Open Infrastructure

h1. Regular Software Updates

There are various software stacks that should be updated regularly. This document describes the intervals and procedures.

h2. Kubernetes based Applications

All kubernetes based applications should be updated in a 2 step manner:

* Create a ticket in the datacenterlight project for the update

* Create or update apps/dev/APPNAME in k8s-config

* Create or update a test instance in the kubernetes cluster that is using apps/dev/APPNAME

* Ensure the test instance is running properly

* Apply changes from apps/dev/APPNAME to apps/prod/APPNAME

* Ensure all production instances are applying and working properly

Schedule: all apps should be checked for new updates at least once per month.

| App        | Link to relevant versions                                                                             |

| ArgoCD     | See below                                                                                             |

| Ceph       | https://quay.io/repository/ceph/ceph?tab=tags                                                         |

| cert-manager | https://artifacthub.io/packages/helm/cert-manager/cert-manager |

| Gitea      | https://hub.docker.com/r/gitea/gitea/tags                                                             |

| Harbor     | helm search repo -l harbor/harbor                                                                     |

| Matrix: synapse | https://hub.docker.com/r/matrixdotorg/synapse/tags |

| Matrix: synapse | https://github.com/matrix-org/synapse/releases |

| Matrix: element-web| https://hub.docker.com/r/vectorim/element-web/tags |

| Matrix: synapse-admin | https://hub.docker.com/r/awesometechnologies/synapse-admin/tags |

| Mattermost | https://hub.docker.com/r/mattermost/mattermost-team-edition/tags                                      |

| Mastodon   | https://hub.docker.com/r/tootsuite/mastodon/tags https://github.com/mastodon/mastodon/tags            |

| Mittwald Secret Generator | https://github.com/mittwald/kubernetes-secret-generator/tags |

| Netbox     | https://hub.docker.com/r/netboxcommunity/netbox/tags                                                  |

| nginx-ingress | https://github.com/kubernetes/ingress-nginx/releases |

| OpenLDAP (bitnami) | https://hub.docker.com/r/bitnami/openldap/tags |

| Rook       | https://github.com/rook/rook/tags                                                                     |

| Nextcloud  | https://hub.docker.com/_/nextcloud/tags                                                               |

| Redmine    | https://hub.docker.com/_/redmine/tags                                                                 |

h3. ArgoCD

We usually use stable via:

<pre>

kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml

</pre>

h3. gitea 1.20.x to 1.21.x upgrade

* need to modify /data/gitea/conf/app.ini

* See https://docs.gitea.com/administration/logging-config

<pre>

Deprecated config option `[log]` `ROUTER` present. Use `[log]` `logger.router.MODE` instead. This fallback will be/has been removed in 1.21 (and 2 more)

</pre>