DevOps/ansible-role-www
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Tiered LDAP groups

Browse Source
This commit is contained in:
eric
2026-10-29 14:24:47 -04:00
parent 4c1174df19
commit a56eec0b1c
9 changed files with 142 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/example-vars.yml
+9
View File
@@ -4,6 +4,15 @@ www_hostname: www.eom.dev
www_membership_image: registry.example.org/www-membership:2026-10-23
www_repo_version: refs/heads/main
www_membership_secret_name: www-membership-credentials
# Examples only: create dedicated groupOfUniqueNames entries and ACLs first.
# No automatic inheritance: include each group at every permitted level.
www_membership_service_groups:
"0": ["cn=community-chat,ou=membership-services,dc=eom,dc=dev"]
"1": ["cn=community-chat,ou=membership-services,dc=eom,dc=dev"]
"2": ["cn=community-chat,ou=membership-services,dc=eom,dc=dev", "cn=game-servers,ou=membership-services,dc=eom,dc=dev"]
"3": ["cn=community-chat,ou=membership-services,dc=eom,dc=dev", "cn=game-servers,ou=membership-services,dc=eom,dc=dev"]
"4": ["cn=community-chat,ou=membership-services,dc=eom,dc=dev", "cn=game-servers,ou=membership-services,dc=eom,dc=dev"]
"5": ["cn=community-chat,ou=membership-services,dc=eom,dc=dev", "cn=game-servers,ou=membership-services,dc=eom,dc=dev"]
www_membership_shkeeper_enabled: true
www_membership_environment_overrides:
# Optional plaintext LDAP for a trusted cluster only; sends passwords unencrypted.