC0-1.0 (006e20f)
• helmfile: Pull Univention Helm charts from OCI (8d6503c)
• helmfile: Switch Helm charts to Open CoDE (0952221)
• open-xchange: Disable debug container (appsuite-toolkit) (40fb9dc)
• univention-management-stack: Add extended timeouts to Helm deployment (1f7b3ca)

0.5.72 (2023-12-18)

Bug Fixes

• collabora: Update image to 23.05.6.3.1 (8c378c6)
• docs: Update scaling.md (d342efe)
• open-xchange: Update Helm chart removing yaml templating doublettes (c21dd46)

0.5.71 (2023-12-15)

Bug Fixes

• docs: Security.md (36bbbae)
• univention-management-stack: Switch to Univention Keycloak (902076c)

0.5.70 (2023-12-14)

Bug Fixes

• univention-management-stack: Remove UCS container monolith and make UMS standard IAM (450c434)

0.5.69 (2023-12-12)

Bug Fixes

• univention-management-stack: Functional replacement for UCS container monolith, still optional. (ce38714)

0.5.68 (2023-12-11)

Bug Fixes

• jitsi: Disable IP Blacklist (6a649cb)
• open-xchange: Update to latest version (db4bfa4)

0.5.67 (2023-12-11)

Bug Fixes

• services: Use Charts from openCoDE registry (cc0daa2)

0.5.66 (2023-12-08)

Bug Fixes

• element: Update Element and Widgets (6a26299)

0.5.65 (2023-12-08)

Bug Fixes

• univention-management-stack: Bump OX Connector (83192b7)

0.5.64 (2023-12-06)

Bug Fixes

• openproject: Switch to release container and set home url link (e67ab8f)

0.5.63 (2023-12-06)

Bug Fixes

• nextcloud: Remove Talk folder (0ea5856)

0.5.62 (2023-12-06)

Bug Fixes

• nextcloud: Bump image to 27.1.4 and update Helm chart to configure "Shared_with_me" folder (d04a603)
• univention-management-stack: Update optional UMS preview state (94ae3da)

0.5.61 (2023-12-05)

Bug Fixes

• services: Fix port declaration for Postfix (bf5dcda)

0.5.60 (2023-12-05)

Bug Fixes

• ci: Ensure release creation with artifacts (dc7ce0b)

0.5.59 (2023-12-05)

Bug Fixes

• helmfile: Add configurable objectstore (3b5493d)

0.5.58 (2023-12-01)

Bug Fixes

• cryptpad: Add websocket annotation (c41643e)
• openproject: Add seederJob intent (05cc82d)
• openproject: Bump to 2.6.2 (c8bc8b3)
• services: Add NetworkPolicy section to docs/security.md (24812b6)
• services: Add Otterize based security settings (bec9a2d)
• univention-management-stack: Add Otterize annotations for jobs (2628a0e)

0.5.57 (2023-12-01)

Bug Fixes

• helmfile: Using correct private registry for postfix helm-chart (d367739)

0.5.56 (2023-11-30)

Bug Fixes

• element: Raise treshold for login rate limit to avoid too early barrier hitting normal users (466e741)

0.5.55 (2023-11-30)

Bug Fixes

• cryptpad: Update Helm chart to enable readiness and liveness probes (6d3e484)

0.5.54 (2023-11-29)

Bug Fixes

• helmfile: Add and document security context for components (519db51)

0.5.53 (2023-11-29)

Bug Fixes

• univention-managemen-stack: Integrate Attribute to Group Mapper into the containerized stack (7bbab22)
• univention-management-stack: Add Announcements icon into "umc-gateway" (7a9ecf7)
• univention-management-stack: Add Announcements module into "umc-server" (4c52a5a)
• univention-management-stack: Add branding related configuration to stack-gateway (a5f263c)
• univention-management-stack: Apply styling (b3d45c4)
• univention-management-stack: Configure openDesk branding in frontend chart (cbe8fb2)
• univention-management-stack: Document database of UMS Notifications API (3cf348c)
• univention-management-stack: Move static settings from gotmpl into yaml for umc-gateway (b3ac0ae)
• univention-management-stack: Quote all composed strings (1c35ca6)
• univention-management-stack: Remove frontend-custom (8b6a4b2)
• univention-management-stack: Set SMTP host for self-service notifications (0c7a77c)
• univention-management-stack: UMC uses external memcached (211bee9)
• univention-management-stack: Update ums-dependencies (e0c6c14)
• univention-management-stack: Update ums-dependencies (c246edd)
• univention-management-stack: Update ums-dependencies (86b4818)
• univention-management-stack: Use "stack-gateway" in all deployments (c19bca2)

0.5.52 (2023-11-28)

Bug Fixes

• ci: Open automatic MRs for new branches (735fec3)

0.5.51 (2023-11-28)

Bug Fixes

• nextcloud: Bump chart to fix central navigation (cac6abe)
• openproject: Update container and prepare for OIDC based user admin role setting (6dc92df)

0.5.50 (2023-11-27)

Bug Fixes

• ci: Add metadata for renovate processing (36aa3ed)

0.5.49 (2023-11-27)

Bug Fixes

• nextcloud: Bump image to incorporate fix for https://github.com/nextcloud/security-advisories/security/advisories/GHSA-f962-hw26-g267 (efbd814)

0.5.48 (2023-11-24)

Bug Fixes

• services: Update resource requests and remove cpu limits (f86a74b)

0.5.47 (2023-11-24)

Bug Fixes

• helmfile: Rename absolute paths on OpenCoDE to new 'opendesk' base group name (7ac2e0f)
• xwiki: Enable the sync of user profile picture from LDAP (6aa3d38)

0.5.46 (2023-11-23)

Bug Fixes

• element: Fix quotes in element chart (a447c13)

0.5.45 (2023-11-22)

Bug Fixes

• open-xchange: Add security context (db48140)

0.5.44 (2023-11-21)

Bug Fixes

• ci: Remove default BASE_DOMAIN in .gitlab-ci.yml (7ae65a3)

0.5.43 (2023-11-20)

Bug Fixes

• univention-management-stack: Update optional UMS preview state (061e588)

0.5.42 (2023-11-20)

Bug Fixes

• nextcloud: Add exporter and serviceMonitor (feed270)
• nextcloud: Bump openDesk bootstrap to 3.2.3 to support serverinfo token (ea14f95)

0.5.41 (2023-11-16)

Bug Fixes

• helmfile: Split README into docs (cd0e94f)

0.5.40 (2023-11-14)

Bug Fixes

• open-xchange: Bump Dovecot and fix out-of-office replys (55f6ba2)

0.5.39 (2023-11-14)

Bug Fixes

• univention-management-stack: Update optional UMS preview state (e231e57)

0.5.38 (2023-11-13)

Bug Fixes

• collabora: Update image to 23.05.5.4.1 (c460467)

0.5.37 (2023-11-12)

Bug Fixes

• openproject: Add bootstrapping of Nextcloud filestore (1971dfb)

0.5.36 (2023-11-10)

Bug Fixes

• element: Update Element and Widgets (97034a5)

0.5.35 (2023-11-10)

Bug Fixes

• helmfile: Eliminate some yamllint errors (1d03a6e)
• helmfile: Move ldap host variable into helpers (08811de)
• helmfile: Update charts to use proper quoting (69ea840)
• services: Add minio as service and consume by OpenProject (baa5827)

0.5.34 (2023-11-09)

Bug Fixes

• openproject: Bump helmchart and properly template OP's initdb image (0d8e92f)

0.5.33 (2023-11-09)

Bug Fixes

• cryptpad: Update security context (89ae1d9)

0.5.32 (2023-11-09)

Bug Fixes

• collabora: Resource definitions (65ce9a1)

0.5.31 (2023-11-08)

Bug Fixes

• univention-management-stack: Update optional UMS preview state (d0a0799)

0.5.30 (2023-11-06)

Bug Fixes

• collabora: Init monitoring in defaults and in collabora (for prometheus-monitor, -rules and grafana dashboard) (0ad0434)
• helmfile: Add monitoring.yaml for optional monitoring (385d81b)

0.5.29 (2023-11-06)

Bug Fixes

• xwiki: Update XWiki Helm configuration to enable LDAP and OIDC user synchronization (7c56c72)

0.5.28 (2023-11-06)

Bug Fixes

• open-xchange: Add Document- and ImageConverter, improve LDAP address book filters (899a8c5)

0.5.27 (2023-11-04)

Bug Fixes

• docs: Re-include release artefacts (4359b21)

0.5.26 (2023-11-02)

Bug Fixes

• element: Enables user directory search for all users (8fafd90)

0.5.25 (2023-11-01)

Bug Fixes

• cryptpad: Add CryptPad to support editing of diagrams.net files from within Nextcloud (ab6014f)

0.5.24 (2023-11-01)

Bug Fixes

• collabora: Update image to 23.05.5.3.1 (38336d0)

0.5.23 (2023-11-01)

Bug Fixes

• element: Update Element Web to latest release (b47de62)

0.5.22 (2023-10-31)

Bug Fixes

• openproject: Nextcloud integration within K8s instances (d249d0e)

0.5.21 (2023-10-30)

Bug Fixes

• helmfile: Deinstall components if disabled (7feaadf)
• helmfile: Put enviroments in first document inside of a yaml (034e98c)

0.5.20 (2023-10-30)

Bug Fixes

• helmfile: Remove old XWiki image, set explicit timeout for OP deployment, bump Jitsi Helm chart to enable chat for stand-alone Jitsi (5d01f8c)

0.5.19 (2023-10-30)

Bug Fixes

• element: Update Element Web and Nordeck Widgets to latest releases (2313f75)

0.5.18 (2023-10-28)

Bug Fixes

• xwiki: Switch to Alpine/Jetty slim image (b399869)

0.5.17 (2023-10-28)

Bug Fixes

• nextcloud: Update swp_integration app and prepare CryptPad integration (a046dea)

0.5.16 (2023-10-26)

Bug Fixes

• openproject: Slim container with upgraded helm-chart (535823e)

0.5.15 (2023-10-25)

Bug Fixes

• helmfile: Add XWiki Jetty and UniventionKeycloak to image.yaml for Compliance checks. They are not yet part of standard deployment. (8e376bb)

0.5.14 (2023-10-20)

Bug Fixes

• element: Support for openDesk top bar with central navigation (e609b75)

0.5.13 (2023-10-20)

Bug Fixes

• element: Configure rights and roles (59d58e3)

0.5.12 (2023-10-19)

Bug Fixes

• element: Add an application service for the intercom-service (1a4eced)
• element: Add the Matrix NeoBoard Widget deployment (5afd233)
• element: Add the Matrix NeoChoice Widget deployment (7756d35)
• element: Add the Matrix NeoDateFix Bot deployment (785989e)
• element: Add the Matrix NeoDateFix Widget deployment (27b6796)
• element: Add the Matrix User Verification Service deployment (30405d1)
• element: Upgrade Element to v1.11.46 (82a037e)
• element: Upgrade the opendesk-element charts to 2.3.0 (fd9e04d)
• element: Upgrade the opendesk-matrix-widgets charts to 2.3.0 (cbe5141)
• element: Use a separate image configuration for the bootstrap tasks (7f7c364)
• intercom-service: Allow access from the non-istio domain and reference to the correct synapse hostname (16f2ac4)
• intercom-service: Fix the nordeck configuration (06dcdd7)
• jitsi: Use template for the cluster networking domain (0898d96)
• keycloak: Use the correct backchannel logout configuration for element (86657b1)
• open-xchange: Enable Element calendar integration (f564efd)

0.5.11 (2023-10-11)

Bug Fixes

• helmfile: Quote all password template strings (fb7dba7)
• services: Add memcached service (72e3afd)

0.5.10 (2023-10-11)

Bug Fixes

• intercom-service: Update intercom-service chart to v2.0.0 (c3129f1)

0.5.9 (2023-10-10)

Bug Fixes

• element: Enable the guest module in Synapse (da1bf35)

0.5.8 (2023-10-10)

Bug Fixes

• helmfile: Add default port for SMTP in environment (74f9ec2)

0.5.7 (2023-10-09)

Bug Fixes

• openproject: Mail sender address (711d29e)

0.5.6 (2023-10-09)

Bug Fixes

• helmfile: Use signed bitnami charts from openDesk Mirror Builds (70744d0)
• services: Bump redis chart to 18.1.2 (d4c751d)

0.5.5 (2023-10-09)

Bug Fixes

• openproject: Switch image to fix central navigation; set email sender address (e42feb4)

0.5.4 (2023-10-02)

Bug Fixes

• helmfile: Add third environment (test) (7dbcbfe)

0.5.3 (2023-09-28)

Bug Fixes

• open-xchange: Rollback MariaDB version to fix OX Guard initialization (e33acd3)

0.5.2 (2023-09-28)

Bug Fixes

• ci: Add Gitlab-CI sledgehammer deployment removal (6fd655a)

0.5.1 (2023-09-28)

Bug Fixes

• docs: Add 'Helm Chart Trust Chain' section (b6b4972)
• docs: Highlight that Helmfile >= 0.157.0 is required (d86f516)
• element: Use OCI registry and verify chart signatures (a41b9a6)
• helmfile: Add cleanup flag for job resources (0f01b94)
• helmfile: Create directory for gpg pubkeys (4c5731e)
• intercom-service: Use OCI registry and verify chart signatures (74b3d41)
• jitsi: Verify chart signatures (1dd6582)
• keycloak-bootstrap: Use OCI registry and verify chart signatures (ca5d5f8)
• keycloak: Use OCI registry and verify chart signatures (095059c)
• nextcloud: Use OCI registry and verify chart signatures (41dfdc0)
• open-xchange: Use OCI registry and verify chart signatures (2d5d370)
• open-xchange: Use renamed istio gateway (65d2642)
• openproject: Use OCI registry and verify chart signatures (5343840)
• services: Add wildcard certifcate request support (15ad8ca)
• services: Bump opendesk-certificates to 2.1.0 (4372f06)
• services: Only create istio gateway with webmail domain (6a39011)
• services: Use OCI registry for all services and add gpg verify mechanism (892920b)
• univention-corporate-container: Use OCI registry and verify chart signatures (424317e)

0.5.0 (2023-09-27)

Bug Fixes

• element: Move the static configuration into the values.yaml (f22619b)
• element: Specify resources for the guest module init container (275798c)

Features

• element: Activate the guest module (5ad25ac)

0.4.9 (2023-09-27)

Bug Fixes

• nextcloud: Bump Helm chart to add app "groupfolders" (62b767e)

0.4.8 (2023-09-26)

Bug Fixes

• openproject: Digest rollback (9acce08)

0.4.7 (2023-09-26)

Bug Fixes

• helmfile: Add timeout for database services (98ec02f)
• openproject: Image digest (b340373)

0.4.6 (2023-09-26)

Bug Fixes

• openproject: Use renamed registry open_desk (a37faf3)

0.4.5 (2023-09-26)

Bug Fixes

• helmfile: Streamline timeouts (2703615)

0.4.4 (2023-09-25)

Bug Fixes

• open-xchange: Updates for mail templates and mail export (ae3d0da)

0.4.3 (2023-09-25)

Bug Fixes

• nextcloud: Update image to 27.1.1 (ce7e5f6)

0.4.2 (2023-09-21)

Bug Fixes

• nextcloud: Add Nextcloud app for OpenProject integration; Bump Collabora Image (f46c8a9)

0.4.1 (2023-09-19)

Bug Fixes

• univention-management-stack: Remove doublette triple dashes in helmfile.yaml (41b9afb)

0.4.0 (2023-09-18)

Features

• ci: Optionally trigger E2E tests of the SouvAP Dev team (a99c088)

0.3.2 (2023-09-14)

Bug Fixes

• helmfile: Fix linter issues (1514678)
• univention-management-stack: Add "commonLabels" into helmfile (16c08f8)
• univention-management-stack: Add Helm charts (a74d662)
• univention-management-stack: Add switch "univentionManagementStack.enabled" (471a2fa)
• univention-management-stack: Adjust Ingress configuration for portal-server (13bcd78)
• univention-management-stack: Adjust Ingress configuration for umc (320da3b)
• univention-management-stack: Adjust Ingress configuration of notifications-api (5e1a7b1)
• univention-management-stack: Adjust ingress configuration of the portal-frontend (c54bab1)
• univention-management-stack: Adjust Ingress configuration of udm-rest-api (c61b1b8)
• univention-management-stack: Adjust Ingress conifguration of store-dav (96097e4)
• univention-management-stack: Configure cookie banner data (12c931f)
• univention-management-stack: Define resource requests and limits (2f8a298)
• univention-management-stack: Disable istio for the stack (4835a2b)
• univention-management-stack: Prepare persistence configuration (7ab1cb5)
• univention-management-stack: Process bases before releases (ec3f1d9)
• univention-management-stack: Set externalDomainName for bootstrapping the stack (0ba71f2)
• univention-management-stack: Split templated from static values (09079a1)
• univention-management-stack: Split values into templated and static (d3c4390)
• univention-management-stack: Update portal-listener to leverage dependency waiting (c840608)
• univention-management-stack: Use global secrets to fill initialPasswordAdministrator (a4bab40)
• univention-management-stack: Use global secrets to populate ldap related secrets (9409ad8)
• univention-management-stack: Use global secrets to set store-dav related passwords (90019e3)
• univention-management-stack: Use ldap base DN "dc=swp-ldap,dc=internal" (77e362f)
• univention-management-stack: Use postgresql service for notifications-api (fe0e0cd)
• univention-management-stack: Use the prefix "ums-" for all releases (edb25bd)
• univention-management-stack: Use the value "global.imagePullPolicy" (15db5dc)

0.3.1 (2023-09-14)

Bug Fixes

• collabora: Update Ingress annotations and set securityContext (b5583ca)
• element: Improve default container security settings (882f1fb)
• element: Update opendesk element version to 2.0.1 (d725b93)
• helmfile: Remove default SMTP credentials and create docs for SMTP/TURN (e120f5f)
• helmfile: Update images and use a tag and digest together (c7fc187)
• services: Explicitly set securityContexts (a799db0)
• services: Update Postfix to 2.0.2 fixing security gaining (e1070ee)

0.3.0 (2023-09-12)

Features

• ci: Selective tests (d2e7ac9)

0.2.10 (2023-09-06)

Bug Fixes

• helmfile: Add imagePullPolicy default env variable (f988644)
• helmfile: Update images and add jitsi, keycloak to security section in docs (0eceb85)
• jitsi: Update chart to 1.4.2 with improved security and fixed change on each deployment (1349181)
• jitsi: Update jitsi to 1.5.1 and fix prosody image (ed7e5e4)
• keycloak: Improve default security settings (3b90533)
• nextcloud: Fix yamllint disable comment (4380e78)
• services: Disable https redirect in istio to fix cert-manager issues (1ef4a86)
• services: Fix capabilities of postifix (a6fa846)
• services: Fix OCI registry address of postgresql, mariadb (be82243)

0.2.10 (2023-09-06)

Bug Fixes

• helmfile: Add imagePullPolicy default env variable (f988644)
• helmfile: Update images and add jitsi, keycloak to security section in docs (0eceb85)
• jitsi: Update chart to 1.4.2 with improved security and fixed change on each deployment (1349181)
• keycloak: Improve default security settings (3b90533)
• nextcloud: Fix yamllint disable comment (4380e78)
• services: Disable https redirect in istio to fix cert-manager issues (1ef4a86)
• services: Fix capabilities of postifix (a6fa846)
• services: Fix OCI registry address of postgresql, mariadb (be82243)

0.2.9 (2023-09-05)

Bug Fixes

• collabora: Add websocket support for NGINX Inc. Ingress (6e5ef63)
• docs: Add security part in README (ff462ab)
• docs: Update scaling docs (63a1e25)
• helmfile: Reduce icap resources in default enviroment (c5ab1b8)
• helmfile: Update clamav and nextcloud images in default environment (4f2a8ae)
• nextcloud: Add support for up to 4G large upload for Ingress NGINX and NGINX Inc. Ingress (6e68f7f)
• nextcloud: Rename sovereign-workplace-nextcloud-bootstrap to opendesk-nextcloud-bootstrap and use OCI (cef11ac)
• nextcloud: Use clamav-icap when clamavDistributed is activated (41d40c9)
• services: Enable security context and use default increased security settings (9a6d240)
• services: Fix image registry templates for postfix (6321ff5)
• services: Replace image digest by tag (f758293)
• services: Set readOnlyRootFilesystem to true on master (5fbf86b)
• services: Update clamav to 4.0.0, redis to 18.0.0, postgresql to 2.0.2, mariadb to 2.0.2 and use OCI registries (9d78664)

0.2.8 (2023-08-31)

Bug Fixes

• open-xchange: Update images and Helm chart (39565c7)

0.2.7 (2023-08-30)

Bug Fixes

• jitsi: Update Jitsi Helm chart to set the user's display name as default (387bd87)

0.2.6 (2023-08-30)

Bug Fixes

• ci: Change path of asset_generator (6ab4fa0)
• ci: Include deployment environments (0f59736)
• ci: Release artefacts (2a61b5f)

0.2.6 (2023-08-30)

Bug Fixes

• ci: Change path of asset_generator (6ab4fa0)
• ci: Include deployment environments (0f59736)
• ci: Release artefacts (2a61b5f)

0.2.6 (2023-08-30)

Bug Fixes

• ci: Change path of asset_generator (6ab4fa0)
• ci: Release artefacts (2a61b5f)

0.2.5 (2023-08-30)

Bug Fixes

• xwiki: Theming and language of central navigation (3d4d45f)

0.2.4 (2023-08-29)

Bug Fixes

• element: Apply the global theme to Element (7f7eae8)

0.2.3 (2023-08-29)

Bug Fixes

• ci: Add central branding information (a14c42f)

0.2.2 (2023-08-16)

Bug Fixes

• jitsi: Allow configuration of LoadBalancer status field for patchJVB job (7491582)
• open-xchange: Explicitly disable core-ui-middleware ingress (06dc7a1)

0.2.1 (2023-08-16)

Bug Fixes

• keycloak: Increase proxy-buffer-size for ingress-nginx (d8adcc4)

0.2.0 (2023-08-15)

Bug Fixes

• helmfile: Replace bitnami repositories with OCI (4c21fd2)

Features

• helmfile: Implement private image/chart registry variables (5788323)

0.1.2 (2023-08-15)

Bug Fixes

• jitsi: Update support for NodePort setups with different ingress/egress ips (de25789)

0.1.1 (2023-08-14)

Bug Fixes

• open-xchange: Bump dovecot and sovereign-workplace-open-xchange-bootstrap to 1.3.0 with image digest support (53796da)
• open-xchange: Bump sovereign-workplace-open-xchange-bootstrap to 1.3.1 (390f2de)

0.1.0 (2023-08-14)

Bug Fixes

• docs: Typo (ee684a7)

Features

• element: Add element component (5f0ca92)

0.0.6 (2023-08-14)

Bug Fixes

• open-xchange: Functional mailboxes auth settings update in AppSuite and Dovecot (53948ea)

0.0.5 (2023-08-11)

Bug Fixes

• keycloak: Improve digest image pinning (b8a8932)

0.0.4 (2023-08-11)

Bug Fixes

• jitsi: Fix identifiers in resources (3a0b246)

0.0.3 (2023-08-10)

Bug Fixes

• keycloak: Keycloak extensions sha256 image pinning, includes fix for failing keycloak extension handler on unavailable SMTP relay. (27ce715)

0.0.2 (2023-08-10)

Bug Fixes

• services: Remove fqdn from dovecot in postfix (2033c76)

0.0.1 (2023-08-10)

Bug Fixes

• ci: Add 'qa' cluster (43e94f8)
• ci: Deploy provisioning in separate/later stage (ef1cb75)
• collabora: Bump to 23.05.2.2.1 and add capabilites to non containerd k8s clusters (2652b26)
• collabora: Image version bump from 23.05.1.2.1 to 23.05.1.2.2 (3bf7dae)
• collabora: Remove MKNOD capabilities (2f18734)
• docs: Cleanup and enhance README.md and CONTRIBUTING.md (cc5f88c)
• helmfile: Allow selection of environments when installing from root helmfile (8ce01df)
• helmfile: Comment out Open-Xchange Appsuite 8 Deployment until is publicly available (cb65baa)
• jitsi: Fix wrong parameter for jitsiPatchJVB tag (fb3fca2)
• nextcloud: Add Istio domain on integration for read/write contacts with Open-Xchange (b235685)
• provisioning: OX-Connector inits contexts and accessprofiles first, profile pictures are now provisioned (94552a3)
• provisioning: Update OX-Connector image (3cc7ba9)
• services: Bump postgresql chart to 2.0.0 (e609bf3)
• services: Specify dovecot with fqdn (59d64de)
• services: Update mariadb Chart to 2.0.0 (f39811c)
• univention-corporate-server: Update image to improve pod restarting behaviour (57dea1e)
• xwiki: Remove init job as XWiki now does the required bootstrapping internally; Restartability works now as expected (8425c10)
• xwiki: Use external-registry for image download (841bfb6)

Features

• ci: Add release-automation and linting (82bf038)
• ci: Support for MASTER_PASSWORD to be set on Gitlab Settings > CI/CD > Variables (e7d68ea)
• ci: Triggered tests (23fc3c4)
• docs: Update various chapters and structure (42232db)
• helmfile: Add capabilities for a RWO deployment (d5190cd)
• helmfile: Remove environment specific values to use cluster defaults (4fb86b5)
• helmfile: Remove environments and replace with generic one (ef7d75f)
• nextcloud: Rename to sovereign-workplace-nextcloud-bootstrap and bump to 2.2.0 (84de627)
• open-xchange: Add service type for dovecot (c9a763f)
• open-xchange: OX AppSuite 8 within SWP is now publicly available (6dc470f)
• services: Add clamav-simple deployment (505f25c)
• sovereign-workplace: Initial commit (533c504)