Skip to content

Conversation

@ericwout-overheid
Copy link
Contributor

Add several resources and configuration options to allow OpenProject to run in an OpenShift cluster:

  • Add network policies to handle clusters with default deny policies
  • Only add an host entry to the tls of the Ingress when an secretName is supplied, to allow for auto-configuration of TLS settings by OpenShift
  • Add an optional role and role binding to the service account to be able to select the nonroot-v2 Secure Context Constraints of OpenShift. This allows the image to run on user/group 1000
  • Add common labels to all resources to improve selection possibilties
  • Add an example configuration for OpenShift based on our configuration

@ericwout-overheid ericwout-overheid requested a review from a team as a code owner December 1, 2025 15:13
@changeset-bot
Copy link

changeset-bot bot commented Dec 1, 2025

🦋 Changeset detected

Latest commit: b82751a

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@openproject/helm-charts Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

oliverguenther
oliverguenther previously approved these changes Dec 4, 2025
Copy link
Member

@oliverguenther oliverguenther left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I cannot really confirm the network policy part currently, but the templating looks fine

Updated the versioning of '@openproject/helm-charts' to minor and added OpenShift compatibility resources and configuration.
@oliverguenther oliverguenther merged commit 236dd59 into opf:main Dec 4, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants