Add OpenLDAP (#670)

* add initial work on openldap * fix indent * use latest common version * remove remaining nextcloud components... * disable ldap tls for now * correct common version * bump common version used to fix some issues * some slight OpenLDAP tweaks
2021-07-06 15:57:15 +02:00
parent 5b39389894
commit d6933350e9
10 changed files with 1345 additions and 0 deletions
@@ -0,0 +1,88 @@
+# Default values for Bitwarden.
+
+image:
+  repository: osixia/openldap
+  pullPolicy: IfNotPresent
+  tag: 1.5.0
+
+controller:
+  # -- Set the controller type.
+  # Valid options are deployment, daemonset or statefulset
+  type: statefulset
+  # -- Number of desired pods
+  replicas: 1
+  # -- Set the controller upgrade strategy
+  # For Deployments, valid values are Recreate (default) and RollingUpdate.
+  # For StatefulSets, valid values are OnDelete and RollingUpdate (default).
+  # DaemonSets ignore this.
+  strategy: RollingUpdate
+  rollingUpdate:
+    # -- Set deployment RollingUpdate max unavailable
+    unavailable: 1
+    # -- Set deployment RollingUpdate max surge
+    surge:
+    # -- Set statefulset RollingUpdate partition
+    partition:
+  # -- ReplicaSet revision history limit
+  revisionHistoryLimit: 3
+
+service:
+  main:
+    ports:
+      main:
+        port: 389
+  https:
+    ports:
+      https:
+        port: 636
+
+# Default configuration for openldap as environment variables. These get injected directly in the container.
+# Use the env variables from https://github.com/osixia/docker-openldap#beginner-guide
+env:
+  LDAP_LOG_LEVEL: "256"
+  LDAP_ORGANISATION: "Example Inc."
+  LDAP_DOMAIN: "example.org"
+  LDAP_READONLY_USER: "false"
+  LDAP_READONLY_USER_USERNAME: "readonly"
+  LDAP_READONLY_USER_PASSWORD: "readonly"
+  LDAP_RFC2307BIS_SCHEMA: "false"
+  LDAP_BACKEND: "mdb"
+  LDAP_TLS: "true"
+  LDAP_TLS_ENFORCE: "false"
+  LDAP_TLS_VERIFY_CLIENT: "never"
+  LDAP_TLS_PROTOCOL_MIN: "3.0"
+  LDAP_TLS_CIPHER_SUITE: "NORMAL"
+  LDAP_TLS_REQCERT: "never"
+  CONTAINER_LOG_LEVEL: "4"
+  KEEP_EXISTING_CONFIG: "false"
+  LDAP_REMOVE_CONFIG_AFTER_SETUP: "true"
+  LDAP_SSL_HELPER_PREFIX: "ldap"
+  LDAP_ADMIN_PASSWORD: "ldapadmin"
+  LDAP_CONFIG_PASSWORD: "changeme"
+
+replication:
+  enabled: false
+  # Enter the name of your cluster, defaults to "cluster.local"
+  clusterName: "cluster.local"
+  retry: 60
+  timeout: 1
+  interval: 00:00:00:10
+  starttls: "critical"
+  tls_reqcert: "never"
+
+envFrom:
+  - configMapRef:
+      name: openldapconfig
+
+# -- Used in conjunction with `controller.type: statefulset` to create individual disks for each instance.
+volumeClaimTemplates:
+  data:
+    enabled: true
+    mountPath: "/var/lib/ldap"
+    accessMode: ReadWriteOnce
+    size: "100Gi"
+  slapd:
+    enabled: true
+    mountPath: "/etc/ldap/slapd.d"
+    accessMode: ReadWriteOnce
+    size: "100Gi"