From 4a674dba6ecb20c0dee32c21bd25c11a23350867 Mon Sep 17 00:00:00 2001 From: CTO Agent Date: Sun, 5 Jul 2026 15:29:01 +0000 Subject: [PATCH] fix(opencloud): add IDM password config to ConfigMap The /etc/opencloud mount is read-only (ConfigMap), so opencloud init cannot write the generated IDM password config. IDM fails to start with "password of service user IDM has not been set properly". Add the idm.service_user_passwords section to opencloud.yaml, referencing the OC_IDM_* env vars that are already populated from the sealed secret. Co-Authored-By: Paperclip --- apps/opencloud/opencloud-configmap.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/apps/opencloud/opencloud-configmap.yaml b/apps/opencloud/opencloud-configmap.yaml index 38642e5..48b0883 100644 --- a/apps/opencloud/opencloud-configmap.yaml +++ b/apps/opencloud/opencloud-configmap.yaml @@ -56,6 +56,14 @@ data: group_object_class: groupOfNames insecure: true + # IDM service user passwords (required when IDM is enabled and /etc/opencloud is read-only) + idm: + service_user_passwords: + admin_password: ${OC_IDM_ADMIN_PASSWORD} + idm_password: ${OC_IDM_IDM_PASSWORD} + reva_password: ${OC_IDM_REVA_PASSWORD} + idp_password: ${OC_IDM_IDP_PASSWORD} + # Gateway service - storage configuration gateway: storage_registry: