Open Infrastructure

h1. Regular Software Updates

{{toc}}

There are various software stacks that should be updated regularly. This document describes the intervals and procedures.

h2. Kubernetes based Applications

All kubernetes based applications should be updated in a 2 step manner:

* Create a ticket in the datacenterlight project for the update

* Create or update apps/dev/APPNAME in k8s-config

* Create or update a test instance in the kubernetes cluster that is using apps/dev/APPNAME

* Ensure the test instance is running properly

* Apply changes from apps/dev/APPNAME to apps/prod/APPNAME

* Ensure all production instances are applying and working properly

Schedule: all apps should be checked for new updates at least once per month.

| App        | Link to relevant versions                                                                             |

| ArgoCD     | See below                                                                                             |

| Ceph       | https://quay.io/repository/ceph/ceph?tab=tags                                                         |

| cert-manager | https://artifacthub.io/packages/helm/cert-manager/cert-manager |

| Gitea      | https://hub.docker.com/r/gitea/gitea/tags                                                             |

| Harbor     | helm search repo -l harbor/harbor                                                                     |

| Matrix: synapse | https://hub.docker.com/r/matrixdotorg/synapse/tags |

| Matrix: synapse | https://github.com/matrix-org/synapse/releases |

| Matrix: element-web| https://hub.docker.com/r/vectorim/element-web/tags |

| Matrix: synapse-admin | https://hub.docker.com/r/awesometechnologies/synapse-admin/tags |

| Mattermost | https://hub.docker.com/r/mattermost/mattermost-team-edition/tags                                      |

| Mastodon   | https://hub.docker.com/r/tootsuite/mastodon/tags https://github.com/mastodon/mastodon/tags            |

| Mittwald Secret Generator | https://github.com/mittwald/kubernetes-secret-generator/tags |

| Netbox     | https://hub.docker.com/r/netboxcommunity/netbox/tags                                                  |

| nginx-ingress | https://github.com/kubernetes/ingress-nginx/releases |

| OpenLDAP (bitnami) | https://hub.docker.com/r/bitnami/openldap/tags |

| Rook       | https://github.com/rook/rook/tags                                                                     |

| Nextcloud  | https://hub.docker.com/_/nextcloud/tags                                                               |

| Redmine    | https://hub.docker.com/_/redmine/tags                                                                 |

h3. ArgoCD

We usually use stable via:

<pre>

kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml

</pre>

h3. gitea 1.20.x to 1.21.x upgrade

* need to modify /data/gitea/conf/app.ini

* See https://docs.gitea.com/administration/logging-config

<pre>

Deprecated config option `[log]` `ROUTER` present. Use `[log]` `logger.router.MODE` instead. This fallback will be/has been removed in 1.21 (and 2 more)

</pre>