fix(opencloud): add IDM password config to ConfigMap

The /etc/opencloud mount is read-only (ConfigMap), so opencloud init
cannot write the generated IDM password config. IDM fails to start with
"password of service user IDM has not been set properly".

Add the idm.service_user_passwords section to opencloud.yaml, referencing
the OC_IDM_* env vars that are already populated from the sealed secret.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-05 15:29:01 +00:00
parent 67890f299d
commit 4a674dba6e

View file

@ -56,6 +56,14 @@ data:
group_object_class: groupOfNames
insecure: true
# IDM service user passwords (required when IDM is enabled and /etc/opencloud is read-only)
idm:
service_user_passwords:
admin_password: ${OC_IDM_ADMIN_PASSWORD}
idm_password: ${OC_IDM_IDM_PASSWORD}
reva_password: ${OC_IDM_REVA_PASSWORD}
idp_password: ${OC_IDM_IDP_PASSWORD}
# Gateway service - storage configuration
gateway:
storage_registry: