-
Notifications
You must be signed in to change notification settings - Fork 90
Open
Description
High level steps used on OCP 4.1 to set up LDAP group sync. Adding the steps here as requested via internal chat.
- Create
Secretnamedldap-bind-secretinopenshift-confignamespace withdata.bindPasswordcontaining the base64 encoded bind password. - Create
ConfigMapnamedldap-ca-config-mapinopenshift-confignamespace withdataspecced toca.crtcontaining the CA Cert. - Create
Namespacenamedinfra-cronjobswith labelname: infra-cronjobs - Create
ConfigMapin theinfra-cronjobsnamespace containingdatawithca.crtdefined as well asldap-group-sync.yamlcontaining the required data defined in the OCP 4.1 Auth Providers: AD/LDAP docs. - Create
CronJobnamedldap-group-syncin namespaceinfra-cronfjobscontaining a spec consuming the items created prior. - Create
ClusterRolenamedldap-group-syncerwith rules allowingget,list,create,update, anddeleteongroupresources. - Create
ClusterRoleBindingnamedsystem:ldap-group-syncerswithroleRefset toldap-group-syncerforldap-group-syncerservice account - Create
ServiceAccountnamedldap-group-syncerin namespaceinfra-cronjobs - Create
Jobnamedinitial-ldap-group-syncin namespaceinfra-cronjobswhich consumes the body of theCronJobcreated in step 5 in order to kick things off.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels