3db38aded0
- Removed init-config container (OpenCloud supports native bash substitution)
- Mount opencloud-config ConfigMap directly to /etc/opencloud
- Added gateway storage configuration with ${OC_STORAGE_MOUNT_ID|}
- Updated all LDAP services to use ${OPENLDAP_ADMIN_PASSWORD|} substitution
- Added auth-basic auth_providers structure
Services starting successfully:
- Gateway, users, sharing services running
- Users service connected to external OpenLDAP
- Remaining: auth-basic bind_password configuration issue
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
73 lines
2.3 KiB
YAML
73 lines
2.3 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: opencloud-config
|
|
namespace: opencloud
|
|
data:
|
|
opencloud.yaml: |
|
|
# OpenCloud Minimal Configuration
|
|
# Only non-default settings - environment variables override these
|
|
|
|
# Graph service - external OpenLDAP configuration
|
|
graph:
|
|
identity:
|
|
ldap:
|
|
uri: ldap://openldap.opencloud.svc.cluster.local:389
|
|
base_dn: dc=basicstack,dc=de
|
|
bind_dn: cn=admin,dc=basicstack,dc=de
|
|
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
|
|
user_base_dn: ou=users,dc=basicstack,dc=de
|
|
group_base_dn: ou=groups,dc=basicstack,dc=de
|
|
insecure: true
|
|
|
|
# Proxy service - OIDC configuration (already in env vars, kept for reference)
|
|
proxy:
|
|
oidc:
|
|
issuer: https://auth.basicstack.de
|
|
insecure: false
|
|
auto_provision_accounts: true
|
|
user_oidc_claim: preferred_username
|
|
enable_basic_auth: false
|
|
|
|
# Auth-basic service - LDAP configuration
|
|
auth-basic:
|
|
auth_providers:
|
|
ldap:
|
|
uri: ldap://openldap.opencloud.svc.cluster.local:389
|
|
base_dn: dc=basicstack,dc=de
|
|
bind_dn: cn=admin,dc=basicstack,dc=de
|
|
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
|
|
user_base_dn: ou=users,dc=basicstack,dc=de
|
|
insecure: true
|
|
|
|
# Users service - external LDAP
|
|
users:
|
|
drivers:
|
|
ldap:
|
|
uri: ldap://openldap.opencloud.svc.cluster.local:389
|
|
base_dn: dc=basicstack,dc=de
|
|
bind_dn: cn=admin,dc=basicstack,dc=de
|
|
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
|
|
user_base_dn: ou=users,dc=basicstack,dc=de
|
|
user_filter: (objectClass=inetOrgPerson)
|
|
user_object_class: inetOrgPerson
|
|
insecure: true
|
|
|
|
# Groups service - external LDAP
|
|
groups:
|
|
drivers:
|
|
ldap:
|
|
uri: ldap://openldap.opencloud.svc.cluster.local:389
|
|
base_dn: dc=basicstack,dc=de
|
|
bind_dn: cn=admin,dc=basicstack,dc=de
|
|
bind_password: ${OPENLDAP_ADMIN_PASSWORD|}
|
|
group_base_dn: ou=groups,dc=basicstack,dc=de
|
|
group_filter: (objectClass=groupOfNames)
|
|
group_object_class: groupOfNames
|
|
insecure: true
|
|
|
|
# Gateway service - storage configuration
|
|
gateway:
|
|
storage_registry:
|
|
storage_users_mount_id: ${OC_STORAGE_MOUNT_ID}
|