From b4abe71c5d8897f51216321fc1953a62024e8b5b Mon Sep 17 00:00:00 2001
From: CTO Agent <cto@basicstack.de>
Date: Sun, 5 Jul 2026 20:47:59 +0000
Subject: [PATCH] Restore LDAP environment variables for IDM

Restored LDAP-related environment variables. The configmap now uses
IDM password variables (OC_IDM_IDM_PASSWORD, OC_IDM_REVA_PASSWORD)
instead of the external LDAP passwords.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 apps/opencloud/opencloud-deployment.yaml | 94 ++++++++++++------------
 1 file changed, 47 insertions(+), 47 deletions(-)

diff --git a/apps/opencloud/opencloud-deployment.yaml b/apps/opencloud/opencloud-deployment.yaml
index 106075b..54baa9b 100644
--- a/apps/opencloud/opencloud-deployment.yaml
+++ b/apps/opencloud/opencloud-deployment.yaml
@@ -268,34 +268,34 @@ spec:
               name: opencloud-config-secrets
               key: graph-application-id
 
-        # LDAP bind passwords (commented out - using built-in IDM instead of external LDAP)
-        # - name: OC_GRAPH_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: graph-ldap-bind-password
-        # - name: OC_IDP_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: idp-ldap-bind-password
-        # - name: OC_USERS_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: ldap-bind-password
-        # - name: OC_GROUPS_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: ldap-bind-password
+        # LDAP bind passwords
+        - name: OC_GRAPH_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: graph-ldap-bind-password
+        - name: OC_IDP_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: idp-ldap-bind-password
+        - name: OC_USERS_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: ldap-bind-password
+        - name: OC_GROUPS_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: ldap-bind-password
 
-        # External OpenLDAP admin password (commented out - using built-in IDM)
-        # - name: OPENLDAP_ADMIN_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: openldap-admin-secret
-        #       key: admin-password
+        # External OpenLDAP admin password (for user/group storage)
+        - name: OPENLDAP_ADMIN_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: openldap-admin-secret
+              key: admin-password
 
         # IDM service user passwords
         - name: OC_IDM_ADMIN_PASSWORD
@@ -337,11 +337,11 @@ spec:
             secretKeyRef:
               name: opencloud-config-secrets
               key: graph-application-id
-        # - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: graph-ldap-bind-password
+        - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: graph-ldap-bind-password
         - name: GRAPH_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
           valueFrom:
             secretKeyRef:
@@ -356,11 +356,11 @@ spec:
           value: "false"
         - name: GRAPH_USERNAME_MATCH
           value: "none"
-        # - name: IDP_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: idp-ldap-bind-password
+        - name: IDP_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: idp-ldap-bind-password
         - name: IDM_SERVICE_USER_PASSWORDS_ADMIN_PASSWORD
           valueFrom:
             secretKeyRef:
@@ -416,16 +416,16 @@ spec:
             secretKeyRef:
               name: opencloud-config-secrets
               key: storage-mount-id
-        # - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: ldap-bind-password
-        # - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
-        #   valueFrom:
-        #     secretKeyRef:
-        #       name: opencloud-config-secrets
-        #       key: ldap-bind-password
+        - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: ldap-bind-password
+        - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: opencloud-config-secrets
+              key: ldap-bind-password
         - name: OCM_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
           valueFrom:
             secretKeyRef: