ibm-cloud-architecture / icp-openldap Goto Github PK

We have connected our openldap server against our icp and are able to see our teams and user in the icp, but when we try to login with a ldap user, we get an authentication error. We are also not able to see any request from icp against our ldap server, in the ldap logs.

Openldap container try to run as root but container can't run as root by default in ICP v3.1.1.

To allow container run as root, we need to create PodSecurityPolicy, ClusterRole and ClusterRoleBinding.
We can use PodSecurityPolicy and ClusterRole created by ICP.
In that case we need to create only ClusterRoleBinding something like below.

kubectl create clusterrolebinding ibm-privileged-openldap \
  --clusterrole=ibm-privileged-clusterrole \
  --serviceaccount=<namespace>:default

I have followed the guidance here on 3.1.1 and when I try to save the new LDAP configuration it fails with "The LDAP search failed. Confirm your User filter parameter values and try again." I have used the filter values as described here. The Test Connection button works OK so my OpenLDAP PoD seems to be up OK. Any ideas on how to debug this?

[ERROR] Chart.yaml: directory name (icp-openldap) and chart name (openldap) must be the same

Why do I get this error? I'm on ICP 3.1.2

cloudctl catalog load-archive --archive icp-openldap-0.1.5.tgz
Expanding archive
OK

FAILED
open /tmp/icp641077065/icp-openldap/manifest.json: no such file or directory