mirror of
https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk.git
synced 2025-12-06 07:21:36 +01:00
93 lines
4.4 KiB
YAML
93 lines
4.4 KiB
YAML
# SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
---
|
|
containerSecurityContext:
|
|
enabled: true
|
|
|
|
customConfigs:
|
|
xwiki.cfg:
|
|
xwiki.url.protocol: "https"
|
|
## Indicate the LDAP field defining the user UID
|
|
xwiki.authentication.ldap.UID_attr: "uid"
|
|
## Indicate the LDAP field defining the user profile picture
|
|
# xwiki.authentication.ldap.photo_attribute: "jpegPhoto"
|
|
## Enable the synchronization of the LDAP profile picture
|
|
# xwiki.authentication.ldap.update_photo: 1
|
|
|
|
xwiki.properties:
|
|
oidc.scope: "openid,profile,email,address,phoenix"
|
|
oidc.endpoint.userinfo.method: "GET"
|
|
oidc.user.nameFormater: "${oidc.user.phoenixusername._clean._lowerCase}"
|
|
oidc.user.subjectFormater: "${oidc.user.phoenixusername._lowerCase}"
|
|
# yamllint disable-line rule:line-length
|
|
oidc.userinfoclaims: "xwiki_user_accessibility,xwiki_user_company,xwiki_user_displayHiddenDocuments,xwiki_user_editor,xwiki_user_usertype"
|
|
oidc.clientid: "xwiki"
|
|
oidc.endpoint.token.auth_method: "client_secret_basic"
|
|
oidc.skipped: false
|
|
oidc.logoutMechanism: "rpInitiated"
|
|
|
|
image:
|
|
pullPolicy: "IfNotPresent"
|
|
|
|
ingress:
|
|
# enabled: true
|
|
annotations:
|
|
kubernetes.io/ingress.class: null
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
|
|
nginx.ingress.kubernetes.io/proxy-body-size: "250m"
|
|
|
|
istio:
|
|
enabled: false
|
|
|
|
mariadb:
|
|
enabled: false
|
|
|
|
mysql:
|
|
enabled: false
|
|
|
|
postgresql:
|
|
enabled: false
|
|
|
|
properties:
|
|
"property:xwiki:XWiki.XWikiPreferences^XWiki.XWikiPreferences.colorTheme": "FlamingoThemes.Iceberg"
|
|
"property:xwiki:XWiki.XWikiPreferences^XWiki.XWikiPreferences.default_language": "de"
|
|
"property:xwiki:XWiki.XWikiPreferences^XWiki.XWikiPreferences.timezone": "Europe/Berlin"
|
|
"property:xwiki:XWiki.XWikiPreferences^XWiki.XWikiPreferences.languages": "de"
|
|
"property:xwiki:FlamingoThemes.Iceberg^FlamingoThemesCode.ThemeClass.link-color": "@brand-primary"
|
|
"property:xwiki:FlamingoThemes.Iceberg^FlamingoThemesCode.ThemeClass.btn-primary-bg": "@brand-primary"
|
|
"property:xwiki:FlamingoThemes.Iceberg^FlamingoThemesCode.ThemeClass.navbar-default-color": "@brand-primary"
|
|
"property:xwiki:FlamingoThemes.Iceberg^FlamingoThemesCode.ThemeClass.navbar-default-link-color": "@brand-primary"
|
|
"property:xwiki:FlamingoThemes.Iceberg^FlamingoThemesCode.ThemeClass.navbar-default-link-hover-color":
|
|
"@brand-primary"
|
|
"property:xwiki:FlamingoThemes.Iceberg^FlamingoThemesCode.ThemeClass.navbar-default-link-active-color":
|
|
"@brand-primary"
|
|
# yamllint disable-line rule:line-length
|
|
"property:xwiki:FlamingoThemes.Iceberg^FlamingoThemesCode.ThemeClass.lessCode": " li#tmWorkplaceServices { padding-left: 16px; padding-top: 5px; } .navbar-right { padding-top: 8px; } .navbar { border-bottom: 1px solid #ddd; height: 64px; } div#companylogo { width: 90px; height: auto; padding-top: 7px; padding-left: 9px; }"
|
|
|
|
"property:xwiki:XWiki.AuthService.Configuration^XWiki.AuthService.ConfigurationClass.authService": "oidc"
|
|
## Fields to search in when importing users from the administration UI (not completely in scope for now)
|
|
"property:xwiki:LDAPUserImport.WebHome^LDAPUserImport.LDAPUserImportConfigClass.ldapUserAttributes": "sn,givenname,uid"
|
|
## Restrict user import in the UI to global administrators
|
|
"property:xwiki:LDAPUserImport.WebHome^LDAPUserImport.LDAPUserImportConfigClass.usersAllowedToImport": "globalAdmin"
|
|
## Enable group and user synchronization
|
|
"property:xwiki:LDAPUserImport.WebHome^LDAPUserImport.LDAPUserImportConfigClass.triggerGroupsUpdate": 1
|
|
"property:xwiki:LDAPUserImport.WebHome^LDAPUserImport.LDAPUserImportConfigClass.triggerGroupImport": 1
|
|
"property:xwiki:LDAPUserImport.WebHome^LDAPUserImport.LDAPUserImportConfigClass.forceXWikiUsersGroupMembershipUpdate": 1
|
|
## Base DN under which groups should be searched for
|
|
"property:xwiki:LDAPUserImport.WebHome^LDAPUserImport.LDAPUserImportConfigClass.ldapGroupImportSearchDN": "dc=swp-ldap,dc=internal"
|
|
## LDAP filter to only synchronize some groups
|
|
"property:xwiki:LDAPUserImport.WebHome^LDAPUserImport.LDAPUserImportConfigClass.ldapGroupImportSearchFilter":
|
|
"(&(objectClass=opendeskKnowledgemanagementGroup)(opendeskKnowledgemanagementEnabled=TRUE))"
|
|
|
|
securityContext:
|
|
enabled: true
|
|
|
|
service:
|
|
externalPort: 80
|
|
enabled: true
|
|
|
|
volumePermissions:
|
|
enabled: true
|
|
...
|