---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ldap-auth
  labels:
    app: ldap-auth
spec:
  replicas: 1
  selector:
    matchLabels:
      app: ldap-auth
  template:
    metadata:
      labels:
        app: ldap-auth
        name: ldap-auth
    spec:
      containers:
      - name: ldap-auth
        image: dignajar/another-ldap-auth:latest
        imagePullPolicy: Always
        env:
        - name: LDAP_ENDPOINT
          value: "ldap://openldap:389"
        - name: LDAP_MANAGER_DN_USERNAME
          value: "cn=readonly,{{ .Values.homey.url | replace "." ",dc=" | printf "dc=%s " | trim }}"
        - name: LDAP_MANAGER_PASSWORD
          valueFrom:
            secretKeyRef:
              name: openldap-ro
              key: password
        - name: LDAP_SEARCH_BASE
          value: "ou=users,{{ .Values.homey.url | replace "." ",dc=" | printf "dc=%s " | trim }}"
        - name: LDAP_SEARCH_FILTER
          value: "(objectClass=inetOrgPerson)"
        - name: LDAP_BIND_DN
          value: "uid={username},ou=users,{{ .Values.homey.url | replace "." ",dc=" | printf "dc=%s " | trim }}"
---
apiVersion: v1
kind: Service
metadata:
  name: ldap-auth
spec:
  selector:
    app: ldap-auth
  ports:
  - port: 80
    targetPort: 9000
    name: ldap-auth-port