CHANGELOG.md

+## [2.1.2](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-otterize/compare/v2.1.1...v2.1.2) (2024-12-19)
+
+
+### Bug Fixes
+
+* **opendesk-otterize:** Update policies for openDesk v1.1 ([1237666](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-otterize/commit/1237666ce7f19feff473ce25ea3b911a0a708571))
+
 ## [2.1.1](https://gitlab.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-otterize/compare/v2.1.0...v2.1.1) (2024-08-28)
 
 

charts/opendesk-otterize/Chart.yaml

@@ -8,7 +8,7 @@ apiVersion: "v2"
 dependencies:
   - name: "common"
     version: "^2.x.x"
-    repository: "oci://registry.souvap-univention.de/souvap/tooling/charts/bitnami-charts"
+    repository: "oci://registry.opencode.de/bmi/opendesk/components/external/charts/bitnami-charts"
 description: "A Helm chart deploying resources for Otterize to secure services with NetworkPolicies."
 home: "https://zendis.de"
 keywords:
@@ -17,5 +17,5 @@ name: "opendesk-otterize"
 sources:
   - "https://gitlab.souvap-univention.de/souvap/tooling/charts/opendesk-otterize"
 type: "application"
-version: "2.1.1"
+version: "2.1.2"
 ...

charts/opendesk-otterize/README.md

@@ -14,21 +14,21 @@ To install the chart with the release name `my-release`, you have two options:
 
 ```console
 helm repo add opendesk-otterize https://gitlab.opencode.de/api/v4/projects/2293/packages/helm/stable
-helm install my-release --version 2.1.1 opendesk-otterize/opendesk-otterize
+helm install my-release --version 2.1.2 opendesk-otterize/opendesk-otterize
 ```
 
 ### Install via OCI Registry
 
 ```console
 helm repo add opendesk-otterize oci://registry.opencode.de/bmi/opendesk/components/platform-development/charts/opendesk-otterize
-helm install my-release --version 2.1.1 opendesk-otterize/opendesk-otterize
+helm install my-release --version 2.1.2 opendesk-otterize/opendesk-otterize
 ```
 
 ## Requirements
 
 | Repository | Name | Version |
 |------------|------|---------|
-| oci://registry.souvap-univention.de/souvap/tooling/charts/bitnami-charts | common | ^2.x.x |
+| oci://registry.opencode.de/bmi/opendesk/components/external/charts/bitnami-charts | common | ^2.x.x |
 
 ## Values
 
@@ -60,6 +60,8 @@ helm install my-release --version 2.1.1 opendesk-otterize/opendesk-otterize
 | apps.minio.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
 | apps.nextcloud.enabled | bool | `true` | Enables Nextcloud related resource creation. |
 | apps.nextcloud.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
+| apps.nubus.enabled | bool | `true` | Enables Univention Management Stack related resource creation. |
+| apps.nubus.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
 | apps.openproject.enabled | bool | `true` | Enables OpenProject related resource creation. |
 | apps.openproject.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
 | apps.oxAppsuite.enabled | bool | `true` | Enables Open-Xchange Appsuite related resource creation. |
@@ -72,8 +74,6 @@ helm install my-release --version 2.1.1 opendesk-otterize/opendesk-otterize
 | apps.postgresql.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
 | apps.redis.enabled | bool | `true` | Enables Redis related resource creation. |
 | apps.redis.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
-| apps.univentionManagementStack.enabled | bool | `true` | Enables Univention Management Stack related resource creation. |
-| apps.univentionManagementStack.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
 | apps.xwiki.enabled | bool | `true` | Enables XWiki related resource creation. |
 | apps.xwiki.namespace | string | `""` | If omitted, resources are deployed in the same namespace as this helm chart. |
 | clientIntents.apiVersion | string | `"k8s.otterize.com/v1alpha3"` | Choose the API version to use. |

charts/opendesk-otterize/templates/ClientIntents/opendesk-nextcloud-apache2.yaml → charts/opendesk-otterize/templates/ClientIntents/clamav-simple.yaml

@@ -2,13 +2,13 @@
 SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
 SPDX-License-Identifier: Apache-2.0
 */}}
-{{- if and .Values.apps.nextcloud.enabled .Values.clientIntents.enabled }}
+{{- if and .Values.apps.clamavDistributed.enabled .Values.clientIntents.enabled }}
 ---
 apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
 kind: "ClientIntents"
 metadata:
-  name: "{{ include "common.names.fullname" . }}-opendesk-nextcloud-apache2"
-  namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
+  name: "{{ include "common.names.fullname" . }}-clamav-simple"
+  namespace: {{ .Values.apps.clamavDistributed.namespace | default .Release.Namespace | quote }}
   labels:
     {{- include "common.labels.standard" . | nindent 4 }}
     {{- if .Values.additionalLabels }}
@@ -19,8 +19,11 @@ metadata:
   {{- end }}
 spec:
   service:
-    name: "opendesk-nextcloud-apache2"
+    name: "clamav-simple"
   calls:
-    - name: {{ printf "%s.%s" "opendesk-nextcloud-php" (coalesce .Values.apps.nextcloud.namespace .Release.Namespace) | quote }}
+    - type: "internet"
+      internet:
+        domains:
+          - "gitlab.opencode.de"
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/collabora.yaml

@@ -22,7 +22,11 @@ spec:
     name: "collabora"
   calls:
     {{- if .Values.apps.nextcloud.enabled }}
-    - name: {{ printf "%s.%s" "nextcloud" (coalesce .Values.apps.nextcloud.namespace .Release.Namespace) | quote }}
+    - name: {{ printf "%s.%s" "nextcloud-aio" (coalesce .Values.apps.nextcloud.namespace .Release.Namespace) | quote }}
     {{- end }}
+    - type: "internet"
+      internet:
+        domains:
+          - "files.zd-dominik.opendesk.qa"
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/dovecot.yaml

@@ -21,8 +21,12 @@ spec:
   service:
     name: "dovecot"
   calls:
-    {{- if .Values.apps.univentionManagementStack.enabled }}
-    - name: {{ printf "%s.%s" "ums-ldap-server" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
+    {{- if .Values.apps.nubus.enabled }}
+    - name: {{ printf "%s.%s" "ums-ldap-server-primary" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
     {{- end }}
+    - type: "internet"
+      internet:
+        domains:
+          - id.zd-dominik.opendesk.qa
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/intercom-service.yaml

@@ -24,5 +24,15 @@ spec:
     {{- if .Values.apps.redis.enabled }}
     - name: {{ printf "%s.%s" "redis-master" (coalesce .Values.apps.redis.namespace .Release.Namespace) | quote }}
     {{- end }}
+    {{- if .Values.apps.nubus.enabled }}
+    - name: {{ printf "%s.%s" "ums-keycloak" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
+    {{- end }}
+    - type: "internet"
+      internet:
+        domains:
+          - files.zd-dominik.opendesk.qa
+          - id.zd-dominik.opendesk.qa
+          - matrix.zd-dominik.opendesk.qa
+          - portal.zd-dominik.opendesk.qa
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/open-xchange-core-documentconverter.yaml

@@ -24,6 +24,9 @@ spec:
     {{- if .Values.apps.mariadb.enabled }}
     - name: {{ printf "%s.%s" "mariadb" (coalesce .Values.apps.mariadb.namespace .Release.Namespace) | quote }}
     {{- end }}
+    {{- if .Values.apps.redis.enabled }}
+    - name: {{ printf "%s.%s" "redis-master" (coalesce .Values.apps.redis.namespace .Release.Namespace) | quote }}
+    {{- end }}
     - name: {{ printf "%s.%s" "open-xchange-core-documentconverter" (coalesce .Values.apps.oxAppsuite.namespace .Release.Namespace) | quote }}
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/open-xchange-core-imageconverter.yaml

@@ -24,6 +24,9 @@ spec:
     {{- if .Values.apps.mariadb.enabled }}
     - name: {{ printf "%s.%s" "mariadb" (coalesce .Values.apps.mariadb.namespace .Release.Namespace) | quote }}
     {{- end }}
+    {{- if .Values.apps.redis.enabled }}
+    - name: {{ printf "%s.%s" "redis-master" (coalesce .Values.apps.redis.namespace .Release.Namespace) | quote }}
+    {{- end }}
     - name: {{ printf "%s.%s" "open-xchange-core-imageconverter" (coalesce .Values.apps.oxAppsuite.namespace .Release.Namespace) | quote }}
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/open-xchange-core-mw-default.yaml

@@ -28,10 +28,10 @@ spec:
     - name: {{ printf "%s.%s" "redis-master" (coalesce .Values.apps.redis.namespace .Release.Namespace) | quote }}
     {{- end }}
     {{- if .Values.apps.nextcloud.enabled }}
-    - name: {{ printf "%s.%s" "opendesk-nextcloud-apache2" (coalesce .Values.apps.nextcloud.namespace .Release.Namespace) | quote }}
+    - name: {{ printf "%s.%s" "opendesk-nextcloud-aio" (coalesce .Values.apps.nextcloud.namespace .Release.Namespace) | quote }}
     {{- end }}
-    {{- if .Values.apps.univentionManagementStack.enabled }}
-    - name: {{ printf "%s.%s" "ums-ldap-server" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
+    {{- if .Values.apps.nubus.enabled }}
+    - name: {{ printf "%s.%s" "ums-ldap-server-primary" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
     {{- end }}
     {{- if .Values.apps.postfix.enabled }}
     - name: {{ printf "%s.%s" "postfix" (coalesce .Values.apps.postfix.namespace .Release.Namespace) | quote }}
@@ -46,5 +46,9 @@ spec:
     - name: {{ printf "%s.%s" "open-xchange-core-documentconverter" (coalesce .Values.apps.oxAppsuite.namespace .Release.Namespace) | quote }}
     - name: {{ printf "%s.%s" "open-xchange-core-imageconverter" (coalesce .Values.apps.oxAppsuite.namespace .Release.Namespace) | quote }}
     - name: {{ printf "%s.%s" "open-xchange-core-mw-default" (coalesce .Values.apps.oxAppsuite.namespace .Release.Namespace) | quote }}
+    - type: internet
+      internet:
+        domains:
+          - id.zd-dominik.opendesk.qa
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/open-xchange-core-ui-middleware.yaml

@@ -29,5 +29,9 @@ spec:
     {{- if .Values.apps.redis.enabled }}
     - name: {{ printf "%s.%s" "redis-master" (coalesce .Values.apps.redis.namespace .Release.Namespace) | quote }}
     {{- end }}
+    - type: "internet"
+      internet:
+        domains:
+          - webmail.zd-dominik.opendesk.qa
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/opendesk-keycloak-bootstrap.yaml

@@ -2,13 +2,13 @@
 SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
 SPDX-License-Identifier: Apache-2.0
 */}}
-{{- if and .Values.apps.univentionManagementStack.enabled .Values.clientIntents.enabled }}
+{{- if and .Values.apps.nubus.enabled .Values.clientIntents.enabled }}
 ---
 apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
 kind: "ClientIntents"
 metadata:
   name: "{{ include "common.names.fullname" . }}-opendesk-keycloak-bootstrap"
-  namespace: {{ .Values.apps.univentionManagementStack.namespace | default .Release.Namespace | quote }}
+  namespace: {{ .Values.apps.nubus.namespace | default .Release.Namespace | quote }}
   labels:
     {{- include "common.labels.standard" . | nindent 4 }}
     {{- if .Values.additionalLabels }}
@@ -21,6 +21,6 @@ spec:
   service:
     name: "opendesk-keycloak-bootstrap"
   calls:
-    - name: {{ printf "%s.%s" "ums-keycloak" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
+    - name: {{ printf "%s.%s" "ums-keycloak" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/opendesk-nextcloud-php.yaml → charts/opendesk-otterize/templates/ClientIntents/opendesk-nextcloud-aio.yaml

@@ -7,7 +7,7 @@ SPDX-License-Identifier: Apache-2.0
 apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
 kind: "ClientIntents"
 metadata:
-  name: "{{ include "common.names.fullname" . }}-opendesk-nextcloud-php"
+  name: "{{ include "common.names.fullname" . }}-opendesk-nextcloud-aio"
   namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
   labels:
     {{- include "common.labels.standard" . | nindent 4 }}
@@ -19,22 +19,29 @@ metadata:
   {{- end }}
 spec:
   service:
-    name: "opendesk-nextcloud-php"
+    name: "opendesk-nextcloud-aio"
   calls:
-    {{- if .Values.apps.clamavDistributed.enabled }}
-    - name: {{ printf "%s.%s" "clamav-icap" (coalesce .Values.apps.clamavDistributed.namespace .Release.Namespace) | quote }}
-    {{- end }}
-    {{- if .Values.apps.clamavSimple.enabled }}
-    - name: {{ printf "%s.%s" "clamav-simple" (coalesce .Values.apps.clamavSimple.namespace .Release.Namespace) | quote }}
-    {{- end }}
     {{- if .Values.apps.mariadb.enabled }}
     - name: {{ printf "%s.%s" "mariadb" (coalesce .Values.apps.mariadb.namespace .Release.Namespace) | quote }}
     {{- end }}
-    {{- if .Values.apps.univentionManagementStack.enabled }}
-    - name: {{ printf "%s.%s" "ums-ldap-server" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
-    {{- end }}
     {{- if .Values.apps.redis.enabled }}
     - name: {{ printf "%s.%s" "redis-master" (coalesce .Values.apps.redis.namespace .Release.Namespace) | quote }}
     {{- end }}
+    {{- if .Values.apps.nubus.enabled }}
+    - name: {{ printf "%s.%s" "ums-ldap-server-primary" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
+    {{- end }}
+    {{- if .Values.apps.clamavDistributed.enabled }}
+    - name: {{ printf "%s.%s" "clamav-icap" (coalesce .Values.apps.clamavDistributed.namespace .Release.Namespace) | quote }}
+    {{- end }}
+    {{- if .Values.apps.clamavSimple.enabled }}
+    - name: {{ printf "%s.%s" "clamav-simple" (coalesce .Values.apps.clamavSimple.namespace .Release.Namespace) | quote }}
+    {{- end }}
+    - type: "internet"
+      internet:
+        domains:
+          - id.zd-dominik.opendesk.qa
+          - office.zd-dominik.opendesk.qa
+          - portal.zd-dominik.opendesk.qa
+          - webmail.zd-dominik.opendesk.qa
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/opendesk-nextcloud-exporter.yaml

@@ -21,6 +21,6 @@ spec:
   service:
     name: "opendesk-nextcloud-exporter"
   calls:
-    - name: {{ printf "%s.%s" "opendesk-nextcloud-apache2" (coalesce .Values.apps.nextcloud.namespace .Release.Namespace) | quote }}
+    - name: {{ printf "%s.%s" "opendesk-nextcloud-aio" (coalesce .Values.apps.nextcloud.namespace .Release.Namespace) | quote }}
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/opendesk-nextcloud.yaml

+{{/*
+SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
+SPDX-License-Identifier: Apache-2.0
+*/}}
+{{- if and .Values.apps.nextcloud.enabled .Values.clientIntents.enabled }}
+---
+apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
+kind: "ClientIntents"
+metadata:
+  name: "{{ include "common.names.fullname" . }}-opendesk-nextcloud"
+  namespace: {{ .Values.apps.nextcloud.namespace | default .Release.Namespace | quote }}
+  labels:
+    {{- include "common.labels.standard" . | nindent 4 }}
+    {{- if .Values.additionalLabels }}
+    {{- include "common.tplvalues.render" ( dict "value" .Values.additionalLabels "context" . ) | nindent 4 }}
+    {{- end }}
+  {{- if .Values.additionalAnnotations }}
+  annotations: {{- include "common.tplvalues.render" ( dict "value" .Values.additionalAnnotations "context" . ) | nindent 4 }}
+  {{- end }}
+spec:
+  service:
+    name: "opendesk-nextcloud"
+  calls:
+    {{- if .Values.apps.mariadb.enabled }}
+    - name: {{ printf "%s.%s" "mariadb" (coalesce .Values.apps.mariadb.namespace .Release.Namespace) | quote }}
+    {{- end }}
+    {{- if .Values.apps.redis.enabled }}
+    - name: {{ printf "%s.%s" "redis-master" (coalesce .Values.apps.redis.namespace .Release.Namespace) | quote }}
+    {{- end }}
+    {{- if .Values.apps.clamavSimple.enabled }}
+    - name: {{ printf "%s.%s" "clamav-simple" (coalesce .Values.apps.clamavSimple.namespace .Release.Namespace) | quote }}
+    {{- end }}
+    {{- if .Values.apps.nubus.enabled }}
+    - name: {{ printf "%s.%s" "ums-ldap-server-primary" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
+    {{- end }}
+...
+{{- end }}

charts/opendesk-otterize/templates/ClientIntents/opendesk-synapse.yaml

@@ -24,5 +24,9 @@ spec:
     {{- if .Values.apps.postgresql.enabled }}
     - name: {{ printf "%s.%s" "postgresql" (coalesce .Values.apps.postgresql.namespace .Release.Namespace) | quote }}
     {{- end }}
+    - type: "internet"
+      internet:
+        domains:
+          - id.zd-dominik.opendesk.qa
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/openproject-seeder.yaml

@@ -27,8 +27,8 @@ spec:
     {{- if .Values.apps.memcached.enabled }}
     - name: {{ printf "%s.%s" "memcached" (coalesce .Values.apps.memcached.namespace .Release.Namespace) | quote }}
     {{- end }}
-    {{- if .Values.apps.univentionManagementStack.enabled }}
-    - name: {{ printf "%s.%s" "ums-ldap-server" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
+    {{- if .Values.apps.nubus.enabled }}
+    - name: {{ printf "%s.%s" "ums-ldap-server" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
     {{- end }}
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/openproject-web.yaml

@@ -27,5 +27,11 @@ spec:
     {{- if .Values.apps.postgresql.enabled }}
     - name: {{ printf "%s.%s" "postgresql" (coalesce .Values.apps.postgresql.namespace .Release.Namespace) | quote }}
     {{- end }}
+    - type: "internet"
+      internet:
+        domains:
+          - files.zd-dominik.opendesk.qa
+          - id.zd-dominik.opendesk.qa
+          - objectstore.zd-dominik.opendesk.qa
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/openproject-worker.yaml

@@ -7,7 +7,7 @@ SPDX-License-Identifier: Apache-2.0
 apiVersion: {{ .Values.clientIntents.apiVersion | quote }}
 kind: "ClientIntents"
 metadata:
-  name: "{{ include "common.names.fullname" . }}-openproject-worker"
+  name: "{{ include "common.names.fullname" . }}-openproject-worker-default"
   namespace: {{ .Values.apps.openproject.namespace | default .Release.Namespace | quote }}
   labels:
     {{- include "common.labels.standard" . | nindent 4 }}
@@ -19,7 +19,7 @@ metadata:
   {{- end }}
 spec:
   service:
-    name: "openproject-worker"
+    name: "openproject-worker-default"
   calls:
     {{- if .Values.apps.memcached.enabled }}
     - name: {{ printf "%s.%s" "memcached" (coalesce .Values.apps.memcached.namespace .Release.Namespace) | quote }}
@@ -27,8 +27,11 @@ spec:
     {{- if .Values.apps.postgresql.enabled }}
     - name: {{ printf "%s.%s" "postgresql" (coalesce .Values.apps.postgresql.namespace .Release.Namespace) | quote }}
     {{- end }}
-    {{- if .Values.apps.univentionManagementStack.enabled }}
-    - name: {{ printf "%s.%s" "ums-ldap-server" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
+    {{- if .Values.apps.postfix.enabled }}
+    - name: {{ printf "%s.%s" "postfix" (coalesce .Values.apps.postfix.namespace .Release.Namespace) | quote }}
+    {{- end }}
+    {{- if .Values.apps.nubus.enabled }}
+    - name: {{ printf "%s.%s" "ums-ldap-server-primary" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
     {{- end }}
 ...
 {{- end }}

charts/opendesk-otterize/templates/ClientIntents/ox-connector.yaml

@@ -21,13 +21,15 @@ spec:
   service:
     name: "ox-connector"
   calls:
-    {{- if .Values.apps.univentionManagementStack.enabled }}
-    - name: {{ printf "%s.%s" "ums-ldap-server" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
-    - name: {{ printf "%s.%s" "ums-ldap-server-primary" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
-    - name: {{ printf "%s.%s" "ums-ldap-server-secondary" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
-    {{- end }}
-    {{- if .Values.apps.univentionManagementStack.enabled }}
-    - name: {{ printf "%s.%s" "ums-ldap-notifier" (coalesce .Values.apps.univentionManagementStack.namespace .Release.Namespace) | quote }}
+    {{- if .Values.apps.nubus.enabled }}
+    - name: {{ printf "%s.%s" "ums-ldap-server-primary" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
+    - name: {{ printf "%s.%s" "ums-ldap-server-secondary" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
+    - name: {{ printf "%s.%s" "ums-ldap-notifier" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
+    - name: {{ printf "%s.%s" "ums-provisioning-api" (coalesce .Values.apps.nubus.namespace .Release.Namespace) | quote }}
     {{- end }}
+    - type: "internet"
+      internet:
+        domains:
+          - webmail.zd-dominik.opendesk.qa
 ...
 {{- end }}