Installs OpenLDAP and phpLDAPadmin with a small number of initial users for the purposes of demonstrating LDAP integration capabilities of ICP.
To install the chart, you'll need the helm cli and the IBM Cloud Private CLI
- Get the source code of the helm chart
git clone https://github.com/ibm-cloud-architecture/icp-openldap.git
- Package the helm chart using the helm cli
helm package icp-openldap
- If you have not, log in to your cluster from the IBM® Cloud Private CLI and log in to the Docker private image registry.
bx pr login -a https://<cluster_CA_domain>:8443 --skip-ssl-validation
Where cluster_CA_domain is the certificate authority (CA) domain. If you did not specify a CA domain, the default value is mycluster.icp. - Install the Helm chart
bx pr load-helm-chart --archive <helm_chart_archive> [--clustername <cluster_CA_domain>]
Where helm_chart_archive is the name of your compressed Helm chart file and <cluster_CA_domain> is the certificate authority (CA) domain. - Update the package repository by using the IBM® Cloud Private cluster management console.
- From the IBM® Cloud Private management console, click Menu > Admin > Repositories.
- Click Sync Repositories.
- Click Menu > Catalog The new Helm charts load into the Catalog, and you can install them into your cluster.
Kubernetes Assets in this chart.
OpenLDAP OpenLDAP
see details in official site
default values below
OpenLdap:
Image: "docker.io/osixia/openldap"
ImagePullPolicy: "Always"
Component: "openldap"
Replicas: 1
Cpu: "512m"
Memory: "200Mi"
Domain: "local.io"
AdminPassword: "admin"
Https: "false"
SeedUsers:
usergroup: "icpusers"
userlist: "user1,user2,user3,user4"
initialPassword: "ChangeMe"
phpLDAPadmin LDAP admin UI
see details in official site
default values below
PhpLdapAdmin:
Image: "docker.io/osixia/phpldapadmin"
ImageTag: "0.7.0"
ImagePullPolicy: "Always"
Component: "phpadmin"
Replicas: 1
NodePort: 31080
Cpu: "512m"
Memory: "200Mi"
Detailed information about LDAP support in ICP avilable on the IBM KnowledgeCenter
After the chart is deployed, follow these steps to setup LDAP authentication
-
From the helm release page take note of the OpenLDAP cluster ip and port for your deployment
-
Navigate to ICP > Security > LDAP connection and insert the following details
- Name:
ldap
- Type:
Custom
- ID:
openLDAP
- Realm:
openLDAPRealm
- Server host:
<cluster-ip>
- Port:
389
- Base DN:
dc=local,dc=io
(default value, adjust as needed) - Bind DN:
cn=admin,dc=local,dc=io
(default value, adjust as needed) - Admin Password:
admin
(default value, adjust as needed)
- Group filter:
(&(cn=%v)(objectclass=groupOfUniqueNames))
- User filter:
(&(uid=%v)(objectclass=person))
- Group ID map:
*:cn
- User ID map:
*:uid
- Group member ID map:
groupOfUniqueNames:uniquemember
Click Save
- Name:
-
Import users by navigating to ICP > Security > Users > Import Group
- Common Name(CN):
cn=icpusers
(default value, adjust as needed) - Organizational Unit(OU):
ou=groups
- Common Name(CN):
Inspired by work done by the Samsung Cloud Native Computing Team .