mirror of
https://github.com/ansible/awx-operator.git
synced 2026-03-26 21:33:14 +00:00
Deprecate LDAP auth (#1969)
deprecate external auth related configuration issue: https://issues.redhat.com/browse/AAP-29476
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
# Enabling LDAP Integration at AWX bootstrap
|
||||
# Enabling LDAP Integration at AWX bootstrap (Deprecated)
|
||||
|
||||
A sample of extra settings can be found as below. All possible options can be found here: <https://django-auth-ldap.readthedocs.io/en/latest/reference.html#settings>
|
||||
|
||||
|
||||
@@ -28,6 +28,7 @@ spec:
|
||||
- setting: MAX_PAGE_SIZE
|
||||
value: "500"
|
||||
|
||||
# LDAP is deprecated
|
||||
- setting: AUTH_LDAP_BIND_DN
|
||||
value: "cn=admin,dc=example,dc=com"
|
||||
|
||||
|
||||
@@ -4,11 +4,11 @@ In cases which you need to trust a custom Certificate Authority, there are few v
|
||||
|
||||
Trusting a custom Certificate Authority allows the AWX to access network services configured with SSL certificates issued locally, such as cloning a project from from an internal Git server via HTTPS. It is common for these scenarios, experiencing the error [unable to verify the first certificate](https://github.com/ansible/awx-operator/issues/376).
|
||||
|
||||
| Name | Description | Default |
|
||||
| -------------------------------- | ---------------------------------------- | --------|
|
||||
| ldap_cacert_secret | LDAP Certificate Authority secret name | '' |
|
||||
| ldap_password_secret | LDAP BIND DN Password secret name | '' |
|
||||
| bundle_cacert_secret | Certificate Authority secret name | '' |
|
||||
| Name | Description | Default |
|
||||
|-------------------------------------| ---------------------------------------- |---------|
|
||||
| ldap_cacert_secret _(deprecated)_ | LDAP Certificate Authority secret name | '' |
|
||||
| ldap_password_secret _(deprecated)_ | LDAP BIND DN Password secret name | '' |
|
||||
| bundle_cacert_secret | Certificate Authority secret name | '' |
|
||||
|
||||
Please note the `awx-operator` will look for the data field `ldap-ca.crt` in the specified secret when using the `ldap_cacert_secret`, whereas the data field `bundle-ca.crt` is required for `bundle_cacert_secret` parameter.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user