---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ldap-auth
  labels:
    app: ldap-auth
spec:
  replicas: 1
  selector:
    matchLabels:
      app: ldap-auth
  template:
    metadata:
      labels:
        app: ldap-auth
        name: ldap-auth
    spec:
      containers:
      - name: ldap-auth
        image: linuxserver/ldap-auth
        imagePullPolicy: Always
        env:
        - name: WERTHER_LDAP_ENDPOINTS
          value: "openldap:389"
        - name: WERTHER_LDAP_BINDDN
          value: "cn=readonly,{{ .Values.homey.url | replace "." ",dc=" | printf "dc=%s " | trim }}"
        - name: WERTHER_LDAP_BINDPW
          valueFrom:
            secretKeyRef:
              name: openldap-ro
              key: password
        - name: WERTHER_LDAP_BASEDN
          value: "ou=users,{{ .Values.homey.url | replace "." ",dc=" | printf "dc=%s " | trim }}"
#        - name: LDAP_USER_FILTER
#          value: "(objectClass=inetOrgPerson)"
---
apiVersion: v1
kind: Service
metadata:
  name: ldap-auth
spec:
  selector:
    app: ldap-auth
  ports:
  - port: 80
    targetPort: 9000
    name: ldap-auth-port