mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-30 15:28:12 +02:00
Kevin Veen-Birkenbach
cb66fb2978
- Converted group_vars/all/13_ldap.yml from lower-case to ALL-CAPS nested keys. - Updated all roles, tasks, templates, and filter_plugins to reference LDAP.* instead of ldap.*. - Fixed Keycloak JSON templates to properly quote Jinja variables. - Adjusted svc-db-openldap filter plugins and unit tests to handle new LDAP structure. - Updated integration test to only check uniqueness of TOP-LEVEL ALL-CAPS constants, ignoring nested keys. See: https://chatgpt.com/share/68b01017-efe0-800f-a508-7d7e2f1c8c8d
29 lines
1.1 KiB
Django/Jinja
29 lines
1.1 KiB
Django/Jinja
{% include 'roles/docker-compose/templates/base.yml.j2' %}
|
|
|
|
application:
|
|
image: "{{ openldap_image }}:{{ openldap_version }}"
|
|
container_name: "{{ openldap_name }}"
|
|
{% include 'roles/docker-container/templates/base.yml.j2' %}
|
|
{% if openldap_network_expose_local %}
|
|
ports:
|
|
- 127.0.0.1:{{ports.localhost.ldap['svc-db-openldap']}}:{{openldap_docker_port_open}}
|
|
{% endif %}
|
|
volumes:
|
|
- 'data:/bitnami/openldap'
|
|
- '{{openldap_ldif_host_path}}:{{ openldap_ldif_docker_path }}:ro'
|
|
healthcheck:
|
|
test: >
|
|
bash -c '
|
|
ldapsearch -x -H ldap://localhost:{{ openldap_docker_port_open }} \
|
|
-D "{{ LDAP.DN.ADMINISTRATOR.DATA }}" -w "{{ LDAP.BIND_CREDENTIAL }}" -b "{{ LDAP.DN.ROOT }}" > /dev/null \
|
|
&& ldapsearch -Y EXTERNAL -H ldapi:/// \
|
|
-b cn=config "(&(objectClass=olcOverlayConfig)(olcOverlay=memberof))" \
|
|
| grep "olcOverlay:" | grep -q "memberof"
|
|
'
|
|
{% include 'roles/docker-container/templates/networks.yml.j2' %}
|
|
|
|
{% include 'roles/docker-compose/templates/volumes.yml.j2' %}
|
|
data:
|
|
name: "{{ openldap_volume }}"
|
|
|
|
{% include 'roles/docker-compose/templates/networks.yml.j2' %} |