drupal issueshttps://gitlab.cern.ch/groups/drupal/-/issues2024-03-28T09:28:54+01:00https://gitlab.cern.ch/drupal/paas/drupal-operations/-/issues/6Script to delete in batch from audit2024-03-28T09:28:54+01:00Carina AntunesScript to delete in batch from auditGiven ongoing audit to Drupal websites, part of the outcome will be lists of websites targeted for deletion.
Prepare 2 scripts:
- communication in advance, allowing users to open tickets to disagree - awaits final confirmation with web ...Given ongoing audit to Drupal websites, part of the outcome will be lists of websites targeted for deletion.
Prepare 2 scripts:
- communication in advance, allowing users to open tickets to disagree - awaits final confirmation with web team
- batch deletion of websites given input list. Depends on https://gitlab.cern.ch/drupal/paas/drupalsite-operator/-/issues/90Vasvi SharmaVasvi Sharmahttps://gitlab.cern.ch/drupal/paas/drupalsite-operator/-/issues/94SSO Proxy LoA52024-03-21T10:07:20+01:00Francisco Borges Aurindo BarrosSSO Proxy LoA5With setting SSO Proxy, LoA 5 must be set in order to deny access from non-CERN accounts.
On a technical level, the current SSO Proxy leverages the same OIDC credentials of the application layer to set the SSO flow.
This means that it s...With setting SSO Proxy, LoA 5 must be set in order to deny access from non-CERN accounts.
On a technical level, the current SSO Proxy leverages the same OIDC credentials of the application layer to set the SSO flow.
This means that it sets the same LoA that is set for the Drupal application, as well any uses all other set configurations (Redirect URI, etc.).
This means, we have to update an element in order to have the SSO Proxy with LoA5 without necessarily affecting all Drupal instances within the same namespace from having LoA5 enforced.
Possible approaches and consequences:
- Setting a new required role with LoA5
Pro: it is fully set as expected for all the instances with SSO Proxy on the namespace
Con: it will be enforced on applications of the same namespace which we don't want to have it set, example: primary instance would require LoA5 to login on the Drupal itself
- New OIDC registration
Not viable, as in the end it will share the same roles as the other(s) OIDC registrations for the same application
- Creating a new ApplicationRegistration on the same namespace
Not viable, as the AuthzOperator works with the expectation of just one ApplicationRegistration per namespace
- One shared SSO credential for all deployments, where the LoA5 is required
Pro: easy to update settings for all proxies from one endpoint
Con: Unknown if viable, Auth side might not support/handle a great number of OIDC Return URIs, or OIDC registrations, TBS with their end and validate
### Update
After discussing with Vincent(IAM), he suggested having on the SSO layer an enforcement of a role on the SSO-Proxy layer. This was already tested and validated as a viable solution (and preferred one).
Requirements in order to fit this model:
- Use the role `cern_registered` as it matches uniquely LoA5, and is guaranteed on new projects through the template and creation with a `BootstrapApplicationRole`.
- New variables on the deployment to have this role as required
We do not enforce `BootstrapApplicationRole` so users could, if aware of this behavior, remove such roles and have the action reverted. TBD how we can fully enforce on the Portal side.Francisco Borges Aurindo BarrosFrancisco Borges Aurindo Barroshttps://gitlab.cern.ch/drupal/paas/drupalsite-operator/-/issues/93SSO Proxy ignoring WebDav2024-02-14T15:23:12+01:00Francisco Borges Aurindo BarrosSSO Proxy ignoring WebDavWith the new feature of having websites behind SSO, webdav was as well covered since it is a subpath of a website.
Feature issue: https://gitlab.cern.ch/drupal/paas/drupalsite-operator/-/issues/92
The goal is to find a solution where SS...With the new feature of having websites behind SSO, webdav was as well covered since it is a subpath of a website.
Feature issue: https://gitlab.cern.ch/drupal/paas/drupalsite-operator/-/issues/92
The goal is to find a solution where SSO is still enforced on the website but not for webdav access.Francisco Borges Aurindo BarrosFrancisco Borges Aurindo Barroshttps://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/24Update all major dependencies2024-01-18T15:09:13+01:00Carina AntunesUpdate all major dependenciesFrancisco Borges Aurindo BarrosFrancisco Borges Aurindo Barroshttps://gitlab.cern.ch/drupal/paas/drupalsite-operator/-/issues/89Safe Deletion of projects/websites2024-01-18T15:06:28+01:00Francisco Borges Aurindo BarrosSafe Deletion of projects/websitesRight now, once we delete a website directly, the operator will trigger the removal of all necessary resources.
The proposal is to have the Operator do a final backup before processing the deletion, thus making it easier to revert or re...Right now, once we delete a website directly, the operator will trigger the removal of all necessary resources.
The proposal is to have the Operator do a final backup before processing the deletion, thus making it easier to revert or restore deletions.https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/20Drupal 10 preview2024-01-18T15:00:51+01:00Carina AntunesDrupal 10 previewFrancisco Borges Aurindo BarrosFrancisco Borges Aurindo Barroshttps://gitlab.cern.ch/drupal/paas/drupalsite-operator/-/issues/92Drupal SSO Proxy integration2024-01-11T15:36:08+01:00Francisco Borges Aurindo BarrosDrupal SSO Proxy integrationBased on https://paas.docs.cern.ch/4._CERN_Authentication/2-deploy-sso-proxy/ , we want to have a change of deployment in the presence of a label on the namespace (example: ªlabel: "drupal.cern.ch/sso-proxy:true").
The reason to use the...Based on https://paas.docs.cern.ch/4._CERN_Authentication/2-deploy-sso-proxy/ , we want to have a change of deployment in the presence of a label on the namespace (example: ªlabel: "drupal.cern.ch/sso-proxy:true").
The reason to use the namespace as the location for the toggle is due to the fact we do not want users to be able to use it, it should be reserved to infrastructure admins and this is the simplest place to set it without further changes.
The current Deployment leads with an HTTP request the following way:
```mermaid
flowchart LR
A[User] -->|Get access| B(Nginx)
B --> C[PHP-FPM]
```
Upon the presence of the label, it should change to:
```mermaid
flowchart LR
A[User] -->|Get access| D(SSO Proxy)
B --> C[PHP-FPM]
D --> B[Nginx]
```
To achieve this, the Operator must be changed in the following components:
- [x] Deployment, the new deployment must contain a new sidecar container with SSO Proxy correctly set
- [x] Route, the route must be updated to point to the new sidecar container instead of directly Nginx
The image used for the SSO Proxy should follow the approach of similar sidecar containers.Francisco Borges Aurindo BarrosFrancisco Borges Aurindo Barroshttps://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/27Integrate the new PlayWright tests to the pipeline2023-10-30T13:58:12+01:00Francisco Borges Aurindo BarrosIntegrate the new PlayWright tests to the pipelineAdd a new stage for frontend development:
- https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/blob/v9.5-2/.gitlab-ci.yml
The pipelines should be using an upstream Playwright image, and results should be available whenever r...Add a new stage for frontend development:
- https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/blob/v9.5-2/.gitlab-ci.yml
The pipelines should be using an upstream Playwright image, and results should be available whenever relevant through artifacts (on top of the logging, one artifact that should be exposed is the `report`, available through the `show-report` command).
The stage should be between current `test` and `deprovision` and the new stage (possibly named `functional-tests`) should leverage the instances created on the previous test (formerly known just as `tests`, which will require renaming).
Pipelines must fail if tests are not fulfilled but should still trigger the following stage (`deprovision`).
An example template is available on their docs: https://playwright.dev/docs/ci#gitlab-ciSimon Jean BelloSimon Jean Bellohttps://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/28Generate Playwright tests2023-10-30T13:57:58+01:00Francisco Borges Aurindo BarrosGenerate Playwright testsGoal is to create Playwright tests based on https://gitlab.cern.ch/web-team/intergration-tests/web-team-testing-suite/ .
There should be documentation on how to generate new tests using the interactive approach, as well documentation on...Goal is to create Playwright tests based on https://gitlab.cern.ch/web-team/intergration-tests/web-team-testing-suite/ .
There should be documentation on how to generate new tests using the interactive approach, as well documentation on how to execute these tests locally through the playwright container.Simon Jean BelloSimon Jean Bellohttps://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/14Bugfix: Max file upload2023-10-13T17:02:24+02:00Carina AntunesBugfix: Max file uploadAlthough PHP allows max file upload of 256MB and we also advertise it on the UI, the real current max file upload is 60MB due to [nginx `client_max_body_size` configuration](https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/b...Although PHP allows max file upload of 256MB and we also advertise it on the UI, the real current max file upload is 60MB due to [nginx `client_max_body_size` configuration](https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/blob/v9.5-1/images/nginx/config/nginx-server-default.conf#L141). (nginx then throws 413 Request Entity Too Large)
![Screenshot_2023-03-09_at_11.52.31](/uploads/bea105a9c3a1c7e75d85c3af90da545d/Screenshot_2023-03-09_at_11.52.31.png)
Related:
- https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/merge_requests/96
- https://gitlab.cern.ch/webservices/webframeworks-planning/-/issues/883
- Issue: INC3404041
- https://drupal-community.web.cern.ch/t/unable-to-upload-file/1394/19
Any reason for it to be this size?
Change back to 256MB or properly document limit is 60MB.Francisco Borges Aurindo BarrosFrancisco Borges Aurindo Barroshttps://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/26Front end automated testing for new images2023-09-22T16:42:37+02:00Francisco Borges Aurindo BarrosFront end automated testing for new images## Context
As we update modules manually and automatically, many things can go wrong. In order to be able to identify breaking changes to expected functionality, we will develop (using Playwright) a set of tests (initially inspired on t...## Context
As we update modules manually and automatically, many things can go wrong. In order to be able to identify breaking changes to expected functionality, we will develop (using Playwright) a set of tests (initially inspired on the web tests developed by the webteam) that will guarantee that the expected functionality is kept.
## Tasks
- [ ] Generate the tests based on [the ones developed by the webteam](https://gitlab.cern.ch/web-team/intergration-tests/web-team-testing-suite/)
- [ ] Document how to generate new tests with Playwright and provide instructions to add these tests
- [ ] Understand how Gitlab's CI works
- [ ] Integrate the new PlayWright tests into the Cern-drupal-distribution pipeline
- [ ] Present solution to the team(s)Simon Jean BelloSimon Jean Bellohttps://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/23Repo Dependency Dashboard for Renovate Bot2023-08-15T22:09:42+02:00Monica Jaqueline Iniguez MoncadaRepo Dependency Dashboard for Renovate BotThis issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
## Edited/Blocked
These updates have been manually edited so Renovat...This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
## Edited/Blocked
These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.
- [ ] <!-- rebase-branch=renovate-all-dependencies -->[Update all dependencies](!207) (`bower-asset/bootstrap`, `drupal/adminimal_theme`, `drupal/features`, `drupal/filelog`, `drupal/jquery_ui`, `drupal/jquery_ui_datepicker`, `drupal/jquery_ui_draggable`, `drupal/jquery_ui_droppable`, `drupal/migrate_plus`, `drupal/module_filter`, `drupal/panels`, `drupal/recaptcha`, `drupal/redis`, `drupal/ui_patterns_ds`, `drupal/ui_patterns_field_group`, `drupal/ui_patterns_layouts`, `drupal/ui_patterns_library`, `drupal/upgrade_status`, `drupal/userprotect`, `npm-asset/jquery`, `wikimedia/composer-merge-plugin`)
- [ ] <!-- rebase-branch=renovate-major-all-dependencies -->[Update all dependencies (major)](!208) (`drupal/captcha`, `drupal/jquery_ui_accordion`, `drupal/jquery_ui_datepicker`, `drupal/jquery_ui_draggable`, `drupal/jquery_ui_droppable`, `drupal/menu_force`, `drupal/metatag`, `drupal/migrate_plus`, `drupal/module_filter`, `drupal/scheduler`, `drupal/upgrade_status`, `drupal/views_slideshow`, `drush/drush`)
- [ ] <!-- rebase-branch=renovate-major-drupal-core -->[Update drupal core to v10 (major)](!209) (`drupal/core-composer-scaffold`, `drupal/core-project-message`, `drupal/core-recommended`)
---
### ⚠ Dependency Lookup Warnings ⚠
- Renovate failed to look up the following dependencies: `Failed to look up packagist package drupal/cern-adminimal-subtheme`, `Failed to look up packagist package drupal/cern-base-theme`, `Failed to look up packagist package drupal/cern-cds-media`, `Failed to look up packagist package drupal/cern-components`, `Failed to look up packagist package drupal/cern-dev-status`, `Failed to look up packagist package drupal/cern-display-formats`, `Failed to look up packagist package drupal/cern-full-html-format`, `Failed to look up packagist package drupal/cern-indico-feeds`, `Failed to look up packagist package drupal/cern-install-profiles`, `Failed to look up packagist package drupal/cern-integration`, `Failed to look up packagist package drupal/cern-landing-page`, `Failed to look up packagist package drupal/cern-ldap-api`, `Failed to look up packagist package drupal/cern-loading`, `Failed to look up packagist package drupal/cern-paragraph-types`, `Failed to look up packagist package drupal/cern-profile-displayname`, `Failed to look up packagist package drupal/cern-theme`, `Failed to look up packagist package drupal/cern-toolbar`, `Failed to look up packagist package drupal/cern-webcast-feeds`.
Files affected: `composer.json`
---
## Detected dependencies
<details><summary>composer</summary>
<blockquote>
<details><summary>composer.json</summary>
- `php >=8.1`
- `bower-asset/bootstrap ~5.1.0`
- `bower-asset/jquery-cycle ~3.0.0`
- `bower-asset/jquery-hoverintent ~1.10.0`
- `composer/installers ^2.2`
- `cweagans/composer-patches ^1.7`
- `dompdf/dompdf ^2.0`
- `drupal/admin_toolbar ^3.2`
- `drupal/adminimal_theme ~1.6.0`
- `drupal/allowed_formats ^2.0`
- `drupal/bootstrap ^3.25`
- `drupal/captcha ^1.9`
- `drupal/cern-adminimal-subtheme ~3.0.0`
- `drupal/cern-base-theme ~3.0.0`
- `drupal/cern-cds-media ~3.0.2`
- `drupal/cern-components ~3.0.14`
- `drupal/cern-dev-status ~3.0.0`
- `drupal/cern-display-formats ~3.0.0`
- `drupal/cern-full-html-format ~3.0.1`
- `drupal/cern-indico-feeds ~3.0.1`
- `drupal/cern-install-profiles 8.2.0`
- `drupal/cern-integration ~1.1.1`
- `drupal/cern-landing-page ~3.0.0`
- `drupal/cern-ldap-api ~1.0.0`
- `drupal/cern-loading ~3.0.0`
- `drupal/cern-paragraph-types ~3.0.0`
- `drupal/cern-profile-displayname ~3.0.0`
- `drupal/cern-theme ~3.0.0`
- `drupal/cern-toolbar ~3.1.0`
- `drupal/cern-webcast-feeds ~3.0.2`
- `drupal/ckeditor_font ^1.3`
- `drupal/codesnippet ^1.8`
- `drupal/color_field ^3.0`
- `drupal/colorbox ^2.0`
- `drupal/colorbutton ^1.4`
- `drupal/components ^3.0@beta`
- `drupal/config_update ~1.7.0`
- `drupal/content_access ^1.0@alpha`
- `drupal/cookieconsent ~1.6.0`
- `drupal/core-composer-scaffold 9.5.10`
- `drupal/core-project-message 9.5.10`
- `drupal/core-recommended 9.5.10`
- `drupal/ctools ^4.0`
- `drupal/devel ^5.0`
- `drupal/ds ^3.15`
- `drupal/easy_breadcrumb ^2.0`
- `drupal/entity_browser ^2.8`
- `drupal/entity_print ^2.7`
- `drupal/entity_reference_revisions ^1.10`
- `drupal/externalauth ^2.0`
- `drupal/extlink ^1.7`
- `drupal/facets ^2.0`
- `drupal/features ~3.12.0`
- `drupal/feeds ^3.0@beta`
- `drupal/feeds_ex ^1.0@beta`
- `drupal/fences ^3.0`
- `drupal/field_formatter_class ^1.6`
- `drupal/field_group ^3.3`
- `drupal/field_permissions ^1.2`
- `drupal/filefield_paths ~1.0@beta`
- `drupal/filelog ~2.0.2`
- `drupal/honeypot ^2.1`
- `drupal/hook_event_dispatcher ^3.3`
- `drupal/imagemagick ^3.4`
- `drupal/imce ^3.0`
- `drupal/jquery_ui ~1.4.0`
- `drupal/jquery_ui_accordion ~1.1.0`
- `drupal/jquery_ui_datepicker ~1.2.0`
- `drupal/jquery_ui_draggable ~1.2.0`
- `drupal/jquery_ui_droppable ~1.2.0`
- `drupal/mailsystem ^4.4`
- `drupal/matomo ^1.19`
- `drupal/memcache ^2.5`
- `drupal/menu_block ^1.8`
- `drupal/menu_breadcrumb ^1.16`
- `drupal/menu_force ~1.2.0`
- `drupal/metatag ^1.22`
- `drupal/migrate_plus ~5.2.0`
- `drupal/migrate_tools ^6.0`
- `drupal/migrate_upgrade ^4.0`
- `drupal/module_filter ~3.2.0`
- `drupal/node_view_permissions ^1.5`
- `drupal/openid_connect ^3.0@alpha`
- `drupal/panelbutton ^1.5`
- `drupal/panels ~4.6.0`
- `drupal/paragraphs ^1.15.0`
- `drupal/pathauto ^1.11`
- `drupal/permissions_by_term ^3.1`
- `drupal/r4032login ^2.2`
- `drupal/recaptcha ~3.0.0`
- `drupal/redirect ^1.8`
- `drupal/redis ~1.5.0`
- `drupal/require_login ^3.0`
- `drupal/rules ^3.0@alpha`
- `drupal/scheduler ^1.5`
- `drupal/search_api ^1.27`
- `drupal/smart_trim ^2.0`
- `drupal/token ^1.11`
- `drupal/twig_tweak ^3.2`
- `drupal/ui_patterns ^1.3`
- `drupal/ui_patterns_ds ~1.2.0`
- `drupal/ui_patterns_field_group ~1.2.0`
- `drupal/ui_patterns_layouts ~1.2.0`
- `drupal/ui_patterns_library ~1.2.0`
- `drupal/upgrade_status ~3.13.0`
- `drupal/userprotect ~1.1.0`
- `drupal/views_bulk_operations ^4.2`
- `drupal/views_slideshow ~4.8.0`
- `drupal/views_taxonomy_term_name_depth ^7.1`
- `drupal/viewsreference ^1.8`
- `drupal/webform ^6.1`
- `drush/drush ~10.6.2`
- `npm-asset/jquery ~3.6.0`
- `vlucas/phpdotenv ^5.5`
- `webflo/drupal-finder ~1.2.0`
- `wikimedia/composer-merge-plugin ~2.0.1`
- `zaporylie/composer-drupal-optimizations ^1.2`
</details>
</blockquote>
</details>
<details><summary>dockerfile</summary>
<blockquote>
<details><summary>images/Dockerfile-composerbuilder</summary>
</details>
<details><summary>images/Dockerfile-sitebuilder</summary>
</details>
</blockquote>
</details>
<details><summary>gitlabci</summary>
<blockquote>
<details><summary>.gitlab-ci.yml</summary>
- `gitlab-registry.cern.ch/paas-tools/openshift-client 4`
- `gitlab-registry.cern.ch/paas-tools/openshift-client 4`
- `gitlab-registry.cern.ch/paas-tools/openshift-client 4`
</details>
</blockquote>
</details>https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/22Repo Dependency Dashboard for Renovate Bot2023-08-11T10:31:37+02:00Monica Jaqueline Iniguez MoncadaRepo Dependency Dashboard for Renovate BotThis issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
## Edited/Blocked
These updates have been manually edited so Renovat...This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
## Edited/Blocked
These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.
- [ ] <!-- rebase-branch=renovate/all-dependencies -->[Update all dependencies](!203) (`bower-asset/bootstrap`, `drupal/adminimal_theme`, `drupal/features`, `drupal/filelog`, `drupal/jquery_ui`, `drupal/jquery_ui_datepicker`, `drupal/jquery_ui_draggable`, `drupal/jquery_ui_droppable`, `drupal/migrate_plus`, `drupal/module_filter`, `drupal/panels`, `drupal/recaptcha`, `drupal/redis`, `drupal/ui_patterns_ds`, `drupal/ui_patterns_field_group`, `drupal/ui_patterns_layouts`, `drupal/ui_patterns_library`, `drupal/upgrade_status`, `drupal/userprotect`, `npm-asset/jquery`, `wikimedia/composer-merge-plugin`)
- [ ] <!-- rebase-branch=renovate/major-all-dependencies -->[Update all dependencies (major)](!204) (`drupal/captcha`, `drupal/jquery_ui_accordion`, `drupal/jquery_ui_datepicker`, `drupal/jquery_ui_draggable`, `drupal/jquery_ui_droppable`, `drupal/menu_force`, `drupal/metatag`, `drupal/migrate_plus`, `drupal/module_filter`, `drupal/scheduler`, `drupal/upgrade_status`, `drupal/views_slideshow`, `drush/drush`)
---
### ⚠ Dependency Lookup Warnings ⚠
- Renovate failed to look up the following dependencies: `Failed to look up packagist package drupal/cern-adminimal-subtheme`, `Failed to look up packagist package drupal/cern-base-theme`, `Failed to look up packagist package drupal/cern-cds-media`, `Failed to look up packagist package drupal/cern-components`, `Failed to look up packagist package drupal/cern-dev-status`, `Failed to look up packagist package drupal/cern-display-formats`, `Failed to look up packagist package drupal/cern-full-html-format`, `Failed to look up packagist package drupal/cern-indico-feeds`, `Failed to look up packagist package drupal/cern-install-profiles`, `Failed to look up packagist package drupal/cern-integration`, `Failed to look up packagist package drupal/cern-landing-page`, `Failed to look up packagist package drupal/cern-ldap-api`, `Failed to look up packagist package drupal/cern-loading`, `Failed to look up packagist package drupal/cern-paragraph-types`, `Failed to look up packagist package drupal/cern-profile-displayname`, `Failed to look up packagist package drupal/cern-theme`, `Failed to look up packagist package drupal/cern-toolbar`, `Failed to look up packagist package drupal/cern-webcast-feeds`.
Files affected: `composer.json`
---
## Open
These updates have all been created already. Click a checkbox below to force a retry/rebase of any.
- [ ] <!-- rebase-branch=renovate/major-drupal-core -->[Update drupal core to v10 (major)](!205) (`drupal/core-composer-scaffold`, `drupal/core-project-message`, `drupal/core-recommended`)
## Detected dependencies
<details><summary>composer</summary>
<blockquote>
<details><summary>composer.json</summary>
- `php >=8.1`
- `bower-asset/bootstrap ~5.1.0`
- `bower-asset/jquery-cycle ~3.0.0`
- `bower-asset/jquery-hoverintent ~1.10.0`
- `composer/installers ^2.2`
- `cweagans/composer-patches ^1.7`
- `dompdf/dompdf ^2.0`
- `drupal/admin_toolbar ^3.2`
- `drupal/adminimal_theme ~1.6.0`
- `drupal/allowed_formats ^2.0`
- `drupal/bootstrap ^3.25`
- `drupal/captcha ^1.9`
- `drupal/cern-adminimal-subtheme ~3.0.0`
- `drupal/cern-base-theme ~3.0.0`
- `drupal/cern-cds-media ~3.0.2`
- `drupal/cern-components ~3.0.14`
- `drupal/cern-dev-status ~3.0.0`
- `drupal/cern-display-formats ~3.0.0`
- `drupal/cern-full-html-format ~3.0.1`
- `drupal/cern-indico-feeds ~3.0.1`
- `drupal/cern-install-profiles 8.2.0`
- `drupal/cern-integration ~1.1.1`
- `drupal/cern-landing-page ~3.0.0`
- `drupal/cern-ldap-api ~1.0.0`
- `drupal/cern-loading ~3.0.0`
- `drupal/cern-paragraph-types ~3.0.0`
- `drupal/cern-profile-displayname ~3.0.0`
- `drupal/cern-theme ~3.0.0`
- `drupal/cern-toolbar ~3.1.0`
- `drupal/cern-webcast-feeds ~3.0.2`
- `drupal/ckeditor_font ^1.3`
- `drupal/codesnippet ^1.8`
- `drupal/color_field ^3.0`
- `drupal/colorbox ^2.0`
- `drupal/colorbutton ^1.4`
- `drupal/components ^3.0@beta`
- `drupal/config_update ~1.7.0`
- `drupal/content_access ^1.0@alpha`
- `drupal/cookieconsent ~1.6.0`
- `drupal/core-composer-scaffold 9.5.10`
- `drupal/core-project-message 9.5.10`
- `drupal/core-recommended 9.5.10`
- `drupal/ctools ^4.0`
- `drupal/devel ^5.0`
- `drupal/ds ^3.15`
- `drupal/easy_breadcrumb ^2.0`
- `drupal/entity_browser ^2.8`
- `drupal/entity_print ^2.7`
- `drupal/entity_reference_revisions ^1.10`
- `drupal/externalauth ^2.0`
- `drupal/extlink ^1.7`
- `drupal/facets ^2.0`
- `drupal/features ~3.12.0`
- `drupal/feeds ^3.0@beta`
- `drupal/feeds_ex ^1.0@beta`
- `drupal/fences ^3.0`
- `drupal/field_formatter_class ^1.6`
- `drupal/field_group ^3.3`
- `drupal/field_permissions ^1.2`
- `drupal/filefield_paths ~1.0@beta`
- `drupal/filelog ~2.0.2`
- `drupal/honeypot ^2.1`
- `drupal/hook_event_dispatcher ^3.3`
- `drupal/imagemagick ^3.4`
- `drupal/imce ^3.0`
- `drupal/jquery_ui ~1.4.0`
- `drupal/jquery_ui_accordion ~1.1.0`
- `drupal/jquery_ui_datepicker ~1.2.0`
- `drupal/jquery_ui_draggable ~1.2.0`
- `drupal/jquery_ui_droppable ~1.2.0`
- `drupal/mailsystem ^4.4`
- `drupal/matomo ^1.19`
- `drupal/memcache ^2.5`
- `drupal/menu_block ^1.8`
- `drupal/menu_breadcrumb ^1.16`
- `drupal/menu_force ~1.2.0`
- `drupal/metatag ^1.22`
- `drupal/migrate_plus ~5.2.0`
- `drupal/migrate_tools ^6.0`
- `drupal/migrate_upgrade ^4.0`
- `drupal/module_filter ~3.2.0`
- `drupal/node_view_permissions ^1.5`
- `drupal/openid_connect ^3.0@alpha`
- `drupal/panelbutton ^1.5`
- `drupal/panels ~4.6.0`
- `drupal/paragraphs ^1.15.0`
- `drupal/pathauto ^1.11`
- `drupal/permissions_by_term ^3.1`
- `drupal/r4032login ^2.2`
- `drupal/recaptcha ~3.0.0`
- `drupal/redirect ^1.8`
- `drupal/redis ~1.5.0`
- `drupal/require_login ^3.0`
- `drupal/rules ^3.0@alpha`
- `drupal/scheduler ^1.5`
- `drupal/search_api ^1.27`
- `drupal/smart_trim ^2.0`
- `drupal/token ^1.11`
- `drupal/twig_tweak ^3.2`
- `drupal/ui_patterns ^1.3`
- `drupal/ui_patterns_ds ~1.2.0`
- `drupal/ui_patterns_field_group ~1.2.0`
- `drupal/ui_patterns_layouts ~1.2.0`
- `drupal/ui_patterns_library ~1.2.0`
- `drupal/upgrade_status ~3.13.0`
- `drupal/userprotect ~1.1.0`
- `drupal/views_bulk_operations ^4.2`
- `drupal/views_slideshow ~4.8.0`
- `drupal/views_taxonomy_term_name_depth ^7.1`
- `drupal/viewsreference ^1.8`
- `drupal/webform ^6.1`
- `drush/drush ~10.6.2`
- `npm-asset/jquery ~3.6.0`
- `vlucas/phpdotenv ^5.5`
- `webflo/drupal-finder ~1.2.0`
- `wikimedia/composer-merge-plugin ~2.0.1`
- `zaporylie/composer-drupal-optimizations ^1.2`
</details>
</blockquote>
</details>
<details><summary>dockerfile</summary>
<blockquote>
<details><summary>images/Dockerfile-composerbuilder</summary>
</details>
<details><summary>images/Dockerfile-sitebuilder</summary>
</details>
</blockquote>
</details>
<details><summary>gitlabci</summary>
<blockquote>
<details><summary>.gitlab-ci.yml</summary>
- `gitlab-registry.cern.ch/paas-tools/openshift-client 4`
- `gitlab-registry.cern.ch/paas-tools/openshift-client 4`
- `gitlab-registry.cern.ch/paas-tools/openshift-client 4`
</details>
</blockquote>
</details>https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/19Release 9.5.102023-08-04T11:14:39+02:00Carina AntunesRelease 9.5.10Included changes:
Core Versions:
- https://www.drupal.org/project/drupal/releases/9.5.8
- https://www.drupal.org/project/drupal/releases/9.5.9
- https://www.drupal.org/project/drupal/releases/9.5.10
Also included:
Infrastructure...Included changes:
Core Versions:
- https://www.drupal.org/project/drupal/releases/9.5.8
- https://www.drupal.org/project/drupal/releases/9.5.9
- https://www.drupal.org/project/drupal/releases/9.5.10
Also included:
Infrastructure more resilient to Container Registry downtime
Fixed support for branches on composer configurations
Fixed SSO Logout, now logout will trigger full session logout
Relevant [OTG0078608](https://cern.service-now.com/service-portal?id=outage&n=OTG0078608)Francisco Borges Aurindo BarrosFrancisco Borges Aurindo Barroshttps://gitlab.cern.ch/drupal/paas/drupal-operations/-/issues/4Decomission old development websites hosted on the Physical infrastructure2023-07-27T11:41:39+02:00Francisco Borges Aurindo BarrosDecomission old development websites hosted on the Physical infrastructureProcess to decommission development websites from the drupal8 machines.
This procedure is going to be done to fulfill [OTG0077555](https://cern.service-now.com/service-portal?id=outage&n=OTG0077555).
### Operation
```bash
# Under the ...Process to decommission development websites from the drupal8 machines.
This procedure is going to be done to fulfill [OTG0077555](https://cern.service-now.com/service-portal?id=outage&n=OTG0077555).
### Operation
```bash
# Under the vhosts folder
cat affected-websites.txt | xargs -l bash -c 'mv $0.conf ../old-vhosts.d/'
```Francisco Borges Aurindo BarrosFrancisco Borges Aurindo Barroshttps://gitlab.cern.ch/drupal/paas/drupal-operations/-/issues/5Upgrade of Drupal SSO2023-07-11T12:32:41+02:00Francisco Borges Aurindo BarrosUpgrade of Drupal SSOWe are upgrading the OIDC module with the latest version and patch: https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/merge_requests/174 .
Now the goal is to release this patch to all users, the version is a new one `v9.5-2`...We are upgrading the OIDC module with the latest version and patch: https://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/merge_requests/174 .
Now the goal is to release this patch to all users, the version is a new one `v9.5-2`.
A script needs to be done that processes the website.Vineet Reddy RajulaFrancisco Borges Aurindo BarrosVineet Reddy Rajulahttps://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/18Have CI push updates to production2023-06-27T12:42:40+02:00Francisco Borges Aurindo BarrosHave CI push updates to productionProposal:
On cern-drupal-distribution, the CI can have one branch that updates the RELEASE of a version to the latest one (the one from the commit) to the general websites (non critical).
A second branch can be created for the same pur...Proposal:
On cern-drupal-distribution, the CI can have one branch that updates the RELEASE of a version to the latest one (the one from the commit) to the general websites (non critical).
A second branch can be created for the same purpose, but to push changes to critical websites.Francisco Borges Aurindo BarrosFrancisco Borges Aurindo Barroshttps://gitlab.cern.ch/drupal/paas/cern-drupal-distribution/-/issues/16Fix clone site provision job2023-06-15T11:01:03+02:00Carina AntunesFix clone site provision jobhttps://gitlab.cern.ch/drupal/paas/dmi/-/issues/2Bump PHP-FPM version2023-06-01T09:56:53+02:00Ismael Posada TroboBump PHP-FPM versionAccording to https://www.drupal.org/docs/system-requirements/php-requirements:
- As of 8.8.3, PHP version = 7.4According to https://www.drupal.org/docs/system-requirements/php-requirements:
- As of 8.8.3, PHP version = 7.4Ismael Posada TroboIsmael Posada Trobohttps://gitlab.cern.ch/drupal/paas/dmi/-/issues/1Wrong order of post-hook actions2023-06-01T09:56:38+02:00Ismael Posada TroboWrong order of post-hook actionsCheck https://gitlab.cern.ch/drupal/paas/dmi/-/blob/master/images/php-fpm/hooks/post-hook.sh#L12-19
Must be:
- drush -y cim
- drush -y updb
- drush -y crCheck https://gitlab.cern.ch/drupal/paas/dmi/-/blob/master/images/php-fpm/hooks/post-hook.sh#L12-19
Must be:
- drush -y cim
- drush -y updb
- drush -y crIsmael Posada TroboIsmael Posada Trobo