chore(release): 1.14.1 [skip ci]

## [1.14.1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.14.0...v1.14.1) (2025-10-21)

### Bug Fixes

* **keycloak:** upgrade Keycloak to 26.3.5 ([c3a83ad](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c3a83ad3abecdd1f1000205a2aa5a63e471a3d2e)), closes [univention/dev/internal/team-nubus#1464](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1464)

chore(release): 1.14.0 [skip ci]

## [1.14.0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.13.1...v1.14.0) (2025-09-18)

### Features

* Activate OIDC in the portal ([3568f9f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3568f9f9b2fd012a3051e578c1dd0c65b36008ac)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)
* **helm:** Support OIDC auth for portal <-> UDM communication ([489ac5e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/489ac5e4f943f7a62abfbbbeb5f93b20b2ed60f5)), closes [univention/dev/internal/dev-issues/dev-incidents#138](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/138)
* setup shared session storage for umc ([9bbc032](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/9bbc032f798e6799b347aa62ade3e5ac2080cc82)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)

### Bug Fixes

* **ci:** fix bitnami images ([b4ac38d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b4ac38da32ac656b8b8e61f82b158fc755a80b23)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* **ci:** fix deployment with external dependencies ([5aed1ec](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/5aed1ec5ca14dcfd92c5397bcb64cf4621c838e7)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)
* **deps:** Update dependency univention/dev/nubus-for-k8s/common-ci to v1.44.6 ([24aa100](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/24aa1009acdd815ec6560b2269128166dd78ab39)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* **e2e-tests:** Make sure DEPLOY_SUBDOMAIN is a valid domain name and does not end with a '-' ([901080d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/901080df76dd6c56e1fb86d00592e478120d4a6b)), closes [univention/dev/internal/dev-issues/dev-incidents#138](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/138)
* **keycloak-bootstrap:** remove force flag from keycloak-bootstrap ([6b0de0d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6b0de0d2f7e54e28bb19bfe2c0b8b70a87566831)), closes [univention/dev/internal/dev-issues/dev-incidents#158](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/158)
* **portal-extension:** OIDC tile on upgrade from SAML ([2d5ffdc](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2d5ffdce42f0882503ee76155704c524d54aedb3)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)
* **portal:** Don't show portal tiles in left sidebar ([99a2200](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/99a22002cce590a4aa14f470cc6531e840387c64)), closes [univention/dev/internal/team-nubus#1416](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1416)
* Remove the dynamic part of the UMC OIDC Keycloak client name to make it static and predictable ([5fd1fa9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/5fd1fa95f2f69031942e78d751027b538fbdb2c6)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)
* Revert "test: temporary change of testrunner" ([af81219](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/af8121998cc761c0396d2cd8e545db0127854d06)), closes [univention/dev/internal/team-nubus#1435](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1435)

chore(release): 1.13.1 [skip ci]

## [1.13.1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.13.0...v1.13.1) (2025-09-04)

### Bug Fixes

* **deps:** update nubus subcharts ([efc047b](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/efc047b079df698c76de19a3477908203e8a0b73)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)
* Downgrade keycloak-bootstrap to version 0.15.3 ([c55df86](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c55df86a011a6cbcdb8fa1e68fe49c414c952bcb)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)
* **portal-frontend:** Prompt for login when refreshing the SAML session fails due to NoPassive ([6a8061c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6a8061c41bea90328ceb872b74fb998ee39c5eff)), closes [univention/dev/internal/team-nubus#1401](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1401)
* **provisioning:** Bump provisioning to integrate the nats reconnect fix ([a124963](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a124963824990a3fe222de29dfa42ebfb6d0fd4d)), closes [univention/dev/internal/team-nubus#1383](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1383)
* Remove default for "keycloakTwofaGroup" ([80146fe](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/80146fe2cd9e915f7fd7b705e0da0d5742667278)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)
* remove unused values from stack-data template context ([e5e6ba4](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/e5e6ba4a3b7f27216c875377daa834be5eb346e8)), closes [univention/dev/internal/team-nubus#1396](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1396)
* **secrets:** Add some existing configuration options to helm default values for documentation purposes ([123a4e1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/123a4e11dda239e4f193a87a56ebdbc5d26d6547)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **secrets:** Update example values and helm unittests ([3891af7](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3891af79a899d4a9fc2eff35b0ddaedefa859eea)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* Update provisioning to version 0.60.9 ([868793a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/868793ae272afed9db6f78ebef1b46cdc2c1836e)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)
* Upgrade keycloak-bootstrap to version 0.16.3 ([2bd1e9a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2bd1e9ae9a125ad891501d9022edd7628268626e)), closes [univention/dev/internal/team-nubus#1385](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1385)

chore(release): 1.13.0 [skip ci]

## [1.13.0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.12.0...v1.13.0) (2025-08-27)

### Features

* **ci:** left-sidebar: enable concept of executing test for feature toggles ([72aea15](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/72aea15d2c455bfc1888d2a24de4a024cd321e8c)), closes [univention/dev/internal/team-nubus#1122](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1122)
* **portal:** integration of new sidebar (controlled by feature toggle, default: off) ([d793cbe](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/d793cbef38af8732f7478d1d073cc7200a73fd69)), closes [univention/dev/internal/team-nubus#1231](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1231)
* update charts for configurable centralnav ([8180a3f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/8180a3fdb52b96fae82d16b58480861baba94b5d)), closes [univention/dev/internal/team-nubus#1301](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1301)
* upgrade bitnami charts ([6325ae0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6325ae08c130278d4fa137af5d9b4a2c045f62ac)), closes [univention/dev/internal/team-nubus#1406](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1406)

### Bug Fixes

* Don't template postgres or minio secrets if the components are disabled ([bbd7c54](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/bbd7c54977b4890030f866fefaa083a59a9839e0)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **keycloak-bootstrap:** Update keyloak-bootstrap to fix yaml parsing bug ([f967a0a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/f967a0a43daa0a73d5e7a2f06b87b9d6d4654c1e)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **keycloak:** Use the same secret for the Keycloak admin credentials everywhere ([b0a4fc6](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b0a4fc6788199010fb16f64c56ae5c2e6cd2c8f3)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **nats:** bump nats chart to solve a template issue ([dbfb8cb](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/dbfb8cb7e8e9d8342f6a042e3470c6f095b9cb8e)), closes [univention/dev/internal/team-nubus#1382](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1382)
* **portal-frontend:** update version of portal 0.75.0 ([a88000f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a88000fd7a56c233891d7268a95c787577698b2a)), closes [univention/dev/projects/portal#741](https://git.knut.univention.de/univention/dev/projects/portal/issues/741)
* **provisioning:** atomic subscription to NATS ([b13142a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b13142aa684db57f2bbf1baa9f6fd5c8daa78ff4)), closes [univention/dev/internal/team-nubus#1349](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1349)
* **provisioning:** improve error handling in the provisioning api. ([4bd2217](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4bd221766b72df0ee97d5c16aec0e9037009ac94)), closes [univention/dev/projects/provisioning#78](https://git.knut.univention.de/univention/dev/projects/provisioning/issues/78)
* Remove unused secrets ([8f877ba](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/8f877ba61b441cbe505fb89e44a24d3467cd6f3b)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **secrets:** Already documented custom-secret-values ([06ef5db](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/06ef5dbfe2d86ba4f79b13c8ce33075cd31c6ebe)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **udm-listener:** fix initialization of UDM listener ([945adb9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/945adb90b1972a7170bab9a74a002aec571ade52)), closes [univention/dev/internal/team-nubus#1372](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1372)
* **udm-listener:** Remove unused secret from listener ([6acd1b8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6acd1b887f7409a8dad5faa341cc9359f6d762a0)), closes [univention/dev/internal/team-nubus#989](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/989)
* **umc-server:** Make podManagementPolicy configurable ([1e517b6](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/1e517b62fdd9ed1842a041d00fa851a24afff22b)), closes [univention/dev/internal/team-nubus#1363](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1363)

chore(release): 1.12.0 [skip ci]

## [1.12.0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.11.2...v1.12.0) (2025-08-01)

### Features

* **2fa:** add integration tests for the 2fa helpdesk ([dc90179](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/dc90179b788020100ed761a0c4a8e541c70508ef)), closes [univention/dev/internal/team-nubus#1218](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1218)
* add frontchannel-logout to 2fa helpdesk ([e846b1c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/e846b1c2088765a3a362c41da934b19fc8512914)), closes [univention/dev/internal/team-nubus#1238](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1238)
* **portal-frontend:** Allow disabling "me" api endpoint loading ([83f746b](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/83f746b325ddcbaedc47b2d69847116d663648a8)), closes [univention/dev/internal/team-nubus#1358](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1358)
* **portal-frontend:** update version of portal 0.71.0 ([fa38051](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/fa3805119ef37f35a41cc1dd8186c21bf214ad87)), closes [univention/dev/projects/portal#740](https://git.knut.univention.de/univention/dev/projects/portal/issues/740)
* update ucs-base to 5.2.2-build.20250714 ([ca98e5f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ca98e5fdc7c77278deb4845446788d82e57d8d09)), closes [univention/dev/internal/team-nubus#1320](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1320)

### Bug Fixes

* adjust default name of the 2FA Users group ([6775299](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/6775299964aa27318038425dc597ef050fd7c3a6)), closes [univention/dev/internal/team-nubus#1347](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1347)
* bump 2fa helpdesk ([eae6944](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/eae694415365c17bb9cf45163cd43ee555234142)), closes [univention/dev/internal/team-nubus#1237](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1237)
* Bump systemExtensions to their latest versions ([34af226](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/34af226a5bd9cd01f6acb6f4ecc764f69754d63c)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* enable 2fa helpdesk admin helpdesk by default ([a196fa9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a196fa9081429cfeda035d27b8ee7df331e9feaf)), closes [univention/dev/internal/team-nubus#1347](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1347)
* enable 2fa self-service in CI ([cfff20d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/cfff20db292932e58c175602fc8860f5d3b299a0)), closes [univention/dev/internal/team-nubus#1347](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1347)
* fix maintainability issues discovered by sonarqube ([5706775](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/57067757ca8723a6648ca7c4adc39602bc780ff8)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* **helm:** Add new provisioning prefill retry configuration parameters ([27c4915](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/27c49152860887dafa1f865745df51887ba7b676)), closes [univention/dev/internal/team-nubus#1357](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1357)
* **helm:** Add new provisioning prefill retry configuration parameters ([2cb16c8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2cb16c818c3251b89b4ebb6dae5254afb6b2352b)), closes [univention/dev/internal/team-nubus#1357](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1357)
* **ingress:** remove wrongly used annotation. ([420b27f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/420b27f886daa5e7b20df583c0b48e1aa8fbf2e6)), closes [univention/dev/internal/team-nubus#1328](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1328)
* keycloak-bootstrap failing on upgrades ([9062ba9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/9062ba9957aebb79225695a5e33589a722b6bde1)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)
* **keycloak-helm:** Upgrade keycloak to 26.3.1 version. ([d362488](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/d3624880db7574b6ba93e01f73b605cf31612274)), closes [univention/dev/internal/team-nubus#1355](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1355)
* **keycloak:** Template resources in initContainers ([38a4ee8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/38a4ee841cd6a9a3593a6fc3763da79ba4c1d428)), closes [univention/dev/internal/team-nubus#1356](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1356)
* **ldap-server:** Allow more than 8 ldap secondaries ([ec83f0c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ec83f0c54ae365493a72869aea38408c61794779)), closes [univention/dev/internal/team-nubus#1353](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1353)
* **portal-frontend:** Load newsfeed after user is logged in ([4788ffc](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4788ffc36fb6603539bcbecc346f3cbb1cd65fea)), closes [univention/dev/internal/team-nubus#1359](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1359)
* **provisioning:** bump provisioning version to include the NATS upgrade ([55b3443](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/55b344300a41022bdd5f1c7242621b459c93df6a)), closes [univention/dev/internal/team-nubus#1350](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1350)
* remove leading slash from Keycloak group ([698d3c4](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/698d3c468907be322114c653d89b00bb2cd62f8a)), closes [univention/dev/internal/team-nubus#1343](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1343)
* subcharts ([c8a9c3c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c8a9c3ce4c2a3938df69159541568f77676d994e)), closes [univention/dev/internal/team-nubus#1320](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1320)
* **twofa-helpdesk:** Bump version ([4a02a8e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4a02a8e0e8e5273de0ef8cb5a2bed31f4b3ea28c)), closes [univention/dev/internal/team-nubus#1241](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1241)
* **twofa-helpdesk:** Helm chart best practices ([0b771d5](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/0b771d5ea2e13374fc14fbb22d10e2973ce4e6fe)), closes [univention/dev/internal/team-nubus#1240](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1240)
* **twofa-helpdesk:** Rename provisioning to keycloakBootstrap ([b07783f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b07783fa40be07bde840cf209f15944a9f53b7de)), closes [univention/dev/internal/team-nubus#1356](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1356)
* **univention-portal:** Security fixes ([4d7fb6e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4d7fb6e23b8108847f35b4d01006eac899dc6d83)), closes [univention/dev/internal/team-nubus#1221](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1221)
* use final version of 2fa-extensions ([6229884](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/62298844fcebb200f55aa1955bed044a92da1bf1)), closes [#0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/issues/0)

chore(release): 1.11.2 [skip ci]

## [1.11.2](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.11.1...v1.11.2) (2025-07-10)

### Bug Fixes

* add wait-for-nats init container to udm-listener ([ff72c41](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ff72c41fdab34f021f8444b043bb01d127e9fafb)), closes [univention/dev/internal/dev-issues/dev-incidents#149](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/149)
* **udm-listener:** retry to interact with NATS on connection erros and terminate if not possible ([c607046](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c607046a228525a8d6819176646ed43b4fc57cd6)), closes [univention/dev/internal/dev-issues/dev-incidents#149](https://git.knut.univention.de/univention/dev/internal/dev-issues/dev-incidents/issues/149)

chore(release): 1.11.1 [skip ci]

## [1.11.1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.11.0...v1.11.1) (2025-07-03)

### Bug Fixes

* **udm-rest-api:** Update version of udm-rest-api to 0.37.1 ([54835ce](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/54835ce76ee5b2f475d848a3a57035892f4f0ca2)), closes [univention/dev/internal/team-nubus#1303](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1303)

chore(release): 1.11.0 [skip ci]

## [1.11.0](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/compare/v1.10.2...v1.11.0) (2025-06-30)

### Features

* **2fa:** refactor secret handling for keycloak secrets ([325e34e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/325e34e86be9cb2403510f7b4297c2e8a36605f3)), closes [univention/dev/internal/team-nubus#1219](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1219)
* **2fa:** Use portal theme and custom css ([eca45d8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/eca45d81bba1f7446b43238b3a10ccdd70d5cfc3)), closes [univention/dev/internal/team-nubus#1242](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1242)
* add wait-for-ldap init container to update-uOID job ([bb51df9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/bb51df9d673dc7ab320125a3491383af68a812ca)), closes [univention/dev/internal/team-nubus#1303](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1303)
* Adjust memcached configuration for the umc server ([30cacd1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/30cacd18f9a3da0e49ae298643e4bc39708e0762))
* Adjust NOTES.txt to refer to the correct secret name for Administrator ([f52bf86](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/f52bf862e790e191b9208372d9b1722ba74f2612))
* Adjust nubus values related to portal components ([2584afb](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2584afbc40b285f464250d8d84607872151a63f7))
* Adjust secret name of ldap-server to "ldap-server-admin" ([08741f1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/08741f1ba72dd7ab9ae9d5255b62f7df348cf452)), closes [univention/dev/internal/team-nubus#892](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/892)
* Configure "postgresql.connection.host" via global values ([7e74661](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/7e74661ee40a0eeb447c7889db7647394f7db305))
* Configure the UMC connection for the selfservice consumer ([da47c42](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/da47c4204a10c4335dea0ca3b43376eda9250b05))
* Consolidate the secret configuration related to Nats ([bda0150](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/bda0150b2ed982b8867dd22f99878abac992b4fa))
* Consolidate the secret configuration related to provisioning api ([c9c74ac](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c9c74ac75e49ea44c1c75015791ee86f92fe1e08))
* helm best practices for scim-server ([135a09a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/135a09a177fa4598f5ff21ed1a6e22a56ab020e0)), closes [univention/dev/internal/team-nubus#1197](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1197)
* **keycloak-extension:** email login notice contains configurable timezone ([a96d558](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a96d55822a3edb6ebe864916c4fb8b9f1ee0adc0)), closes [univention/dev/internal/team-nubus#1163](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1163)
* **nubus:** Add scim-server ([32654dc](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/32654dcd9b5b5aeb1a686f21b86be6b186cf0a3d)), closes [univention/dev/internal/team-nubus#1112](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1112)
* Redirect ldap admin secret configuration through global values ([fbf6dde](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/fbf6dde373dd7e8e251263158a87aebcc4f956cb)), closes [univention/dev/internal/team-nubus#892](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/892)
* Remove "nubusLdapServer.ldapServer.auth.*" ([2b67ece](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2b67eced32ef557a575839ea7a34797350ed696c))
* Remove "nubusUdmListener.config.debugLevel" ([800a5fe](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/800a5fea135f4f0efa7864c2dfe116cfa6c309d2))
* Remove central navigation related secret from nubusSecrets ([ec19e0a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ec19e0a7a6ba8e68ef7cc58b4ff2583d27f238bc))
* Remove log level configuration of umc server ([1c225a1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/1c225a112eaf59a48d3f3b99626364865ebaee00))
* Remove secrets from nubusSecrets.yaml which are not needed anymore ([52a0025](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/52a00258cff3d484b917c041521e0f87efa381ff))
* Remove SMTP related configuration for umc-server ([3fd690d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3fd690d7056cb8489715443d47fe885c81379155))
* Remove the configuration "global.ldap.auth.cnAdmin" ([5affacd](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/5affacd183800c774a2ec63787d430051edad519))
* Remove the ldap admin password from the secret generation via nubusSecrets.yaml ([4427525](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/44275257cadd5046d8a01e5cee7b5d9be3ce7ac4))
* Remove the stack data configuration for initial passwords ([f7eff18](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/f7eff18e699f64f115095fed38046913af356172))
* Remove the value "nubusProvisioning.prefill.config.LOG_LEVEL" ([4a6b45a](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4a6b45abba09eabba738704e5be6539dd5f5fe18))
* Remove the value "nubusProvisioning.prefill.nats.connection" ([0253772](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/0253772c7e9021078e9a9eceb67ee3f0f4c57d9e))
* Remove the value "nubusProvisioning.udmTransformer.config.LOG_LEVEL" ([ef3b2f9](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ef3b2f97663e0e597558292fde8f7d48f940913a))
* Remove the value "nubusUdmListener.ldap.connection.*" ([aec0305](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/aec0305baf34b5d48247dddb8a5d2395ade45088))
* Remove UCR configuration "global.configUcr.apache2.loglevel" ([7b63dc5](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/7b63dc53342e9c4d901f53105ee9b739f6bc69a5))
* Remove value "nubusProvisioning.api.nats.connection.*" ([c8af896](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c8af8969bb70befaf5f465959d5d39f9a76738c7))
* Remove value "nubusProvisioning.dispatcher.config.LOG_LEVEL" ([ed52409](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ed524096ebe598bd36d709b398b3beff1e3606f8))
* Remove value "nubusProvisioning.dispatcher.nats.connection" ([eadf65e](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/eadf65efb4b3b1dd047c52b7131e26170256be64))
* Remove value "nubusSelfServiceConsumer.nath.auth.password" ([d43531d](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/d43531da850a56a50a606b481af2ac1646d35b3c))
* **scim-server:** Create group and make sure it has access to the scim-api ([cae7610](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/cae76108abbdeea96ffb163933c6f1e8c73ef864)), closes [univention/dev/internal/team-nubus#1151](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1151)
* **scim:** Bump version of scim-server ([793c414](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/793c41424bcf61b18a1eca19107f05372e87402b)), closes [univention/dev/internal/team-nubus#1151](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1151)
* test nubus with external dependencies ([b7b46d2](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b7b46d27cf27e56b75db56819d6b1003845fa0d0)), closes [univention/dev/internal/team-nubus#950](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/950) [univention/dev/internal/team-nubus#950](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/950)
* **twofa-helpdesk:** first integration into nubus (still disabled) ([bd79981](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/bd79981a4d2585673d353a4e7a0c7357de57313c)), closes [univention/dev/internal/team-nubus#1212](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1212)
* Update generated files ([2acaf66](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2acaf6678bd9e9f1024a056672900f014f50a0a3))
* Update ldap-server and ldap-notifier to version 0.43.0 ([2d112f6](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2d112f677d3a1d2fd998678ea66b2124d6d611ee))
* Update license import version to 0.4.0 ([4ee5370](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/4ee5370b77350695b0febb7a46b0c738a4a99010))
* Update nubus-common to version 0.21.0 ([1eca171](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/1eca171cdd15b6112a9ae00808924b87b741d308))
* Update portal components to version 0.70.0 ([8d46e01](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/8d46e01d29291f10193c621500a0db87f607df0c))
* Update provisioning and udm-listener to version 0.56.0 ([d5fbf9c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/d5fbf9cb41d497be2d08bba0972e9b80c301bbe1))
* update scim-server chart ([7932bc8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/7932bc884966938406ffc66d3f5b1649676bfedc)), closes [univention/dev/internal/team-nubus#1226](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1226)
* Update selfservice-consumer to version 0.17.0 ([ecceac4](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ecceac498e001ec871cd9077257ef34755018804))
* Update stack-data-ums to version 0.95.0 ([7578982](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/757898206ce16e64763eced0c6ba120600adea21))
* update ucs-base-image to 0.18.1-build-2025-05-29 ([d8d2ff8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/d8d2ff8703ebbf2dbd401859c281f44a6a639699)), closes [univention/dev/internal/team-nubus#1220](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1220)
* Update udm-rest-api to version 0.36.0 ([bbedc8f](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/bbedc8f09f11efedbb37524f675ec0e61c10ae2d))
* Update umc-gateway and umc-server to version 0.47.0 ([8808303](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/8808303ad25a3f030d86784231c59e21ee4d4e90))
* upgrade stack-data-ums ([3b46249](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3b462490d5bcb52ff01eab52b7babaff941fe48f)), closes [univention/dev/internal/team-nubus#953](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/953)
* upgrade stack-data-ums ([ffda77c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/ffda77c0bd2b9d02485058c915449376c138ad6e)), closes [univention/dev/internal/team-nubus#953](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/953)
* Use the generated secret from the ldap server subchart ([63e0e47](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/63e0e4705ffb7f728dc41e4eb4c7936c997c011c))

### Bug Fixes

* 2fa helpdesk tiles ([f9b6832](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/f9b6832917601f1fff234b32071d476851e7ab18)), closes [univention/dev/internal/team-nubus#1211](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1211)
* **2fa-frontend:** use univention nginx image ([3b772d4](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/3b772d47c34376e03f0711a84b7fb7f393eb8ab8)), closes [univention/dev/internal/team-nubus#1224](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1224)
* **2fa:** Drop subdomain customization in favor of subpath only support ([eedf56c](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/eedf56c45a5f9bd9e3cc957c26a13fd35a6128b6)), closes [univention/dev/internal/team-nubus#1279](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1279)
* adjust URL of twofa-helpdesk chart ([bab3555](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/bab3555b5cdf54c81c8d31189e3b7d48755601de)), closes [univention/dev/internal/team-nubus#1219](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1219)
* disable 2FA helpdesk tiles by default ([b18f5ff](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/b18f5ff240008b85ba8b1273264bd1603b1c66e1)), closes [univention/dev/internal/team-nubus#1211](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1211)
* enable 2fa in keycloak-bootstrap, using group "2fa-users" ([d55e637](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/d55e63701a25a609083485654f193e6ba05a2f75)), closes [univention/dev/internal/team-nubus#1213](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1213)
* fix ingress template, and change path to `univention/2fa/ui` ([113fa11](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/113fa11ee3fc3000103579b79a7c6c8e1cd3cb40)), closes [univention/dev/internal/team-nubus#1239](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1239)
* integrate components w/ bumped umc-base-image versions ([2553fe8](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/2553fe88b6b4390a665afa2098406ab744f0b5b9)), closes [univention/dev/internal/team-nubus#1263](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1263)
* integrate the provisioning code refactoring ([11d70b1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/11d70b1ab498d047d0e67d84fec2f857613b586d)), closes [univention/dev/internal/team-nubus#930](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/930)
* **keycloak:** Bump Keycloak to 26.2.5 ([c926257](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c926257cd21ff45c52c51857aa69fa4c974ead88)), closes [univention/dev/internal/team-nubus#1312](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1312)
* **ldap-server:** Add the univentionObjectIdentifier to the base.ldif ([782aa96](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/782aa96b8f53c4e2b666671f46994c483d747f47)), closes [univention/dev/internal/team-nubus#1186](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1186)
* neewsfeed type typo ([186c277](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/186c2774af07c640b53093cfb80c6888dcff2a3e)), closes [univention/dev/internal/team-nubus#1249](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1249)
* **notifications-api:** Use final artifact ([a536139](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/a53613928d2978074537bf5c6f8f0db430a29dbc)), closes [univention/dev/internal/team-nubus#0](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/0)
* removed obsolete test-connection in portal-server,udm-rest-api ([f1ce535](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/f1ce5355a13fe21aa8df349af91006c146874bde)), closes [univention/dev/internal/team-nubus#1246](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1246)
* **scim-server:** Update authentication configuration and add externalId and roles mappings ([c5b90c1](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/c5b90c139d43cb075bb995a1a48476fed7e27a57)), closes [univention/dev/internal/team-nubus#1279](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1279)
* Update sub-chart udm-rest-api to version 0.34.2 ([389482b](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/389482b2fd3c418d259706f21f4f3aee13f0e5b6)), closes [univention/dev/internal/team-nubus#892](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/892)
* use default cluster ingress class if not defined ([beac741](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/beac7410af1d29baf6aceed7091a1983c57637e5)), closes [univention/dev/internal/team-nubus#1134](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1134)

### Reverts

* Revert "feat: upgrade stack-data-ums" ([8d7da40](https://git.knut.univention.de/univention/dev/nubus-for-k8s/nubus-helm/commit/8d7da400a7f2e14515bab06513516d1499b44032))

chore(release): 1.10.2 [skip ci]

## [1.10.2](https://git.knut.univention.de/univention/customers/dataport/upx/ums-stack/compare/v1.10.1...v1.10.2) (2025-06-06)

### Bug Fixes

* Update sub-chart udm-rest-api to version 0.34.2 ([f963634](https://git.knut.univention.de/univention/customers/dataport/upx/ums-stack/commit/f96363456cc76cad25a3ecb474a441c794b806e2)), closes [univention/dev/internal/team-nubus#892](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/892)

chore(release): 1.10.1 [skip ci]

## [1.10.1](https://git.knut.univention.de/univention/customers/dataport/upx/ums-stack/compare/v1.10.0...v1.10.1) (2025-06-02)

### Bug Fixes

* **udm-rest-api:** CronJob additionalAnnotations and podAnnotations ([e44e2da](https://git.knut.univention.de/univention/customers/dataport/upx/ums-stack/commit/e44e2dad9cd236ea70b848df93c20262efff0792)), closes [univention/dev/internal/team-nubus#1170](https://git.knut.univention.de/univention/dev/internal/team-nubus/issues/1170)