basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Revert "fix(opencloud): remove external LDAP config, use IDM for user storage"

Browse source 
This reverts commit 5adc38c4d8.
This commit is contained in:
CTO Agent 2026-07-05 15:41:56 +00:00
parent 5adc38c4d8
commit 51d70b052f
1 changed files with 42 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

45
apps/opencloud/opencloud-configmap.yaml
View file

@ -6,9 +6,22 @@ metadata:
namespace: opencloud namespace: opencloud
data: data:
opencloud.yaml: | opencloud.yaml: |
# OpenCloud Configuration - Pocket ID OIDC auth, IDM for internal user storage # OpenCloud Minimal Configuration
# Only non-default settings - environment variables override these
# Proxy service - OIDC via Pocket ID # Graph service - external OpenLDAP configuration
graph:
identity:
ldap:
uri: ldap://openldap.opencloud.svc.cluster.local:389
base_dn: dc=basicstack,dc=de
bind_dn: cn=admin,dc=basicstack,dc=de
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
user_base_dn: ou=users,dc=basicstack,dc=de
group_base_dn: ou=groups,dc=basicstack,dc=de
insecure: true
# Proxy service - OIDC configuration (already in env vars, kept for reference)
proxy: proxy:
oidc: oidc:
issuer: https://auth.basicstack.de issuer: https://auth.basicstack.de
@ -17,7 +30,33 @@ data:
user_oidc_claim: preferred_username user_oidc_claim: preferred_username
enable_basic_auth: false enable_basic_auth: false
# IDM service user passwords (required when /etc/opencloud is read-only - init cannot write here) # Users service - external LDAP
users:
drivers:
ldap:
uri: ldap://openldap.opencloud.svc.cluster.local:389
base_dn: dc=basicstack,dc=de
bind_dn: cn=admin,dc=basicstack,dc=de
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
user_base_dn: ou=users,dc=basicstack,dc=de
user_filter: (objectClass=inetOrgPerson)
user_object_class: inetOrgPerson
insecure: true
# Groups service - external LDAP
groups:
drivers:
ldap:
uri: ldap://openldap.opencloud.svc.cluster.local:389
base_dn: dc=basicstack,dc=de
bind_dn: cn=admin,dc=basicstack,dc=de
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
group_base_dn: ou=groups,dc=basicstack,dc=de
group_filter: (objectClass=groupOfNames)
group_object_class: groupOfNames
insecure: true
# IDM service user passwords (required when IDM is enabled and /etc/opencloud is read-only)
idm: idm:
service_user_passwords: service_user_passwords:
admin_password: ${OC_IDM_ADMIN_PASSWORD} admin_password: ${OC_IDM_ADMIN_PASSWORD}