Files
homelab-v/k8s/infra/auth/lldap/bootstrap.yaml
T

52 lines
1.5 KiB
YAML

apiVersion: batch/v1
kind: Job
metadata:
name: lldap-bootstrap
namespace: lldap
annotations:
argocd.argoproj.io/hook: PostSync
argocd.argoproj.io/hook-delete-policy: BeforeHookCreation
spec:
template:
spec:
restartPolicy: OnFailure
containers:
- name: lldap-bootstrap
image: ghcr.io/lldap/lldap:2024-12-24-debian-rootless # renovate: docker=ghcr.io/lldap/lldap versioning=loose
command: [ /app/bootstrap.sh ]
envFrom:
- configMapRef:
name: common-env
- configMapRef:
name: bootstrap-env
env:
- name: LLDAP_ADMIN_PASSWORD
valueFrom:
secretKeyRef:
name: lldap-credentials
key: LLDAP_LDAP_USER_PASS
volumeMounts:
- name: users
mountPath: /bootstrap/user-configs
readOnly: true
- name: groups
mountPath: /bootstrap/group-configs
readOnly: true
volumes:
- name: users
projected:
sources:
- secret:
name: lldap-config
items:
- key: users.json
path: users.json
- name: groups
projected:
sources:
- secret:
name: lldap-config
items:
- key: groups.json
path: groups.json