OpenCloud: Exclude auth-basic service for OIDC-only authentication

Removed auth-basic configuration and environment variables:
- Removed auth-basic section from ConfigMap
- Removed AUTH_BASIC_LOG_LEVEL, OC_AUTH_BASIC_LDAP_BIND_PASSWORD,
  and AUTH_BASIC_AUTH_PROVIDERS_LDAP_BIND_PASSWORD env vars
- Added auth-basic to OC_EXCLUDE_RUN_SERVICES

Result: OpenCloud pod running healthy (1/1 Ready)
- All services listening and operational
- https://opencloud.basicstack.de/ responding with HTTP 200
- No auth-basic bind_password errors

Ready for OIDC authentication testing with Pocket ID.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-05 14:12:07 +00:00
parent 3db38aded0
commit 3a35b737cb
2 changed files with 2 additions and 24 deletions

View file

@ -30,17 +30,6 @@ data:
user_oidc_claim: preferred_username user_oidc_claim: preferred_username
enable_basic_auth: false enable_basic_auth: false
# Auth-basic service - LDAP configuration
auth-basic:
auth_providers:
ldap:
uri: ldap://openldap.opencloud.svc.cluster.local:389
base_dn: dc=basicstack,dc=de
bind_dn: cn=admin,dc=basicstack,dc=de
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
user_base_dn: ou=users,dc=basicstack,dc=de
insecure: true
# Users service - external LDAP # Users service - external LDAP
users: users:
drivers: drivers:

View file

@ -87,8 +87,6 @@ spec:
value: "trace" value: "trace"
- name: AUTH_APP_LOG_LEVEL - name: AUTH_APP_LOG_LEVEL
value: "trace" value: "trace"
- name: AUTH_BASIC_LOG_LEVEL
value: "trace"
- name: AUTH_MACHINE_LOG_LEVEL - name: AUTH_MACHINE_LOG_LEVEL
value: "trace" value: "trace"
- name: OC_LOG_PRETTY - name: OC_LOG_PRETTY
@ -101,8 +99,9 @@ spec:
value: "false" value: "false"
# Exclude broken search service, internal IDP and IDM (using external OpenLDAP for user storage and Pocket ID for auth) # Exclude broken search service, internal IDP and IDM (using external OpenLDAP for user storage and Pocket ID for auth)
# Also exclude auth-basic since we're using OIDC-only authentication
- name: OC_EXCLUDE_RUN_SERVICES - name: OC_EXCLUDE_RUN_SERVICES
value: "search,idp,idm" value: "search,idp,idm,auth-basic"
# Data paths # Data paths
- name: OPENCLOUD_BASE_DATA_PATH - name: OPENCLOUD_BASE_DATA_PATH
@ -269,11 +268,6 @@ spec:
secretKeyRef: secretKeyRef:
name: opencloud-config-secrets name: opencloud-config-secrets
key: idp-ldap-bind-password key: idp-ldap-bind-password
- name: OC_AUTH_BASIC_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: ldap-bind-password
- name: OC_USERS_LDAP_BIND_PASSWORD - name: OC_USERS_LDAP_BIND_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
@ -411,11 +405,6 @@ spec:
secretKeyRef: secretKeyRef:
name: opencloud-config-secrets name: opencloud-config-secrets
key: storage-mount-id key: storage-mount-id
- name: AUTH_BASIC_AUTH_PROVIDERS_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: ldap-bind-password
- name: USERS_DRIVERS_LDAP_BIND_PASSWORD - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef: