Skip to content

OPA: Make principal name to LDAP configurable #145 #766

@Maleware

Description

@Maleware

Currently we generate the principal names out of deployment and namespace ( essentially the service name ) which works fine in single cluster environments.

If you want to create the same deployments for different environments ( dev, staging ) the principal names wouldn't change as the svc are the same.
This will fail in in average LDAP settings and thus we might want to be able to configure the principal name.

The problematic is, that the principals need to be unique. Maybe like sAMAccountName just a prefix or suffix.

Docs: https://docs.stackable.tech/home/stable/opa/usage-guide/user-info-fetcher/#backend-activedirectory

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions