Skip to content

Commit

Permalink
dbildungs-iam-ldap
Browse files Browse the repository at this point in the history
  • Loading branch information
dbildungs-iam-ldap-gha committed Dec 18, 2024
1 parent 5e1ef10 commit ab49df5
Show file tree
Hide file tree
Showing 3 changed files with 20 additions and 18 deletions.
2 changes: 1 addition & 1 deletion automation/dbildungs-iam-ldap/Chart.lock
Original file line number Diff line number Diff line change
Expand Up @@ -6,4 +6,4 @@ dependencies:
repository: https://charts.bitnami.com/bitnami
version: 2.27.0
digest: sha256:63b46b2edf8052dbee0f4b2111a8838aa521f9fc95681e0ee3f32274aa4473a6
generated: "2024-12-18T06:40:40.954740009Z"
generated: "2024-12-18T07:57:37.704665617Z"
4 changes: 2 additions & 2 deletions automation/dbildungs-iam-ldap/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
apiVersion: v2
appVersion: SPSH-1529
appVersion: dbp-1084
dependencies:
- condition: phpldapadmin.enabled
name: phpldapadmin
Expand All @@ -16,4 +16,4 @@ keywords:
- ldap
- openldap
name: dbildungs-iam-ldap
version: 0.0.0-spsh-1529-20241218-0640
version: 0.0.0-dbp-1084-20241218-0757
32 changes: 17 additions & 15 deletions automation/dbildungs-iam-ldap/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -77,12 +77,12 @@ env:
# LDAP_EXTRA_SCHEMAS: cosine,inetorgperson,nis

# Security
LDAP_ENABLE_TLS: "no"
LDAP_ENABLE_TLS: "yes"
# LDAP_ENABLE_TLS: "no" # disable it for testing with phpldapadmin
# LDAP_REQUIRE_TLS: "yes" # not sure whether this is necessary, it breaks stuff
LDAPTLS_REQCERT: "never"
LDAP_TLS_ENFORCE: "false"
LDAP_ALLOW_ANON_BINDING: "yes"
LDAP_ALLOW_ANON_BINDING: "no"

# Accesslog
LDAP_ENABLE_ACCESSLOG: "yes"
Expand Down Expand Up @@ -333,8 +333,8 @@ initSchema:
## 'initTlsSecret' init container parameters
## need a secret with tls.crt, tls.key
initTLSSecret:
tls_enabled: false
# adminldap, per default disabled only works with tls_enabled
tls_enabled: false
# tls_enabled: true # needs to get enabled if you want to make the service available to the outside
# Note that only one namespace at a time can use this feature and that you need to copy a tls secret into the namespace, see Confluence for more information
image:
Expand Down Expand Up @@ -401,24 +401,26 @@ customStartupProbe: {}

## phpldapadmin
## For more parameters check following file: ./charts/phpldapadmin/values.yaml
# if you want to use phpldapadmin for debugging set:
env:
LDAP_ENABLE_TLS: "no"
# if you want to use phpldapadmin for debugging set:
# initTLSSecret:
# tls_enabled: false
# env:
# LDAP_ENABLE_TLS: "no"
phpldapadmin:
enabled: true
enabled: false
image:
tag: 0.9.0
env:
PHPLDAPADMIN_LDAP_CLIENT_TLS_REQCERT: "never"
ingress:
enabled: true
annotations:
kubernetes.io/ingress.class: "nginx"
hosts:
- spsh-1529-phpldapadmin.dev.spsh.dbildungsplattform.de
annotations: {}
# ingressClassName: nginx
path: /
pathType: Prefix
tls:
- secretName: phpldapadmin-tls
hosts:
- spsh-1529-phpldapadmin.dev.spsh.dbildungsplattform.de
hosts:
- phpldapadmin.example
tls: []
# - secretName: phpldapadmin.example
# hosts:
# - phpldapadmin.example

0 comments on commit ab49df5

Please sign in to comment.