Merge branch 'main' into deps-main

Author: a-klos

.github/workflows/semantic-release.yml

@@ -101,7 +101,7 @@ jobs:
             build-args: "dev=0"
           - name: mcp-server
             dockerfile: services/mcp-server/Dockerfile
-            image: rag-mcp
+            image: mcp-server
             build-args: "dev=0"
           - name: frontend
             dockerfile: services/frontend/apps/chat-app/Dockerfile

README.md

@@ -7,7 +7,7 @@ Welcome to the STACKIT RAG Template! This is a basic example of how to use the R
 
 ## Features 🚀
 
-**Document Management**: Supports PDFs, DOCX, PPTX, XML, and Confluence documents.
+**Document Management**: Supports PDFs, DOCX, PPTX, XML, EPUB documents and websource via confluence as well as sitemaps.
 
 **AI Integration**: Multiple LLM and embedder providers for flexibility.
 

infrastructure/rag/templates/admin-backend/deployment.yaml

@@ -13,7 +13,7 @@ spec:
         app: {{ .Values.adminBackend.name }}
     spec:
       securityContext:
-        runAsUser: 65532
+        runAsUser: 10001
         runAsNonRoot: true
       volumes:
         - name: config-volume

infrastructure/rag/templates/backend/deployment.yaml

@@ -13,7 +13,7 @@ spec:
         app: {{ .Values.backend.name }}
     spec:
       securityContext:
-        runAsUser: 65532
+        runAsUser: 10001
         runAsNonRoot: true
       volumes:
         - name: config-volume

infrastructure/rag/templates/extractor/deployment.yaml

@@ -13,7 +13,7 @@ spec:
         app: {{ .Values.extractor.name }}
     spec:
       securityContext:
-        runAsUser: 65532
+        runAsUser: 10001
         runAsNonRoot: true
       volumes:
         - name: config-volume

services/admin-backend/Dockerfile

@@ -29,7 +29,7 @@ RUN poetry config virtualenvs.create false && \
 FROM --platform=linux/amd64 python:3.13-bookworm
 ARG dev=0
 
-RUN adduser --disabled-password --gecos "" --uid 65532 nonroot
+RUN adduser --disabled-password --gecos "" --uid 10001 nonroot
 
 ENV POETRY_VIRTUALENVS_PATH=/app/services/admin-backend/.venv
 COPY --from=build --chown=nonroot:nonroot ${POETRY_VIRTUALENVS_PATH} ${POETRY_VIRTUALENVS_PATH}

services/document-extractor/Dockerfile

@@ -33,7 +33,7 @@ RUN poetry config virtualenvs.create false &&\
 FROM --platform=linux/amd64 python:3.13-bookworm
 ARG dev=0
 
-RUN adduser --disabled-password --gecos "" --uid 65532 nonroot
+RUN adduser --disabled-password --gecos "" --uid 10001 nonroot
 
 ENV POETRY_VIRTUALENVS_PATH=/app/services/document-extractor/.venv
 COPY --from=build  --chown=nonroot:nonroot ${POETRY_VIRTUALENVS_PATH} ${POETRY_VIRTUALENVS_PATH}

services/mcp-server/Dockerfile

@@ -29,7 +29,7 @@ RUN poetry config virtualenvs.create false &&\
 FROM --platform=linux/amd64 python:3.13.5-bookworm
 ARG dev=0
 
-RUN adduser --disabled-password --gecos "" --uid 65532 nonroot
+RUN adduser --disabled-password --gecos "" --uid 10001 nonroot
 
 ENV POETRY_VIRTUALENVS_PATH=/app/services/mcp-server/.venv
 COPY --from=build --chown=nonroot:nonroot ${POETRY_VIRTUALENVS_PATH} ${POETRY_VIRTUALENVS_PATH}

services/rag-backend/Dockerfile

@@ -31,7 +31,7 @@ RUN poetry config virtualenvs.create false &&\
 FROM --platform=linux/amd64 python:3.13-bookworm
 ARG dev=0
 
-RUN adduser --disabled-password --gecos "" --uid 65532 nonroot
+RUN adduser --disabled-password --gecos "" --uid 10001 nonroot
 
 ENV POETRY_VIRTUALENVS_PATH=/app/services/rag-backend/.venv
 COPY --from=build --chown=nonroot:nonroot ${POETRY_VIRTUALENVS_PATH} ${POETRY_VIRTUALENVS_PATH}