TLS

tests/render.yml

@@ -27,12 +27,20 @@
         dest: "/tmp/www-test-{{ item }}.yml"
         mode: "0600"
       loop: [website, membership-config, membership-postgres, membership-migrate, membership-workloads]
+    - name: Enable explicit plaintext LDAP fixture
+      ansible.builtin.set_fact:
+        www_membership_environment: "{{ www_membership_environment | combine({'LDAP_URL': 'ldap://openldap.openldap.svc.cluster.local:389', 'LDAP_ALLOW_INSECURE': '1'}) }}"
+    - name: Render plaintext LDAP configuration
+      ansible.builtin.template:
+        src: ../templates/membership-config.yml.j2
+        dest: /tmp/www-test-plaintext-membership-config.yml
+        mode: "0600"
     - name: Enable optional external database and private CA fixture
       ansible.builtin.set_fact:
         www_membership_postgres_managed: false
         www_membership_ca_secret_name: private-ca
         www_image_pull_secrets: [{name: registry-pull}]
-        www_membership_environment: "{{ www_membership_environment | combine({'POSTGRES_HOST': 'postgres.example.org', 'POSTGRES_SSLMODE': 'verify-full', 'PGSSLROOTCERT': '/etc/membership/ca/db.pem', 'LDAP_CA_CERT_FILE': '/etc/membership/ca/ldap.pem', 'SHKEEPER_URL': 'https://crypto.example.org', 'SHKEEPER_CURRENCIES': 'BTC,XMR', 'SHKEEPER_CA_CERT_FILE': '/etc/membership/ca/shkeeper.pem'}) }}"
+        www_membership_environment: "{{ www_membership_environment | combine({'LDAP_URL': 'ldaps://ldap.example.com', 'LDAP_ALLOW_INSECURE': '0', 'POSTGRES_HOST': 'postgres.example.org', 'POSTGRES_SSLMODE': 'verify-full', 'PGSSLROOTCERT': '/etc/membership/ca/db.pem', 'LDAP_CA_CERT_FILE': '/etc/membership/ca/ldap.pem', 'SHKEEPER_URL': 'https://crypto.example.org', 'SHKEEPER_CURRENCIES': 'BTC,XMR', 'SHKEEPER_CA_CERT_FILE': '/etc/membership/ca/shkeeper.pem'}) }}"
     - name: Render external provider variants
       ansible.builtin.template:
         src: "../templates/{{ item }}.yml.j2"