Open Infrastructure

h1. Regular Software Updates

{{toc}}

There are various software stacks that should be updated regularly. This document describes the intervals and procedures.

h2. Kubernetes based Applications

All kubernetes based applications should be updated in a 2 step manner:

* Create a ticket in the datacenterlight project for the update

* Create or update apps/dev/APPNAME in k8s-config

* Create or update a test instance in the kubernetes cluster that is using apps/dev/APPNAME

* Ensure the test instance is running properly

* Apply changes from apps/dev/APPNAME to apps/prod/APPNAME

* Ensure all production instances are applying and working properly

Schedule: all apps should be checked for new updates at least once per month.

| *App*                     | *Link to relevant versions*                                                                |

| ArgoCD                    | See below - stable                                                                         |

| Ceph                      | https://quay.io/repository/ceph/ceph?tab=tags                                              |

| cert-manager              | https://artifacthub.io/packages/helm/cert-manager/cert-manager                             |

| collabora                 | https://hub.docker.com/r/collabora/code/tags                                               |

| Gitea                     | https://hub.docker.com/r/gitea/gitea/tags                                                  |

| Harbor                    | helm search repo -l harbor/harbor                                                          |

| Matrix: synapse           | https://hub.docker.com/r/matrixdotorg/synapse/tags https://github.com/element-hq/synapse/releases   |

| Matrix: element-web       | https://hub.docker.com/r/vectorim/element-web/tags                                         |

| Matrix: synapse-admin     | https://hub.docker.com/r/awesometechnologies/synapse-admin/tags                            |

| Mastodon                  | https://hub.docker.com/r/tootsuite/mastodon/tags https://github.com/mastodon/mastodon/tags |

| Mattermost                | https://hub.docker.com/r/mattermost/mattermost-team-edition/tags                           |

| Mittwald Secret Generator | https://github.com/mittwald/kubernetes-secret-generator/tags                               |

| Netbox                    | https://hub.docker.com/r/netboxcommunity/netbox/tags                                       |

| nginx | https://hub.docker.com/_/nginx |

| nginx-ingress             | https://github.com/kubernetes/ingress-nginx/releases                                       |

| Nextcloud                 | https://hub.docker.com/_/nextcloud/tags                                                    |

| OpenLDAP (bitnami)        | https://hub.docker.com/r/bitnami/openldap/tags                                             |

| Peertube                  | https://hub.docker.com/r/chocobozzz/peertube/tags                                          |

| Redmine                   | https://hub.docker.com/_/redmine/tags                                                      |

| Rook                      | https://github.com/rook/rook/tags                                                          |

h3. ArgoCD

We usually use stable via:

<pre>

kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml

</pre>

h3. gitea 1.19.x to 1.20.x upgrade

* need to modify /data/gitea/conf/app.ini

<pre>

Deprecated config option `[mailer]` `MAILER_TYPE` present. Use `[mailer]` `PROTOCOL` instead. This fallback will be/has been removed in v1.19.0 (and 1 more)

Deprecated config option `[mailer]` `HOST` present. Use `[mailer]` `SMTP_ADDR` instead. This fallback will be/has been removed in v1.19.0

</pre>

h3. gitea 1.20.x to 1.21.x upgrade

* need to modify /data/gitea/conf/app.ini

* See https://docs.gitea.com/administration/logging-config

<pre>

Deprecated config option `[log]` `ROUTER` present. Use `[log]` `logger.router.MODE` instead. This fallback will be/has been removed in 1.21 (and 2 more)

</pre>