You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
High level steps used on OCP 4.1 to set up LDAP group sync. Adding the steps here as requested via internal chat.
Create Secret named ldap-bind-secret in openshift-config namespace with data.bindPassword containing the base64 encoded bind password.
Create ConfigMap named ldap-ca-config-map in openshift-config namespace with data specced to ca.crt containing the CA Cert.
Create Namespace named infra-cronjobs with label name: infra-cronjobs
Create ConfigMap in the infra-cronjobs namespace containing data with ca.crt defined as well as ldap-group-sync.yaml containing the required data defined in the OCP 4.1 Auth Providers: AD/LDAP docs.
Create CronJob named ldap-group-sync in namespace infra-cronfjobs containing a spec consuming the items created prior.
Create ClusterRole named ldap-group-syncer with rules allowing get, list, create, update, and delete on group resources.
Create ClusterRoleBinding named system:ldap-group-syncers with roleRef set to ldap-group-syncer for ldap-group-syncer service account
Create ServiceAccount named ldap-group-syncer in namespace infra-cronjobs
Create Job named initial-ldap-group-sync in namespace infra-cronjobs which consumes the body of the CronJob created in step 5 in order to kick things off.
The text was updated successfully, but these errors were encountered:
High level steps used on OCP 4.1 to set up LDAP group sync. Adding the steps here as requested via internal chat.
Secret
namedldap-bind-secret
inopenshift-config
namespace withdata.bindPassword
containing the base64 encoded bind password.ConfigMap
namedldap-ca-config-map
inopenshift-config
namespace withdata
specced toca.crt
containing the CA Cert.Namespace
namedinfra-cronjobs
with labelname: infra-cronjobs
ConfigMap
in theinfra-cronjobs
namespace containingdata
withca.crt
defined as well asldap-group-sync.yaml
containing the required data defined in the OCP 4.1 Auth Providers: AD/LDAP docs.CronJob
namedldap-group-sync
in namespaceinfra-cronfjobs
containing a spec consuming the items created prior.ClusterRole
namedldap-group-syncer
with rules allowingget
,list
,create
,update
, anddelete
ongroup
resources.ClusterRoleBinding
namedsystem:ldap-group-syncers
withroleRef
set toldap-group-syncer
forldap-group-syncer
service accountServiceAccount
namedldap-group-syncer
in namespaceinfra-cronjobs
Job
namedinitial-ldap-group-sync
in namespaceinfra-cronjobs
which consumes the body of theCronJob
created in step 5 in order to kick things off.The text was updated successfully, but these errors were encountered: