Skip to content

Add ldap bind password lookup to chart #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
tylerauerbeck opened this issue Jan 1, 2021 · 3 comments
Open

Add ldap bind password lookup to chart #11

tylerauerbeck opened this issue Jan 1, 2021 · 3 comments

Comments

@tylerauerbeck
Copy link
Contributor

We should add the lookup of the bind password value to the gitlab helper functions as this tends to cause an issue with user lookup if not set appropriately.

@jtudelag
Copy link
Contributor

jtudelag commented Jan 13, 2021

Hey @tylerauerbeck I have struggled to make the LDAP integration for Gitlab, I have realized there is kind a chicken egg problem with the bind password lookup and the secret. I think we might want to add a secret template in the chart, or just get rid od the secret Lookup and just pass the password directly as a variable in the Values file.

@tylerauerbeck
Copy link
Contributor Author

@jtudelag The only issue I've seen is when I forget to update this secret name in the values file:
https://github.com/rht-labs/enablement-framework/blob/main/tooling/charts/do500/values.yaml#L47

In that case, since the dummy secret name I have there doesn't exist it returns a blank file (and then the gitlab configure has an empty bind password).

There shouldn't be too much of a chicken and the egg issue here becuase the bind password and secret are already created as part of the cluster deploy (so far before the gitlab or any of the other do500 components are ever stood up). Happy to take a look at this with you at some point though if there's just something else I haven't seen up to this point.

@jtudelag
Copy link
Contributor

jtudelag commented Jan 13, 2021

@jtudelag The only issue I've seen is when I forget to update this secret name in the values file:
https://github.com/rht-labs/enablement-framework/blob/main/tooling/charts/do500/values.yaml#L47

In that case, since the dummy secret name I have there doesn't exist it returns a blank file (and then the gitlab configure has an empty bind password).

There shouldn't be too much of a chicken and the egg issue here becuase the bind password and secret are already created as part of the cluster deploy (so far before the gitlab or any of the other do500 components are ever stood up). Happy to take a look at this with you at some point though if there's just something else I haven't seen up to this point.

Prob I did not explain myself correctly, my point is, assuming Gitlab Pod can only reference secrets within it's own namespace, and that NS is usually created by the DO500 chart, a secret with the bindPassword data should be part of the Gitlab manifests. I don't see how you can reference an already created secret in the cluster.

Am I talking non-sense??? 🙄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants