From a3086e7ba71bdd8a7566f283f13deb488f622cd1 Mon Sep 17 00:00:00 2001
From: CTO Agent <cto@basicstack.de>
Date: Sun, 5 Jul 2026 08:58:16 +0000
Subject: [PATCH] Remove local admin user creation for OIDC-only mode

Problem: Frontend shows login page because local admin user exists.
Root cause: 'opencloud init --admin-password' creates local admin on every start.

Changes:
- Removed 'opencloud init' command from container startup
- Changed to direct 'opencloud server' execution
- Added IDM_CREATE_DEMO_USERS=false to prevent demo user creation

Why: With external OIDC, we don't need local users. The frontend detects
local users and shows a password login page. By removing local user creation,
the frontend will only offer OIDC authentication.

Auto-provisioning will create users in IDM on first OIDC login.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 apps/opencloud/opencloud-deployment.yaml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/apps/opencloud/opencloud-deployment.yaml b/apps/opencloud/opencloud-deployment.yaml
index d45bd3e..fa49157 100644
--- a/apps/opencloud/opencloud-deployment.yaml
+++ b/apps/opencloud/opencloud-deployment.yaml
@@ -73,9 +73,8 @@ spec:
       - name: opencloud
         image: opencloudeu/opencloud-rolling:7.2.0
         command:
-          - /bin/sh
-          - -c
-          - "yes | opencloud init --insecure=true --force-overwrite --admin-password='OpenCloud2024!' 2>&1 | head -50 || true; opencloud server"
+          - opencloud
+          - server
         env:
         # Basic configuration
         - name: OC_URL
@@ -162,6 +161,10 @@ spec:
         - name: PROXY_ENABLE_BASIC_AUTH
           value: "false"
 
+        # Disable demo user creation (using OIDC auto-provisioning only)
+        - name: IDM_CREATE_DEMO_USERS
+          value: "false"
+
         # Web service OIDC configuration
         - name: WEB_OIDC_CLIENT_ID
           valueFrom: