From 401aa5e754eb4409b551aab8c382497ea548937f Mon Sep 17 00:00:00 2001 From: radex Date: Fri, 13 Oct 2023 22:11:43 +0200 Subject: [PATCH] hswaw/ldapweb: update to latest, add service user Change-Id: I2cc20d35d0a141bc2ea1948942f9518c84e7ea41 Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1727 Reviewed-by: informatic --- hswaw/ldapweb/prod.jsonnet | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/hswaw/ldapweb/prod.jsonnet b/hswaw/ldapweb/prod.jsonnet index 65b30ceb..589df764 100644 --- a/hswaw/ldapweb/prod.jsonnet +++ b/hswaw/ldapweb/prod.jsonnet @@ -8,7 +8,11 @@ local kube = import "../../kube/kube.libsonnet"; name: 'ldapweb', namespace: 'ldapweb', domain: 'profile.hackerspace.pl', - image: 'registry.k0.hswaw.net/radex/ldap-web:1695486391', + image: 'registry.k0.hswaw.net/radex/ldap-web:1697292240', + }, + + secrets:: { + admin_password: { secretKeyRef: { name: cfg.name, key: 'admin_password' } }, }, ns: kube.Namespace(cfg.namespace), @@ -22,8 +26,8 @@ local kube = import "../../kube/kube.libsonnet"; default: kube.Container("default") { image: cfg.image, resources: { - requests: { cpu: "25m", memory: "64Mi" }, - limits: { cpu: "500m", memory: "128Mi" }, + requests: { cpu: "25m", memory: "256Mi" }, + limits: { cpu: "500m", memory: "512Mi" }, }, ports_: { http: { containerPort: 8000 }, @@ -31,6 +35,9 @@ local kube = import "../../kube/kube.libsonnet"; env_: { LDAPWEB_ADMIN_GROUPS: 'ldap-admin,staff,zarzad', LDAPWEB_ACTIVE_GROUPS: 'fatty,starving,potato', + LDAPWEB_ADMIN_DN: 'cn=ldapweb,ou=services,dc=hackerspace,dc=pl', + LDAPWEB_ADMIN_PASSWORD: top.secrets.admin_password, + LDAPWEB_AVATAR_CACHE_TIMEOUT: '1800', } }, },