basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Remove local admin user creation for OIDC-only mode

Browse source 
Problem: Frontend shows login page because local admin user exists.
Root cause: 'opencloud init --admin-password' creates local admin on every start.

Changes:
- Removed 'opencloud init' command from container startup
- Changed to direct 'opencloud server' execution
- Added IDM_CREATE_DEMO_USERS=false to prevent demo user creation

Why: With external OIDC, we don't need local users. The frontend detects
local users and shows a password login page. By removing local user creation,
the frontend will only offer OIDC authentication.

Auto-provisioning will create users in IDM on first OIDC login.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-05 08:58:16 +00:00
parent 4c89d5d159
commit a3086e7ba7
1 changed files with 6 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
apps/opencloud/opencloud-deployment.yaml
View file

@ -73,9 +73,8 @@ spec:
- name: opencloud - name: opencloud
image: opencloudeu/opencloud-rolling:7.2.0 image: opencloudeu/opencloud-rolling:7.2.0
command: command:
- /bin/sh - opencloud
- -c - server
- "yes | opencloud init --insecure=true --force-overwrite --admin-password='OpenCloud2024!' 2>&1 | head -50 || true; opencloud server"
env: env:
# Basic configuration # Basic configuration
- name: OC_URL - name: OC_URL
@ -162,6 +161,10 @@ spec:
- name: PROXY_ENABLE_BASIC_AUTH - name: PROXY_ENABLE_BASIC_AUTH
value: "false" value: "false"
# Disable demo user creation (using OIDC auto-provisioning only)
- name: IDM_CREATE_DEMO_USERS
value: "false"
# Web service OIDC configuration # Web service OIDC configuration
- name: WEB_OIDC_CLIENT_ID - name: WEB_OIDC_CLIENT_ID
valueFrom: valueFrom: