OpenCloud: Exclude auth-basic service for OIDC-only authentication
Removed auth-basic configuration and environment variables: - Removed auth-basic section from ConfigMap - Removed AUTH_BASIC_LOG_LEVEL, OC_AUTH_BASIC_LDAP_BIND_PASSWORD, and AUTH_BASIC_AUTH_PROVIDERS_LDAP_BIND_PASSWORD env vars - Added auth-basic to OC_EXCLUDE_RUN_SERVICES Result: OpenCloud pod running healthy (1/1 Ready) - All services listening and operational - https://opencloud.basicstack.de/ responding with HTTP 200 - No auth-basic bind_password errors Ready for OIDC authentication testing with Pocket ID. Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
parent
3db38aded0
commit
3a35b737cb
2 changed files with 2 additions and 24 deletions
|
|
@ -30,17 +30,6 @@ data:
|
|||
user_oidc_claim: preferred_username
|
||||
enable_basic_auth: false
|
||||
|
||||
# Auth-basic service - LDAP configuration
|
||||
auth-basic:
|
||||
auth_providers:
|
||||
ldap:
|
||||
uri: ldap://openldap.opencloud.svc.cluster.local:389
|
||||
base_dn: dc=basicstack,dc=de
|
||||
bind_dn: cn=admin,dc=basicstack,dc=de
|
||||
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
|
||||
user_base_dn: ou=users,dc=basicstack,dc=de
|
||||
insecure: true
|
||||
|
||||
# Users service - external LDAP
|
||||
users:
|
||||
drivers:
|
||||
|
|
|
|||
|
|
@ -87,8 +87,6 @@ spec:
|
|||
value: "trace"
|
||||
- name: AUTH_APP_LOG_LEVEL
|
||||
value: "trace"
|
||||
- name: AUTH_BASIC_LOG_LEVEL
|
||||
value: "trace"
|
||||
- name: AUTH_MACHINE_LOG_LEVEL
|
||||
value: "trace"
|
||||
- name: OC_LOG_PRETTY
|
||||
|
|
@ -101,8 +99,9 @@ spec:
|
|||
value: "false"
|
||||
|
||||
# Exclude broken search service, internal IDP and IDM (using external OpenLDAP for user storage and Pocket ID for auth)
|
||||
# Also exclude auth-basic since we're using OIDC-only authentication
|
||||
- name: OC_EXCLUDE_RUN_SERVICES
|
||||
value: "search,idp,idm"
|
||||
value: "search,idp,idm,auth-basic"
|
||||
|
||||
# Data paths
|
||||
- name: OPENCLOUD_BASE_DATA_PATH
|
||||
|
|
@ -269,11 +268,6 @@ spec:
|
|||
secretKeyRef:
|
||||
name: opencloud-config-secrets
|
||||
key: idp-ldap-bind-password
|
||||
- name: OC_AUTH_BASIC_LDAP_BIND_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: opencloud-config-secrets
|
||||
key: ldap-bind-password
|
||||
- name: OC_USERS_LDAP_BIND_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
|
|
@ -411,11 +405,6 @@ spec:
|
|||
secretKeyRef:
|
||||
name: opencloud-config-secrets
|
||||
key: storage-mount-id
|
||||
- name: AUTH_BASIC_AUTH_PROVIDERS_LDAP_BIND_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
name: opencloud-config-secrets
|
||||
key: ldap-bind-password
|
||||
- name: USERS_DRIVERS_LDAP_BIND_PASSWORD
|
||||
valueFrom:
|
||||
secretKeyRef:
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue