Expose LDAP parameters for bootstack via values (#10209)

* [stable/bookstack] add support for ldap auth

Signed-off-by: Rafal Gembalik <rafal.gembalik@codewave.pl>

* Remove default values for ldap parameters

Signed-off-by: Rafal Gembalik <rafal.gembalik@codewave.pl>

* Remove default values for ldap parameters

Signed-off-by: Rafal Gembalik <rafal.gembalik@codewave.pl>

* bump chart to v1 since its in stable.

Signed-off-by: Paul Czarkowski <username.taken@gmail.com>

stable/bookstack/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v1
 appVersion: 0.24.3
 description: BookStack is a simple, self-hosted, easy-to-use platform for organising and storing information.
 name: bookstack
-version: 0.1.3
+version: 1.0.0
 home: https://www.bookstackapp.com/
 sources:
 - https://github.com/BookStackApp/BookStack

stable/bookstack/README.md

@@ -87,6 +87,13 @@ The following table lists the configurable parameters of the Redmine chart and t
 | `ingress.tls[i].secretName`       | The secret kubernetes.io/tls             | `nil`                                                   |
 | `ingress.tls[i].hosts[j]`         | The virtual host name                    | `nil`                                                   |
 | `resources`                       | Resources allocation (Requests and Limits) | `{}` |
+| `ldap.enabled`                    | Enable or disable LDAP authentication. [See official docs for details](https://www.bookstackapp.com/docs/admin/ldap-auth/) | `false` |
+| `ldap.server`                    | LDAP server address | `nil` |
+| `ldap.base_dn`                    | Base DN where users will be searched | `nil` |
+| `ldap.dn`                    | User which will make search queries. Leave empty to search anonymously. | `nil` |
+| `ldap.pass`                    | Password of user performing search queries.  | `nil` |
+| `ldap.userFilter`                    | A filter to use when searching for users | `nil` |
+| `ldap.version`                    | Set the LDAP version to use when connecting to the server. Required especially when using AD. | `nil` |
 
 The above parameters map to the env variables defined in the [Bookstack image](https://hub.docker.com/r/solidnerd/bookstack/) and the MariaDB/MySQL database settings. For more information please refer to the [Bookstack](https://hub.docker.com/r/solidnerd/bookstack/) image documentation.
 

stable/bookstack/templates/deployment.yaml

@@ -37,6 +37,22 @@ spec:
               path: /
               port: http
           env:
+          {{- if .Values.ldap.enabled }}
+            - name: AUTH_METHOD
+              value: ldap
+            - name: LDAP_SERVER
+              value: {{ .Values.ldap.server | quote }}
+            - name: LDAP_BASE_DN
+              value: {{ .Values.ldap.base_dn | quote }}
+            - name: LDAP_DN
+              value: {{ .Values.ldap.dn | quote }}
+            - name: LDAP_PASS
+              value: {{ .Values.ldap.pass | quote }}
+            - name: LDAP_USER_FILTER
+              value: {{ .Values.ldap.userFilter | quote }}
+            - name: LDAP_VERSION
+              value: {{ .Values.ldap.version | quote }}
+          {{- end }}
           {{- if .Values.mariadb.enabled }}
             - name: DB_HOST
               value: {{ template "bookstack.mariadb.fullname" . }}

stable/bookstack/values.yaml

@@ -160,3 +160,13 @@ nodeSelector: {}
 tolerations: []
 
 affinity: {}
+
+## Enable ldap authentication. See https://www.bookstackapp.com/docs/admin/ldap-auth/ for details on how to set it up.
+ldap:
+  enabled: false
+  server:
+  base_dn:
+  dn:
+  pass:
+  userFilter:
+  version: