Merge branch 'full-chart'

Author: Your Name

charts/opencloud-full/deployments/helm/helmfile.yaml

@@ -131,7 +131,7 @@ releases:
                   config:
                     sites:
                       - name: openCloud
-                        url: https://www.opencloud.com
+                        url: https://www.opencloud.eu
                         target: external
                         color: "#0D856F"
                         icon: cloud
@@ -246,7 +246,6 @@ releases:
             objectClass: person
             cn: admin
             sn: admin
-            uid: ldapadmin
 
             dn: ou=groups,dc=opencloud,dc=eu
             objectClass: organizationalUnit

charts/opencloud-full/deployments/timoni/configmap.yaml

@@ -15,5 +15,5 @@ data:
   WOPI_COLLABORA_TLS_HOST: "wopi-collabora.kube.opencloud.test"
   ONLYOFFICE_URI: "https://onlyoffice.opencloud.test"
   ONLYOFFICE_ICON_URI: "https://onlyoffice.opencloud.test/web-apps/apps/documenteditor/main/resources/img/favicon.ico"
-  OPENCLOUD_WEB_URL: "https://www.opencloud.com"
+  OPENCLOUD_WEB_URL: "https://www.opencloud.eu"
   LDAP_GLOBAL_DOMAIN: "opencloud.eu"

charts/opencloud-full/deployments/timoni/opencloud.cue

@@ -296,7 +296,7 @@ bundle: {
                     version: "4.3.3"
                 }
                 sync: {
-                    timeout: 25
+                    timeout: 5
                     createNamespace: true
                 }
                 helmValues: {
@@ -328,7 +328,6 @@ bundle: {
                             objectClass: person
                             cn: admin
                             sn: admin
-                            uid: ldapadmin
 
                             dn: ou=groups,dc=opencloud,dc=eu
                             objectClass: organizationalUnit

charts/opencloud-full/deployments/timoni/runtime.cue

@@ -33,7 +33,7 @@ runtime: {
         "WOPI_COLLABORA_TLS_HOST": "wopi-collabora.kube.opencloud.test"
         "ONLYOFFICE_URI": "https://onlyoffice.opencloud.test"
         "ONLYOFFICE_ICON_URI": "https://onlyoffice.opencloud.test/web-apps/apps/documenteditor/main/resources/img/favicon.ico"
-        "OPENCLOUD_WEB_URL": "https://www.opencloud.com"
+        "OPENCLOUD_WEB_URL": "https://www.opencloud.eu"
         "LDAP_GLOBAL_DOMAIN": "opencloud.eu"
     }
 }

charts/opencloud-full/templates/minio/pvc.yaml

@@ -5,6 +5,8 @@ kind: PersistentVolumeClaim
 metadata:
   name: {{ .appName }}
   namespace: {{ template "oc.namespace" . }}
+  annotations:
+    helm.sh/resource-policy: "keep"
   labels:
     app: {{ .appName }}
     oc-metrics: enabled

charts/opencloud-full/templates/onlyoffice/pvc.yaml

@@ -5,6 +5,7 @@ kind: PersistentVolumeClaim
 metadata:
   name: {{ .appName }}-data
   namespace: {{ template "oc.namespace" . }}
+  annotations:
   labels:
     app: {{ .appName }}
     oc-metrics: enabled

charts/opencloud-full/values.schema.json

@@ -31,7 +31,7 @@
     },
     "backup": {
       "additionalProperties": false,
-      "description": "Backup related settings\nCompare to https://doc.opencloud.com/opencloud/next/maintenance/b-r/backup_considerations.html",
+      "description": "Backup related settings\nCompare to https://doc.opencloud.eu/opencloud/next/maintenance/b-r/backup_considerations.html",
       "properties": {
         "configMapLabels": {
           "additionalProperties": false,
@@ -106,7 +106,7 @@
     },
     "configRefs": {
       "additionalProperties": false,
-      "description": "References to ConfigMaps.\nThe ConfigMaps need to be manually created.\nLeave these empty to have them autogenerated by the Helm chart.\nNote that ConfigMaps generated by the helm chart will be removed once the helm chart is uninstalled.\nFurthermore, if you already had ConfigMaps at the default locations, they will be NOT be overwritten,\nbut the helm chart will claim ownership of them. If this is a problem, fill in the configRefs below\nwith the names of your existing secrets.\nSee https://doc.opencloud.com/opencloud/next/deployment/container/orchestration/orchestration.html#customize-the-generic-setup[doc.opencloud.com] for how to generate them.",
+      "description": "References to ConfigMaps.\nThe ConfigMaps need to be manually created.\nLeave these empty to have them autogenerated by the Helm chart.\nNote that ConfigMaps generated by the helm chart will be removed once the helm chart is uninstalled.\nFurthermore, if you already had ConfigMaps at the default locations, they will be NOT be overwritten,\nbut the helm chart will claim ownership of them. If this is a problem, fill in the configRefs below\nwith the names of your existing secrets.\nSee https://doc.opencloud.eu/opencloud/next/deployment/container/orchestration/orchestration.html#customize-the-generic-setup[doc.opencloud.eu] for how to generate them.",
       "properties": {
         "authServiceConfigRef": {
           "default": "",
@@ -1538,7 +1538,7 @@
             },
             "providersConfigRef": {
               "default": "",
-              "description": "Required reference to an existing provider config.\nWill be mounted to /etc/opencloud\nDoes not get autogenerated.\nDocumentation can be found at https://doc.opencloud.com/opencloud/next/deployment/services/s-list/opencloudm.html#trust-between-instances",
+              "description": "Required reference to an existing provider config.\nWill be mounted to /etc/opencloud\nDoes not get autogenerated.\nDocumentation can be found at https://doc.opencloud.eu/opencloud/next/deployment/services/s-list/opencloudm.html#trust-between-instances",
               "required": [],
               "title": "providersConfigRef",
               "type": [
@@ -1581,7 +1581,7 @@
               "type": "string"
             },
             "policies": {
-              "description": "Sets the policies. Each policy file is defined by a `fileName` and a `content`. The content takes the rego script as text.\nFor further information, please have a look at https://doc.opencloud.com/opencloud/next/deployment/services/s-list/policies.html\nAttention: All scripts provided here will end up in a ConfigMap. The data stored in a ConfigMap cannot exceed 1 MiB. see\nhttps://kubernetes.io/docs/concepts/configuration/configmap/#:~:text=The%20data%20stored%20in%20a,separate%20database%20or%20file%20service.",
+              "description": "Sets the policies. Each policy file is defined by a `fileName` and a `content`. The content takes the rego script as text.\nFor further information, please have a look at https://doc.opencloud.eu/opencloud/next/deployment/services/s-list/policies.html\nAttention: All scripts provided here will end up in a ConfigMap. The data stored in a ConfigMap cannot exceed 1 MiB. see\nhttps://kubernetes.io/docs/concepts/configuration/configmap/#:~:text=The%20data%20stored%20in%20a,separate%20database%20or%20file%20service.",
               "items": {
                 "additionalProperties": false,
                 "properties": {
@@ -1659,7 +1659,7 @@
           "description": "Define custom roles here. Note that the definition will be either or. So you cannot provide a ConfigMap name and text at once.",
           "properties": {
             "availableUnifiedRoles": {
-              "description": "Define a list of unified roles to make them available.\nThe default of an empty list means all unified roles are available.\nYou can read about unified roles in https://doc.opencloud.com/opencloud/next/deployment/services/s-list/graph.html.\nThe IDs of the roles and a description can be found by running:\nkubectl -n oc exec deployments/graph -- oc graph list-unified-roles",
+              "description": "Define a list of unified roles to make them available.\nThe default of an empty list means all unified roles are available.\nYou can read about unified roles in https://doc.opencloud.eu/opencloud/next/deployment/services/s-list/graph.html.\nThe IDs of the roles and a description can be found by running:\nkubectl -n oc exec deployments/graph -- oc graph list-unified-roles",
               "items": {
                 "required": [],
                 "type": "string"
@@ -2773,7 +2773,7 @@
     },
     "secretRefs": {
       "additionalProperties": false,
-      "description": "References to secrets.\nLeave these empty to have them autogenerated by the Helm chart.\nNote that secrets generated by the helm chart will be removed once the helm chart is uninstalled.\nFurthermore, if you already had secrets at the default locations, they will be NOT be overwritten,\nbut the helm chart will claim ownership of them. If this is a problem, fill in the secretRefs below\nwith the names of your existing secrets.\nTODO: Update https://doc.opencloud.com/opencloud/next/deployment/container/orchestration/orchestration.html#customize-the-generic-setup[doc.opencloud.com] for how to generate them.",
+      "description": "References to secrets.\nLeave these empty to have them autogenerated by the Helm chart.\nNote that secrets generated by the helm chart will be removed once the helm chart is uninstalled.\nFurthermore, if you already had secrets at the default locations, they will be NOT be overwritten,\nbut the helm chart will claim ownership of them. If this is a problem, fill in the secretRefs below\nwith the names of your existing secrets.\nTODO: Update https://doc.opencloud.eu/opencloud/next/deployment/container/orchestration/orchestration.html#customize-the-generic-setup[doc.opencloud.eu] for how to generate them.",
       "properties": {
         "adminUserSecretRef": {
           "default": "",
@@ -7967,7 +7967,7 @@
               "properties": {
                 "sizeLimit": {
                   "default": "",
-                  "description": "Image pull policy\nConfigures the maximum file size in bytes that is allowed for content extraction.\nFor the default value see https://doc.opencloud.com/opencloud/next/deployment/services/s-list/search.html",
+                  "description": "Image pull policy\nConfigures the maximum file size in bytes that is allowed for content extraction.\nFor the default value see https://doc.opencloud.eu/opencloud/next/deployment/services/s-list/search.html",
                   "required": [],
                   "title": "sizeLimit",
                   "type": [

charts/opencloud-full/values.yaml

@@ -900,7 +900,7 @@ features:
     # @schema
     # -- Mimetype configuration.
     # Let's you configure a mimetypes' default application, if it is allowed to create a new file and more.
-    # @default -- default configuration of OC, see https://doc.opencloud.com/opencloud/next/deployment/services/s-list/app-registry.html#yaml-example[doc.opencloud.com]
+    # @default -- default configuration of OC, see https://doc.opencloud.eu/opencloud/next/deployment/services/s-list/app-registry.html#yaml-example[doc.opencloud.eu]
     mimetypes:
       - mime_type: application/vnd.oasis.opendocument.text
         extension: odt
@@ -970,15 +970,15 @@ features:
     # Note: Enabling `roleAssignment` will disable `adminUUID`.
     adminUUID: "0ab77e6d-23b4-4ba3-9843-a3b3efdcfc53"
     # Autoprovisioning of user accounts via OIDC
-    autoprovisionAccounts:
+    autoprovisionAccounts: 
       # @schema
       # type: boolean
       # required: true
       # @schema
       # -- Enables account auto provisioning.
       # It will create missing users on the LDAP server from OIDC information.
       # Needs `features.externalUserManagement.ldap.writeable` to be be set to `true`.
-      enabled: false
+      enabled: true
       # @schema
       # type: string
       # required: true
@@ -1155,12 +1155,12 @@ features:
       # @schema
       # -- If the LDAP server is set to writable in general, some user attributes can be restricted to read only in the UI.
       # Note: This only disables editing in the UI. The readonly permissions need to be enforced in the LDAP server itself.
-      readOnlyAttributes: []
-      # - user.onPremisesSamAccountName # username
-      # - user.displayName # display name
-      # - user.mail # mail
-      # - user.passwordProfile # password
-      # - user.memberOf
+      readOnlyAttributes: 
+      - user.onPremisesSamAccountName # username
+      - user.displayName # display name
+      - user.mail # mail
+      - user.passwordProfile # password
+      - user.memberOf
       # - user.appRoleAssignments # role
       # - user.accountEnabled # login allowed
       # - drive.quota # quota
@@ -1279,7 +1279,7 @@ features:
         # required: false
         # @schema
         # -- LDAP filter to add to the default filters for user search like `(objectclass=openCloud)`.
-        filter:
+        filter: (objectclass=inetOrgPerson)
         # @schema
         # type: string
         # required: true
@@ -1344,7 +1344,7 @@ features:
         # All existing groups with a DN outside the `features.externalUserManagement.ldap.group.createBaseDN` will be treated as read-only groups.
         # Defaults to the value `features.externalUserManagement.ldap.group.baseDN`.
         # Only applicable if `features.externalUserManagement.ldap.writeable` is set to `true`
-        createBaseDN:
+        createBaseDN: ou=custom,ou=groups,dc=opencloud,dc=eu
         # @schema
         # type: string
         # required: true
@@ -1451,7 +1451,7 @@ features:
     # @schema
     # -- Define a list of unified roles to make them available.
     # The default of an empty list means all unified roles are available.
-    # You can read about unified roles in https://doc.opencloud.com/opencloud/next/deployment/services/s-list/graph.html.
+    # You can read about unified roles in https://doc.opencloud.eu/opencloud/next/deployment/services/s-list/graph.html.
     # The IDs of the roles and a description can be found by running:
     # kubectl -n oc exec deployments/graph -- oc graph list-unified-roles
     availableUnifiedRoles: []
@@ -1560,7 +1560,7 @@ features:
     #       required: true
     # @schema
     # -- Sets the policies. Each policy file is defined by a `fileName` and a `content`. The content takes the rego script as text.
-    # For further information, please have a look at https://doc.opencloud.com/opencloud/next/deployment/services/s-list/policies.html
+    # For further information, please have a look at https://doc.opencloud.eu/opencloud/next/deployment/services/s-list/policies.html
     # Attention: All scripts provided here will end up in a ConfigMap. The data stored in a ConfigMap cannot exceed 1 MiB. see
     # https://kubernetes.io/docs/concepts/configuration/configmap/#:~:text=The%20data%20stored%20in%20a,separate%20database%20or%20file%20service.
     policies: []
@@ -1623,7 +1623,7 @@ features:
     # -- Required reference to an existing provider config.
     # Will be mounted to /etc/opencloud
     # Does not get autogenerated.
-    # Documentation can be found at https://doc.opencloud.com/opencloud/next/deployment/services/s-list/opencloudm.html#trust-between-instances
+    # Documentation can be found at https://doc.opencloud.eu/opencloud/next/deployment/services/s-list/opencloudm.html#trust-between-instances
     providersConfigRef:
 
 # Ingress for OC.
@@ -1687,7 +1687,7 @@ gateway:
 # Furthermore, if you already had ConfigMaps at the default locations, they will be NOT be overwritten,
 # but the helm chart will claim ownership of them. If this is a problem, fill in the configRefs below
 # with the names of your existing secrets.
-# See https://doc.opencloud.com/opencloud/next/deployment/container/orchestration/orchestration.html#customize-the-generic-setup[doc.opencloud.com] for how to generate them.
+# See https://doc.opencloud.eu/opencloud/next/deployment/container/orchestration/orchestration.html#customize-the-generic-setup[doc.opencloud.eu] for how to generate them.
 configRefs:
   # @schema
   # type: [string, null]
@@ -1732,7 +1732,7 @@ configRefs:
 # Furthermore, if you already had secrets at the default locations, they will be NOT be overwritten,
 # but the helm chart will claim ownership of them. If this is a problem, fill in the secretRefs below
 # with the names of your existing secrets.
-# TODO: Update https://doc.opencloud.com/opencloud/next/deployment/container/orchestration/orchestration.html#customize-the-generic-setup[doc.opencloud.com] for how to generate them.
+# TODO: Update https://doc.opencloud.eu/opencloud/next/deployment/container/orchestration/orchestration.html#customize-the-generic-setup[doc.opencloud.eu] for how to generate them.
 secretRefs:
   # @schema
   # type: [string, null]
@@ -1923,7 +1923,7 @@ extraLabels: {}
 extraAnnotations: {}
 
 # Backup related settings
-# Compare to https://doc.opencloud.com/opencloud/next/maintenance/b-r/backup_considerations.html
+# Compare to https://doc.opencloud.eu/opencloud/next/maintenance/b-r/backup_considerations.html
 backup:
   # @schema
   # $ref: schema/templates.json#/labelsTemplate
@@ -3888,7 +3888,7 @@ services:
       # @schema
       # -- Image pull policy
       # -- Configures the maximum file size in bytes that is allowed for content extraction.
-      # For the default value see https://doc.opencloud.com/opencloud/next/deployment/services/s-list/search.html
+      # For the default value see https://doc.opencloud.eu/opencloud/next/deployment/services/s-list/search.html
       sizeLimit:
       tika:
         # @schema