OpenCloud: Exclude auth-basic service for OIDC-only authentication
Removed auth-basic configuration and environment variables: - Removed auth-basic section from ConfigMap - Removed AUTH_BASIC_LOG_LEVEL, OC_AUTH_BASIC_LDAP_BIND_PASSWORD, and AUTH_BASIC_AUTH_PROVIDERS_LDAP_BIND_PASSWORD env vars - Added auth-basic to OC_EXCLUDE_RUN_SERVICES Result: OpenCloud pod running healthy (1/1 Ready) - All services listening and operational - https://opencloud.basicstack.de/ responding with HTTP 200 - No auth-basic bind_password errors Ready for OIDC authentication testing with Pocket ID. Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
parent
3db38aded0
commit
3a35b737cb
2 changed files with 2 additions and 24 deletions
|
|
@ -30,17 +30,6 @@ data:
|
||||||
user_oidc_claim: preferred_username
|
user_oidc_claim: preferred_username
|
||||||
enable_basic_auth: false
|
enable_basic_auth: false
|
||||||
|
|
||||||
# Auth-basic service - LDAP configuration
|
|
||||||
auth-basic:
|
|
||||||
auth_providers:
|
|
||||||
ldap:
|
|
||||||
uri: ldap://openldap.opencloud.svc.cluster.local:389
|
|
||||||
base_dn: dc=basicstack,dc=de
|
|
||||||
bind_dn: cn=admin,dc=basicstack,dc=de
|
|
||||||
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
|
|
||||||
user_base_dn: ou=users,dc=basicstack,dc=de
|
|
||||||
insecure: true
|
|
||||||
|
|
||||||
# Users service - external LDAP
|
# Users service - external LDAP
|
||||||
users:
|
users:
|
||||||
drivers:
|
drivers:
|
||||||
|
|
|
||||||
|
|
@ -87,8 +87,6 @@ spec:
|
||||||
value: "trace"
|
value: "trace"
|
||||||
- name: AUTH_APP_LOG_LEVEL
|
- name: AUTH_APP_LOG_LEVEL
|
||||||
value: "trace"
|
value: "trace"
|
||||||
- name: AUTH_BASIC_LOG_LEVEL
|
|
||||||
value: "trace"
|
|
||||||
- name: AUTH_MACHINE_LOG_LEVEL
|
- name: AUTH_MACHINE_LOG_LEVEL
|
||||||
value: "trace"
|
value: "trace"
|
||||||
- name: OC_LOG_PRETTY
|
- name: OC_LOG_PRETTY
|
||||||
|
|
@ -101,8 +99,9 @@ spec:
|
||||||
value: "false"
|
value: "false"
|
||||||
|
|
||||||
# Exclude broken search service, internal IDP and IDM (using external OpenLDAP for user storage and Pocket ID for auth)
|
# Exclude broken search service, internal IDP and IDM (using external OpenLDAP for user storage and Pocket ID for auth)
|
||||||
|
# Also exclude auth-basic since we're using OIDC-only authentication
|
||||||
- name: OC_EXCLUDE_RUN_SERVICES
|
- name: OC_EXCLUDE_RUN_SERVICES
|
||||||
value: "search,idp,idm"
|
value: "search,idp,idm,auth-basic"
|
||||||
|
|
||||||
# Data paths
|
# Data paths
|
||||||
- name: OPENCLOUD_BASE_DATA_PATH
|
- name: OPENCLOUD_BASE_DATA_PATH
|
||||||
|
|
@ -269,11 +268,6 @@ spec:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: opencloud-config-secrets
|
name: opencloud-config-secrets
|
||||||
key: idp-ldap-bind-password
|
key: idp-ldap-bind-password
|
||||||
- name: OC_AUTH_BASIC_LDAP_BIND_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: opencloud-config-secrets
|
|
||||||
key: ldap-bind-password
|
|
||||||
- name: OC_USERS_LDAP_BIND_PASSWORD
|
- name: OC_USERS_LDAP_BIND_PASSWORD
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
|
|
@ -411,11 +405,6 @@ spec:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
name: opencloud-config-secrets
|
name: opencloud-config-secrets
|
||||||
key: storage-mount-id
|
key: storage-mount-id
|
||||||
- name: AUTH_BASIC_AUTH_PROVIDERS_LDAP_BIND_PASSWORD
|
|
||||||
valueFrom:
|
|
||||||
secretKeyRef:
|
|
||||||
name: opencloud-config-secrets
|
|
||||||
key: ldap-bind-password
|
|
||||||
- name: USERS_DRIVERS_LDAP_BIND_PASSWORD
|
- name: USERS_DRIVERS_LDAP_BIND_PASSWORD
|
||||||
valueFrom:
|
valueFrom:
|
||||||
secretKeyRef:
|
secretKeyRef:
|
||||||
|
|
|
||||||
Loading…
Add table
Reference in a new issue