Skip to content

Caas-groupsynclist

The current deployment of Paas, we have running on Openshift internally, relies on running oc adm groups sync periodically.

The information for this sync comes from a ConfigMap called groupsynclist.

Only the LDAP queries mentioned in this ConfigMap are synced to OpenShift. We have a job in place, to keep this ConfigMap up-to-date with all Paas.groups.query field values on the cluster.

We are in the process of changing this logic to a more K8S generic solution for management of Users and Groups.

If you are working on ldap integration in a more K8S generic way, feel free to issue a PR.