helm openldap - choisungwook/portfolio GitHub Wiki

개요

  • openldap helm 설치

문제

  • openldap은 docker image만 공식?지원하고 helm은 미지원
  • 인터넷상에 배포되는 helm차트는 공식 docker image를 가지고 커스터마이징한 것
  • 자료조사 결과 https://github.com/jp-gouin/helm-openldap 을 사용하기로 결정

helm repo 추가

helm repo add helm-openldap https://jp-gouin.github.io/helm-openldap/
helm repo update

override_values.yaml파일 추가

  • https 비활성화
  • replicas를 1개
replicaCount: 1
env:
  LDAP_ORGANISATION: "choilab"
  LDAP_DOMAIN: "demo.com"
  LDAP_TLS: "false"
  LDAP_TLS_ENFORCE: "false"
  LDAP_REMOVE_CONFIG_AFTER_SETUP: "true"
  LDAP_READONLY_USER: "true"
  LDAP_READONLY_USER_USERNAME: readonly
  LDAP_READONLY_USER_MASSWORD: password

phpldapadmin:
  ingress:
    hosts:
    - phpldapadmin.choilab.xyz
  env:
    PHPLDAPADMIN_LDAP_HOSTS: "ldap://ldap-openldap-stack-ha-headless.ldap.svc:389"
    PHPLDAPADMIN_HTTPS: "false"
    PHPLDAPADMIN_TRUST_PROXY_SSL: "true"

adminPassword: password
configPassword: password

customLdifFiles:
  initial.ldif: |-
    dn: ou=User,dc=demo,dc=com
    objectClass: organizationalUnit
    ou: User

    dn: ou=User,dc=demo,dc=com
    objectClass: organizationalUnit
    ou: Group

helm install

helm install -n ldap --create-namespace -f override_values.yaml ldap  helm-openldap/openldap-stack-ha

ldap 설정 확인

pod port-forward

kubectl port-forward --namespace ldap ldap-openldap-stack-ha-0 12000:389

ldapsearch 명령어 실행

ldeapsearch 명령어가 설치되어 있어야 한다.

ldapsearch -x -H ldap://127.0.0.1:12000 -b dc=demo,dc=com -D "cn=admin,dc=demo,dc=com" -w password

참고자료

블로그 유투브

⚠️ **GitHub.com Fallback** ⚠️