Comment out LDAP environment variables for built-in IDM

When using OpenCloud's built-in IDM service, the graph, users, and groups
services should not use external LDAP. Commented out all LDAP-specific
environment variables that were causing startup failures.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-05 20:45:19 +00:00
parent ab5cc5aaae
commit c1c85a684e

View file

@ -268,34 +268,34 @@ spec:
name: opencloud-config-secrets
key: graph-application-id
# LDAP bind passwords
- name: OC_GRAPH_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: graph-ldap-bind-password
- name: OC_IDP_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: idp-ldap-bind-password
- name: OC_USERS_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: ldap-bind-password
- name: OC_GROUPS_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: ldap-bind-password
# LDAP bind passwords (commented out - using built-in IDM instead of external LDAP)
# - name: OC_GRAPH_LDAP_BIND_PASSWORD
# valueFrom:
# secretKeyRef:
# name: opencloud-config-secrets
# key: graph-ldap-bind-password
# - name: OC_IDP_LDAP_BIND_PASSWORD
# valueFrom:
# secretKeyRef:
# name: opencloud-config-secrets
# key: idp-ldap-bind-password
# - name: OC_USERS_LDAP_BIND_PASSWORD
# valueFrom:
# secretKeyRef:
# name: opencloud-config-secrets
# key: ldap-bind-password
# - name: OC_GROUPS_LDAP_BIND_PASSWORD
# valueFrom:
# secretKeyRef:
# name: opencloud-config-secrets
# key: ldap-bind-password
# External OpenLDAP admin password (for user/group storage)
- name: OPENLDAP_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: openldap-admin-secret
key: admin-password
# External OpenLDAP admin password (commented out - using built-in IDM)
# - name: OPENLDAP_ADMIN_PASSWORD
# valueFrom:
# secretKeyRef:
# name: openldap-admin-secret
# key: admin-password
# IDM service user passwords
- name: OC_IDM_ADMIN_PASSWORD
@ -337,11 +337,11 @@ spec:
secretKeyRef:
name: opencloud-config-secrets
key: graph-application-id
- name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: graph-ldap-bind-password
# - name: GRAPH_IDENTITY_LDAP_BIND_PASSWORD
# valueFrom:
# secretKeyRef:
# name: opencloud-config-secrets
# key: graph-ldap-bind-password
- name: GRAPH_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
valueFrom:
secretKeyRef:
@ -356,11 +356,11 @@ spec:
value: "false"
- name: GRAPH_USERNAME_MATCH
value: "none"
- name: IDP_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: idp-ldap-bind-password
# - name: IDP_LDAP_BIND_PASSWORD
# valueFrom:
# secretKeyRef:
# name: opencloud-config-secrets
# key: idp-ldap-bind-password
- name: IDM_SERVICE_USER_PASSWORDS_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
@ -416,16 +416,16 @@ spec:
secretKeyRef:
name: opencloud-config-secrets
key: storage-mount-id
- name: USERS_DRIVERS_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: ldap-bind-password
- name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
valueFrom:
secretKeyRef:
name: opencloud-config-secrets
key: ldap-bind-password
# - name: USERS_DRIVERS_LDAP_BIND_PASSWORD
# valueFrom:
# secretKeyRef:
# name: opencloud-config-secrets
# key: ldap-bind-password
# - name: GROUPS_DRIVERS_LDAP_BIND_PASSWORD
# valueFrom:
# secretKeyRef:
# name: opencloud-config-secrets
# key: ldap-bind-password
- name: OCM_SERVICE_ACCOUNT_SERVICE_ACCOUNT_ID
valueFrom:
secretKeyRef: