From c1c85a684e0afd5fa64f02cac6a43e08c56a30ea Mon Sep 17 00:00:00 2001
From: CTO Agent <cto@basicstack.de>
Date: Sun, 5 Jul 2026 20:45:19 +0000
Subject: [PATCH] Comment out LDAP environment variables for built-in IDM

When using OpenCloud's built-in IDM service, the graph, users, and groups
services should not use external LDAP. Commented out all LDAP-specific
environment variables that were causing startup failures.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 apps/opencloud/opencloud-deployment.yaml | 94 ++++++++++++------------
 1 file changed, 47 insertions(+), 47 deletions(-)

diff --git a/apps/opencloud/opencloud-deployment.yaml b/apps/opencloud/opencloud-deployment.yaml
index 54baa9b..106075b 100644
--- a/apps/opencloud/opencloud-deployment.yaml
+++ b/apps/opencloud/opencloud-deployment.yaml
@@ -268,34 +268,34 @@ spec:
               name: opencloud-config-secrets
               key: graph-application-id
 
-        # LDAP bind passwords
-        - name: OC_GRAPH_LDAP_BIND_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: opencloud-config-secrets
-              key: graph-ldap-bind-password
-        - name: OC_IDP_LDAP_BIND_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: opencloud-config-secrets
-              key: idp-ldap-bind-password
-        - name: OC_USERS_LDAP_BIND_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: opencloud-config-secrets
-              key: ldap-bind-password
-        - name: OC_GROUPS_LDAP_BIND_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: opencloud-config-secrets
-              key: ldap-bind-password
+        # LDAP bind passwords (commented out - using built-in IDM instead of external LDAP)
+        # - name: OC_GRAPH_LDAP_BIND_PASSWORD
+        #   valueFrom:
+        #     secretKeyRef:
+        #       name: opencloud-config-secrets
+        #       key: graph-ldap-bind-password
+        # - name: OC_IDP_LDAP_BIND_PASSWORD
+        #   valueFrom:
+        #     secretKeyRef:
+        #       name: opencloud-config-secrets
+        #       key: idp-ldap-bind-password
+        # - name: OC_USERS_LDAP_BIND_PASSWORD
+        #   valueFrom:
+        #     secretKeyRef:
+        #       name: opencloud-config-secrets
+        #       key: ldap-bind-password
+        # - name: OC_GROUPS_LDAP_BIND_PASSWORD
+        #   valueFrom:
+        #     secretKeyRef:
+        #       name: opencloud-config-secrets
+        #       key: ldap-bind-password
 
-        # External OpenLDAP admin password (for user/group storage)
-        - name: OPENLDAP_ADMIN_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: openldap-admin-secret
-              key: admin-password
+        # External OpenLDAP admin password (commented out - using built-in IDM)
+        # - name: OPENLDAP_ADMIN_PASSWORD
+        #   valueFrom:
+        #     secretKeyRef:
+        #       name: openldap-admin-secret
+        #       key: admin-password
 
         # IDM service user passwords
         - name: OC_IDM_ADMIN_PASSWORD
@@ -337,11 +337,11 @@ spec:
             secretKeyRef:
               name: opencloud-config-secrets
               key: graph-application-id
-        - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: opencloud-config-secrets
-              key: graph-ldap-bind-password
+        # - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
+        #   valueFrom:
+        #     secretKeyRef:
+        #       name: opencloud-config-secrets
+        #       key: graph-ldap-bind-password
         - name: GRAPH_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
           valueFrom:
             secretKeyRef:
@@ -356,11 +356,11 @@ spec:
           value: "false"
         - name: GRAPH_USERNAME_MATCH
           value: "none"
-        - name: IDP_LDAP_BIND_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: opencloud-config-secrets
-              key: idp-ldap-bind-password
+        # - name: IDP_LDAP_BIND_PASSWORD
+        #   valueFrom:
+        #     secretKeyRef:
+        #       name: opencloud-config-secrets
+        #       key: idp-ldap-bind-password
         - name: IDM_SERVICE_USER_PASSWORDS_ADMIN_PASSWORD
           valueFrom:
             secretKeyRef:
@@ -416,16 +416,16 @@ spec:
             secretKeyRef:
               name: opencloud-config-secrets
               key: storage-mount-id
-        - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: opencloud-config-secrets
-              key: ldap-bind-password
-        - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: opencloud-config-secrets
-              key: ldap-bind-password
+        # - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
+        #   valueFrom:
+        #     secretKeyRef:
+        #       name: opencloud-config-secrets
+        #       key: ldap-bind-password
+        # - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
+        #   valueFrom:
+        #     secretKeyRef:
+        #       name: opencloud-config-secrets
+        #       key: ldap-bind-password
         - name: OCM_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
           valueFrom:
             secretKeyRef: