Patch release 4.0.2

[ScharfViktor]

Reasons

• Do not reset received share state to pending if there is a state already #7336 (ocis migrate rebuild-jsoncs3-indexes resets share acceptance state #7319)
• graph/education: Check school number for duplicates before adding a school #7351
• backport: actually use skip user info config option #7220
• [backport/4.0] Bring back the USERS_LDAP_USER_SCHEMA_ID variable #7321 (users service does not support USERS_LDAP_USER_SCHEMA_ID anymore #7312)
• pass default nats options cs3org/reva#4214

Template

Release Template

Prerequisites

• DEV: Create branch release-4.0.2 -> CODEFREEZE
  • DEV: bump ocis version in necessary files
  • DEV: changelog/CHANGELOG.tmpl
  • DEV: ocis-pkg/version/version.go
  • DEV: sonar-project.properties
  • DEV: prepare changelog folder in changelog/x.x.x_????_??_??
• DEV: Check successful CI run on release branch
• DEV: Create signed tag 4.0.2-rc.1
• DEV: Check successful CI run on 4.0.2-rc.1 tag / BLOCKING for all further activity
• DEV: Merge back release branch
• DEV: bump released deployments to vx.y.z-rc.x
• DEV: update ocis.released.owncloud.works
• DEV: https://ocis.team.owncloud.works/
  • DEV: needs snapshot and migration
• DEV/QA: inform the desktop team of changes that may affect them

QA Phase

• QA: Confirmatory testing (if needed)
  • pass default nats options cs3org/reva#4214 tested using ocis-chart. works fine
  • ocis migrate rebuild-jsoncs3-indexes resets share acceptance state #7319
  • graph/education: Check school number for duplicates before adding a school #7351 - no ideas how to check
  • backport: actually use skip user info config option #7220
  • users service does not support USERS_LDAP_USER_SCHEMA_ID anymore #7312
  • Backport-4.0: deployment: Disable username validation for keycloak example #7230
  • Config pitfalls after v4 upgrade #7176
• QA: Compatibility test
• QA: Documentation test:
  • QA: updgrade notes @mmattel cc Config pitfalls after v4 upgrade #7176 (comment)
• QA: e2e with different deployment:
  • QA: wopi
  • QA: traefik
  • QA: ldap
  • QA: k8s on test
• QA: e2e with different storage
  • QA: local
  • QA: nfs
  • QA: s3
• QA: Smoke test on Web Office (Collabora, Onlyoffice, Microsoft office)
• QA: Smoke test ldap
• QA: Collecting errors found
• Ocis vs ldap. No check for the same user and group uuid #7390

After QA Phase

• Brief company-wide heads up via mail

• DEV: Create branch release-x.x.x

  • DEV: bump ocis version in necessary files
  • DEV: ocis-pkg/version/version.go
  • DEV: sonar-project.properties
  • DEV: released deployment versions
  • DEV: prepare changelog folder in changelog/x.x.x_???

• Release Notes + Breaking Changes

• Migration + Breaking Changes Admin Doc

• DEV: Create final signed tag https://hub.docker.com/layers/owncloud/ocis/4.0.2/images/sha256-0e750e960f631fe5ac59187b49c30edfa8a476211236c7e924de4a426db980ac?context=explore

• DEV: Check successful CI run on 4.0.2 tag / BLOCKING for all further activity

• Merge release notes

Post-release communication

• DEV: Create a docs-stable-x.y branch based on the docs folder in the ocis repo
• DEV/QA: Ping documentation in RC about the new release tag (for ocis/helm chart version bump in docs)
• DEV/QA: Ping marketing to update all download links (download mirrors are updated at the full hour, wait with ping until download is actually available)
• DEV/QA: Ping @hodyroff once the demo instances are running this release
• DEV: Merge back release branch
• DEV: Create stable-x.y branch in the ocis repo from final tag

[micbar]

Changelog for ocis 4.0.2

• Bugfix - Bump reva to 2.16.1: #7350
  • Bugfix cs3org/reva#4194: Make appctx package compatible with go v1.21
  • Bugfix cs3org/reva#4214: Always pass adjusted default nats options
• Bugfix - Do not reset received share state to pending: #7319
• Bugfix - Check school number for duplicates before adding a school: #7351
• Bugfix - Disable username validation for keycloak example: #7230
• Bugfix - Actually pass PROXY_OIDC_SKIP_USER_INFO option to oidc client middleware: #7220
• Bugfix - Bring back the USERS_LDAP_USER_SCHEMA_ID variable: #7312
• Enhancement - Add OCIS_LDAP_BIND_PASSWORD as replacement for LDAP_BIND_PASSWORD: #7176

[ScharfViktor]

Compatibility test between 4.0.1 and 4.0.2-rc.1 is fine

[ScharfViktor]

Smoke Test with Web Office

Collabora

cannot be open #7194

• Spreadsheet

  • Create
  • Open
  • Open with two users in collaboration mode and read-only
  • Open with two users in collaboration mode and write access

• Document

  • Create
  • Open
  • Open with two users in collaboration mode and read-only
  • Open with two users in collaboration mode and write access

• Presentation

  • Create
  • Open
  • Open with two users in collaboration mode and read-only
  • Open with two users in collaboration mode and write access

Onlyoffice

• Spreadsheet

  • Create
  • Open
  • Open with two users in collaboration mode and read-only - viewer cannot see real-time changes - existing problem
  • Open with two users in collaboration mode and write access

• Document

  • Create
  • Open
  • Open with two users in collaboration mode and read-only
  • Open with two users in collaboration mode and write access

• Presentation

  • Create
  • Open
  • Open with two users in collaboration mode and read-only
  • Open with two users in collaboration mode and write access

  Remarks: Ocis vs Wopi. file size is 0 after some content is posted  #6858

[ScharfViktor]

Smoke test: ocis 3.1.0-beta.1 with ldap:

Preparation

• switch to the latest stable ocis 4.0.0
• create demo users and group
• using ldap client https://ldap.owncloud.test/ (login: cn=admin,dc=owncloud,dc=com, password: admin)
  • create ldap user user1
  • create ldap group group1
  • add user1 to group1
  • delete philosophy-haters group
  • delete marie user
  • disable richard user

Test

• upgrade ocis to new version
• check that
  • created demo users and group still exist
  • created ldap users user1 and group group1 still exist
  • users user1 can log in
  • deleted group philosophy-haters and user marie doesn't exist
  • richard user still disabled and cannot log in
• using ldap client https://ldap.owncloud.test/
  • create new ldap user user2
  • create new ldap group group2
  • add new user user2 to group group1 and group2
• new user user2 can log in
• log in as einstein
  • try to find sharees by user and by group
• using ldap client https://ldap.owncloud.test/
  • disable user user1, user2, einstein
  • delete physics-lovers, group1, group2, einstein, user1, user2, richard

Remark: creating users and groups with the same UUID is possible in https://ldap.owncloud.test
#7390