basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Comment out LDAP environment variables for built-in IDM

Browse source 
When using OpenCloud's built-in IDM service, the graph, users, and groups
services should not use external LDAP. Commented out all LDAP-specific
environment variables that were causing startup failures.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-05 20:45:19 +00:00
parent ab5cc5aaae
commit c1c85a684e
1 changed files with 47 additions and 47 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

94
apps/opencloud/opencloud-deployment.yaml
View file

@ -268,34 +268,34 @@ spec:
name: opencloud-config-secrets name: opencloud-config-secrets
key: graph-application-id key: graph-application-id
# LDAP bind passwords # LDAP bind passwords (commented out - using built-in IDM instead of external LDAP)
- name: OC_GRAPH_LDAP_BIND_PASSWORD # - name: OC_GRAPH_LDAP_BIND_PASSWORD
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: opencloud-config-secrets # name: opencloud-config-secrets
key: graph-ldap-bind-password # key: graph-ldap-bind-password
- name: OC_IDP_LDAP_BIND_PASSWORD # - name: OC_IDP_LDAP_BIND_PASSWORD
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: opencloud-config-secrets # name: opencloud-config-secrets
key: idp-ldap-bind-password # key: idp-ldap-bind-password
- name: OC_USERS_LDAP_BIND_PASSWORD # - name: OC_USERS_LDAP_BIND_PASSWORD
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: opencloud-config-secrets # name: opencloud-config-secrets
key: ldap-bind-password # key: ldap-bind-password
- name: OC_GROUPS_LDAP_BIND_PASSWORD # - name: OC_GROUPS_LDAP_BIND_PASSWORD
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: opencloud-config-secrets # name: opencloud-config-secrets
key: ldap-bind-password # key: ldap-bind-password
# External OpenLDAP admin password (for user/group storage) # External OpenLDAP admin password (commented out - using built-in IDM)
- name: OPENLDAP_ADMIN_PASSWORD # - name: OPENLDAP_ADMIN_PASSWORD
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: openldap-admin-secret # name: openldap-admin-secret
key: admin-password # key: admin-password
# IDM service user passwords # IDM service user passwords
- name: OC_IDM_ADMIN_PASSWORD - name: OC_IDM_ADMIN_PASSWORD
@ -337,11 +337,11 @@ spec:
secretKeyRef: secretKeyRef:
name: opencloud-config-secrets name: opencloud-config-secrets
key: graph-application-id key: graph-application-id
- name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD # - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: opencloud-config-secrets # name: opencloud-config-secrets
key: graph-ldap-bind-password # key: graph-ldap-bind-password
- name: GRAPH_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID - name: GRAPH_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
@ -356,11 +356,11 @@ spec:
value: "false" value: "false"
- name: GRAPH_USERNAME_MATCH - name: GRAPH_USERNAME_MATCH
value: "none" value: "none"
- name: IDP_LDAP_BIND_PASSWORD # - name: IDP_LDAP_BIND_PASSWORD
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: opencloud-config-secrets # name: opencloud-config-secrets
key: idp-ldap-bind-password # key: idp-ldap-bind-password
- name: IDM_SERVICE_USER_PASSWORDS_ADMIN_PASSWORD - name: IDM_SERVICE_USER_PASSWORDS_ADMIN_PASSWORD
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
@ -416,16 +416,16 @@ spec:
secretKeyRef: secretKeyRef:
name: opencloud-config-secrets name: opencloud-config-secrets
key: storage-mount-id key: storage-mount-id
- name: USERS_DRIVERS_LDAP_BIND_PASSWORD # - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: opencloud-config-secrets # name: opencloud-config-secrets
key: ldap-bind-password # key: ldap-bind-password
- name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD # - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
valueFrom: # valueFrom:
secretKeyRef: # secretKeyRef:
name: opencloud-config-secrets # name: opencloud-config-secrets
key: ldap-bind-password # key: ldap-bind-password
- name: OCM_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID - name: OCM_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
valueFrom: valueFrom:
secretKeyRef: secretKeyRef: