Open Infrastructure

h1. Regular Software Updates

{{toc}}

There are various software stacks that should be updated regularly. This document describes the intervals and procedures.

h2. Kubernetes based Applications

All kubernetes based applications should be updated in a 2 step manner:

* Create a ticket in the datacenterlight project for the update

* Create or update apps/dev/APPNAME in k8s-config

* Create or update a test instance in the kubernetes cluster that is using apps/dev/APPNAME

* Ensure the test instance is running properly

* Apply changes from apps/dev/APPNAME to apps/prod/APPNAME

* Ensure all production instances are applying and working properly

Schedule: all apps should be checked for new updates at least once per month.

| *App*                     | *Link to relevant versions*                                                                       |

| ArgoCD                    | See below - stable                                                                                |

| Calico                    | https://github.com/projectcalico/calico/tags                                                      |

| Ceph                      | https://quay.io/repository/ceph/ceph?tab=tags                                                     |

| cert-manager              | https://artifacthub.io/packages/helm/cert-manager/cert-manager                                    |

| collabora                 | https://hub.docker.com/r/collabora/code/tags                                                      |

| Forgejo                   | https://codeberg.org/forgejo/forgejo/releases                                                     |

| Gitea                     | https://hub.docker.com/r/gitea/gitea/tags                                                         |

| Harbor                    | helm search repo -l harbor/harbor                                                                 |

| Matrix: synapse           | https://hub.docker.com/r/matrixdotorg/synapse/tags https://github.com/element-hq/synapse/releases |

| Matrix: element-web       | https://hub.docker.com/r/vectorim/element-web/tags                                                |

| Matrix: synapse-admin     | https://hub.docker.com/r/awesometechnologies/synapse-admin/tags                                   |

| Mautrix: signal           | https://mau.dev/mautrix/telegram/-/tags                                                           |

| Mautrix: telegram         | https://mau.dev/mautrix/telegram/-/tags                                                           |

| Mautrix: whatsapp         | https://mau.dev/mautrix/whatsapp/-/tags                                                           |

| Mastodon                  | https://hub.docker.com/r/tootsuite/mastodon/tags https://github.com/mastodon/mastodon/tags        |

| Mattermost                | https://hub.docker.com/r/mattermost/mattermost-team-edition/tags                                  |

| Mittwald Secret Generator | https://github.com/mittwald/kubernetes-secret-generator/tags                                      |

| Netbox                    | https://hub.docker.com/r/netboxcommunity/netbox/tags                                              |

| nginx                     | https://hub.docker.com/_/nginx                                                                    |

| nginx-ingress             | https://github.com/kubernetes/ingress-nginx/releases                                              |

| Nextcloud                 | https://hub.docker.com/_/nextcloud/tags                                                           |

| OpenLDAP (bitnami)        | https://hub.docker.com/r/bitnami/openldap/tags                                                    |

| Peertube                  | https://hub.docker.com/r/chocobozzz/peertube/tags                                                 |

| Redmine                   | https://hub.docker.com/_/redmine/tags                                                             |

| Rook                      | https://github.com/rook/rook/tags                                                                 |

| Roundcube                 | https://hub.docker.com/r/roundcube/roundcubemail/tags                                             |

| Zammad                    | https://hub.docker.com/r/zammad/zammad-docker-compose/tags                                        |

h3. ArgoCD

We usually use stable via:

<pre>

kubectl apply -n argocd -f https://raw.githubusercontent.com/argoproj/argo-cd/stable/manifests/install.yaml

</pre>

h3. gitea 1.19.x to 1.20.x upgrade

* need to modify /data/gitea/conf/app.ini

<pre>

Deprecated config option `[mailer]` `MAILER_TYPE` present. Use `[mailer]` `PROTOCOL` instead. This fallback will be/has been removed in v1.19.0 (and 1 more)

Deprecated config option `[mailer]` `HOST` present. Use `[mailer]` `SMTP_ADDR` instead. This fallback will be/has been removed in v1.19.0

</pre>

h3. gitea 1.20.x to 1.21.x upgrade

* need to modify /data/gitea/conf/app.ini

* See https://docs.gitea.com/administration/logging-config

<pre>

Deprecated config option `[log]` `ROUTER` present. Use `[log]` `logger.router.MODE` instead. This fallback will be/has been removed in 1.21 (and 2 more)

</pre>

h2. Mikrotik devices

* Current release on https://mikrotik.com/download

* Releases are on https://mikrotik.com/download/archive