Bump up Version

Your Name · Your Name · commit a01e113e91fe · 2025-05-25T20:27:46.000Z
diff --git a/charts/opencloud-full/deployments/helm/helmfile.yaml b/charts/opencloud-full/deployments/helm/helmfile.yaml
@@ -246,7 +246,6 @@ releases:
             objectClass: person
             cn: admin
             sn: admin
-            uid: ldapadmin
 
             dn: ou=groups,dc=opencloud,dc=eu
             objectClass: organizationalUnit
diff --git a/charts/opencloud-full/deployments/timoni/opencloud.cue b/charts/opencloud-full/deployments/timoni/opencloud.cue
@@ -296,7 +296,7 @@ bundle: {
                     version: "4.3.3"
                 }
                 sync: {
-                    timeout: 25
+                    timeout: 5
                     createNamespace: true
                 }
                 helmValues: {
@@ -328,7 +328,6 @@ bundle: {
                             objectClass: person
                             cn: admin
                             sn: admin
-                            uid: ldapadmin
 
                             dn: ou=groups,dc=opencloud,dc=eu
                             objectClass: organizationalUnit
diff --git a/charts/opencloud-full/templates/idm/pvc.yaml b/charts/opencloud-full/templates/idm/pvc.yaml
@@ -14,6 +14,7 @@ metadata:
   {{- with .Values.services.idm.persistence.annotations  }}
   annotations:
 {{ toYaml . | indent 4 }}
+    helm.sh/resource-policy: "keep"
   {{- end }}
   {{- with .Values.services.idm.persistence.finalizers  }}
   finalizers:
diff --git a/charts/opencloud-full/templates/minio/pvc.yaml b/charts/opencloud-full/templates/minio/pvc.yaml
@@ -5,6 +5,8 @@ kind: PersistentVolumeClaim
 metadata:
   name: {{ .appName }}
   namespace: {{ template "oc.namespace" . }}
+  annotations:
+    helm.sh/resource-policy: "keep"
   labels:
     app: {{ .appName }}
     oc-metrics: enabled
diff --git a/charts/opencloud-full/templates/nats/pvc.yaml b/charts/opencloud-full/templates/nats/pvc.yaml
@@ -11,6 +11,7 @@ metadata:
   {{- with .Values.services.nats.persistence.annotations  }}
   annotations:
 {{ toYaml . | indent 4 }}
+    helm.sh/resource-policy: "keep"
   {{- end }}
   {{- with .Values.services.nats.persistence.finalizers  }}
   finalizers:
diff --git a/charts/opencloud-full/templates/ocm/pvc.yaml b/charts/opencloud-full/templates/ocm/pvc.yaml
@@ -14,6 +14,7 @@ metadata:
   {{- with .Values.services.ocm.persistence.annotations  }}
   annotations:
 {{ toYaml . | indent 4 }}
+    helm.sh/resource-policy: "keep"
   {{- end }}
   {{- with .Values.services.ocm.persistence.finalizers  }}
   finalizers:
diff --git a/charts/opencloud-full/templates/onlyoffice/pvc.yaml b/charts/opencloud-full/templates/onlyoffice/pvc.yaml
@@ -5,6 +5,8 @@ kind: PersistentVolumeClaim
 metadata:
   name: {{ .appName }}-data
   namespace: {{ template "oc.namespace" . }}
+  annotations:
+    helm.sh/resource-policy: "keep"
   labels:
     app: {{ .appName }}
     oc-metrics: enabled
diff --git a/charts/opencloud-full/templates/search/pvc.yaml b/charts/opencloud-full/templates/search/pvc.yaml
@@ -10,6 +10,7 @@ metadata:
   {{- with .Values.services.search.persistence.annotations  }}
   annotations:
 {{ toYaml . | indent 4 }}
+    helm.sh/resource-policy: "keep"
   {{- end }}
   {{- with .Values.services.search.persistence.finalizers  }}
   finalizers:
diff --git a/charts/opencloud-full/templates/storagesystem/pvc.yaml b/charts/opencloud-full/templates/storagesystem/pvc.yaml
@@ -13,6 +13,7 @@ metadata:
   {{- with .Values.services.storagesystem.persistence.annotations  }}
   annotations:
 {{ toYaml . | indent 4 }}
+    helm.sh/resource-policy: "keep"
   {{- end }}
   {{- with .Values.services.storagesystem.persistence.finalizers  }}
   finalizers:
diff --git a/charts/opencloud-full/templates/storageusers/pvc.yaml b/charts/opencloud-full/templates/storageusers/pvc.yaml
@@ -13,6 +13,7 @@ metadata:
   {{- with .Values.services.storageusers.persistence.annotations  }}
   annotations:
 {{ toYaml . | indent 4 }}
+    helm.sh/resource-policy: "keep"
   {{- end }}
   {{- with .Values.services.storageusers.persistence.finalizers  }}
   finalizers:
diff --git a/charts/opencloud-full/templates/thumbnails/pvc.yaml b/charts/opencloud-full/templates/thumbnails/pvc.yaml
@@ -10,6 +10,7 @@ metadata:
   {{- with .Values.services.thumbnails.persistence.annotations  }}
   annotations:
 {{ toYaml . | indent 4 }}
+    helm.sh/resource-policy: "keep"
   {{- end }}
   {{- with .Values.services.thumbnails.persistence.finalizers  }}
   finalizers:
diff --git a/charts/opencloud-full/templates/web/pvc.yaml b/charts/opencloud-full/templates/web/pvc.yaml
@@ -10,6 +10,7 @@ metadata:
   {{- with .Values.services.web.persistence.annotations  }}
   annotations:
 {{ toYaml . | indent 4 }}
+    helm.sh/resource-policy: "keep"
   {{- end }}
   {{- with .Values.services.web.persistence.finalizers  }}
   finalizers:
diff --git a/charts/opencloud-full/values.yaml b/charts/opencloud-full/values.yaml
@@ -970,15 +970,15 @@ features:
     # Note: Enabling `roleAssignment` will disable `adminUUID`.
     adminUUID: "0ab77e6d-23b4-4ba3-9843-a3b3efdcfc53"
     # Autoprovisioning of user accounts via OIDC
-    autoprovisionAccounts:
+    autoprovisionAccounts: 
       # @schema
       # type: boolean
       # required: true
       # @schema
       # -- Enables account auto provisioning.
       # It will create missing users on the LDAP server from OIDC information.
       # Needs `features.externalUserManagement.ldap.writeable` to be be set to `true`.
-      enabled: false
+      enabled: true
       # @schema
       # type: string
       # required: true
@@ -1155,12 +1155,12 @@ features:
       # @schema
       # -- If the LDAP server is set to writable in general, some user attributes can be restricted to read only in the UI.
       # Note: This only disables editing in the UI. The readonly permissions need to be enforced in the LDAP server itself.
-      readOnlyAttributes: []
-      # - user.onPremisesSamAccountName # username
-      # - user.displayName # display name
-      # - user.mail # mail
-      # - user.passwordProfile # password
-      # - user.memberOf
+      readOnlyAttributes: 
+      - user.onPremisesSamAccountName # username
+      - user.displayName # display name
+      - user.mail # mail
+      - user.passwordProfile # password
+      - user.memberOf
       # - user.appRoleAssignments # role
       # - user.accountEnabled # login allowed
       # - drive.quota # quota
@@ -1279,7 +1279,7 @@ features:
         # required: false
         # @schema
         # -- LDAP filter to add to the default filters for user search like `(objectclass=openCloud)`.
-        filter:
+        filter: (objectclass=inetOrgPerson)
         # @schema
         # type: string
         # required: true
@@ -1344,7 +1344,7 @@ features:
         # All existing groups with a DN outside the `features.externalUserManagement.ldap.group.createBaseDN` will be treated as read-only groups.
         # Defaults to the value `features.externalUserManagement.ldap.group.baseDN`.
         # Only applicable if `features.externalUserManagement.ldap.writeable` is set to `true`
-        createBaseDN:
+        createBaseDN: ou=custom,ou=groups,dc=opencloud,dc=eu
         # @schema
         # type: string
         # required: true
