diff --git a/apps/opencloud/opencloud-configmap.yaml b/apps/opencloud/opencloud-configmap.yaml index a0e64c4..d090fa9 100644 --- a/apps/opencloud/opencloud-configmap.yaml +++ b/apps/opencloud/opencloud-configmap.yaml @@ -30,17 +30,6 @@ data: user_oidc_claim: preferred_username enable_basic_auth: false - # Auth-basic service - LDAP configuration - auth-basic: - auth_providers: - ldap: - uri: ldap://openldap.opencloud.svc.cluster.local:389 - base_dn: dc=basicstack,dc=de - bind_dn: cn=admin,dc=basicstack,dc=de - bind_password: ${OPENLDAP_ADMIN_PASSWORD|} - user_base_dn: ou=users,dc=basicstack,dc=de - insecure: true - # Users service - external LDAP users: drivers: diff --git a/apps/opencloud/opencloud-deployment.yaml b/apps/opencloud/opencloud-deployment.yaml index 5bb6927..8ef31e9 100644 --- a/apps/opencloud/opencloud-deployment.yaml +++ b/apps/opencloud/opencloud-deployment.yaml @@ -87,8 +87,6 @@ spec: value: "trace" - name: AUTH_APP_LOG_LEVEL value: "trace" - - name: AUTH_BASIC_LOG_LEVEL - value: "trace" - name: AUTH_MACHINE_LOG_LEVEL value: "trace" - name: OC_LOG_PRETTY @@ -101,8 +99,9 @@ spec: value: "false" # Exclude broken search service, internal IDP and IDM (using external OpenLDAP for user storage and Pocket ID for auth) + # Also exclude auth-basic since we're using OIDC-only authentication - name: OC_EXCLUDE_RUN_SERVICES - value: "search,idp,idm" + value: "search,idp,idm,auth-basic" # Data paths - name: OPENCLOUD_BASE_DATA_PATH @@ -269,11 +268,6 @@ spec: secretKeyRef: name: opencloud-config-secrets key: idp-ldap-bind-password - - name: OC_AUTH_BASIC_LDAP_BIND_PASSWORD - valueFrom: - secretKeyRef: - name: opencloud-config-secrets - key: ldap-bind-password - name: OC_USERS_LDAP_BIND_PASSWORD valueFrom: secretKeyRef: @@ -411,11 +405,6 @@ spec: secretKeyRef: name: opencloud-config-secrets key: storage-mount-id - - name: AUTH_BASIC_AUTH_PROVIDERS_LDAP_BIND_PASSWORD - valueFrom: - secretKeyRef: - name: opencloud-config-secrets - key: ldap-bind-password - name: USERS_DRIVERS_LDAP_BIND_PASSWORD valueFrom: secretKeyRef: