Restore LDAP environment variables for IDM

Restored LDAP-related environment variables. The configmap now uses
IDM password variables (OC_IDM_IDM_PASSWORD, OC_IDM_REVA_PASSWORD)
instead of the external LDAP passwords.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-05 20:47:59 +00:00
parent 6b49ba342a
commit b4abe71c5d

View file

@ -268,34 +268,34 @@ spec:
name: opencloud-config-secrets name: opencloud-config-secrets
key: graph-application-id key: graph-application-id
# LDAP bind passwords (commented out - using built-in IDM instead of external LDAP) # LDAP bind passwords
# - name: OC_GRAPH_LDAP_BIND_PASSWORD - name: OC_GRAPH_LDAP_BIND_PASSWORD
# valueFrom: valueFrom:
# secretKeyRef: secretKeyRef:
# name: opencloud-config-secrets name: opencloud-config-secrets
# key: graph-ldap-bind-password key: graph-ldap-bind-password
# - name: OC_IDP_LDAP_BIND_PASSWORD - name: OC_IDP_LDAP_BIND_PASSWORD
# valueFrom: valueFrom:
# secretKeyRef: secretKeyRef:
# name: opencloud-config-secrets name: opencloud-config-secrets
# key: idp-ldap-bind-password key: idp-ldap-bind-password
# - name: OC_USERS_LDAP_BIND_PASSWORD - name: OC_USERS_LDAP_BIND_PASSWORD
# valueFrom: valueFrom:
# secretKeyRef: secretKeyRef:
# name: opencloud-config-secrets name: opencloud-config-secrets
# key: ldap-bind-password key: ldap-bind-password
# - name: OC_GROUPS_LDAP_BIND_PASSWORD - name: OC_GROUPS_LDAP_BIND_PASSWORD
# valueFrom: valueFrom:
# secretKeyRef: secretKeyRef:
# name: opencloud-config-secrets name: opencloud-config-secrets
# key: ldap-bind-password key: ldap-bind-password
# External OpenLDAP admin password (commented out - using built-in IDM) # External OpenLDAP admin password (for user/group storage)
# - name: OPENLDAP_ADMIN_PASSWORD - name: OPENLDAP_ADMIN_PASSWORD
# valueFrom: valueFrom:
# secretKeyRef: secretKeyRef:
# name: openldap-admin-secret name: openldap-admin-secret
# key: admin-password key: admin-password
# IDM service user passwords # IDM service user passwords
- name: OC_IDM_ADMIN_PASSWORD - name: OC_IDM_ADMIN_PASSWORD
@ -337,11 +337,11 @@ spec:
secretKeyRef: secretKeyRef:
name: opencloud-config-secrets name: opencloud-config-secrets
key: graph-application-id key: graph-application-id
# - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
# valueFrom: valueFrom:
# secretKeyRef: secretKeyRef:
# name: opencloud-config-secrets name: opencloud-config-secrets
# key: graph-ldap-bind-password key: graph-ldap-bind-password
- name: GRAPH_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID - name: GRAPH_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
@ -356,11 +356,11 @@ spec:
value: "false" value: "false"
- name: GRAPH_USERNAME_MATCH - name: GRAPH_USERNAME_MATCH
value: "none" value: "none"
# - name: IDP_LDAP_BIND_PASSWORD - name: IDP_LDAP_BIND_PASSWORD
# valueFrom: valueFrom:
# secretKeyRef: secretKeyRef:
# name: opencloud-config-secrets name: opencloud-config-secrets
# key: idp-ldap-bind-password key: idp-ldap-bind-password
- name: IDM_SERVICE_USER_PASSWORDS_ADMIN_PASSWORD - name: IDM_SERVICE_USER_PASSWORDS_ADMIN_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
@ -416,16 +416,16 @@ spec:
secretKeyRef: secretKeyRef:
name: opencloud-config-secrets name: opencloud-config-secrets
key: storage-mount-id key: storage-mount-id
# - name: USERS_DRIVERS_LDAP_BIND_PASSWORD - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
# valueFrom: valueFrom:
# secretKeyRef: secretKeyRef:
# name: opencloud-config-secrets name: opencloud-config-secrets
# key: ldap-bind-password key: ldap-bind-password
# - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
# valueFrom: valueFrom:
# secretKeyRef: secretKeyRef:
# name: opencloud-config-secrets name: opencloud-config-secrets
# key: ldap-bind-password key: ldap-bind-password
- name: OCM_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID - name: OCM_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
valueFrom: valueFrom:
secretKeyRef: secretKeyRef: