Skip to content

Improve LDAP implementation#28

Merged
adambarreiro merged 46 commits intovmware:mainfrom
adambarreiro:fix-ldap
Feb 27, 2025
Merged

Improve LDAP implementation#28
adambarreiro merged 46 commits intovmware:mainfrom
adambarreiro:fix-ldap

Conversation

@adambarreiro
Copy link
Copy Markdown
Contributor

@adambarreiro adambarreiro commented Jan 31, 2025

Adds vcfa_provider_ldap resource and data source to support configuring LDAP in the Provider (System) organization.
This complements vcfa_org_ldap which is just for regular Organizations (tenants).

Also:

  • Adds auto_trust_certificate argument to automatically trust SSL certificates from LDAPS.
  • Updates docs
  • Removes useless password attribute from LDAP data sources

abarreiro added 10 commits January 31, 2025 10:08
Signed-off-by: abarreiro <abarreiro@vmware.com>
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
@adambarreiro adambarreiro self-assigned this Jan 31, 2025
abarreiro added 19 commits January 31, 2025 13:32
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
#
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
abarreiro added 11 commits February 17, 2025 16:43
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
 into fix-ldap

Signed-off-by: abarreiro <abarreiro@vmware.com>
@adambarreiro adambarreiro marked this pull request as ready for review February 18, 2025 11:06
abarreiro added 2 commits February 24, 2025 10:44
Signed-off-by: abarreiro <abarreiro@vmware.com>
fmt
Signed-off-by: abarreiro <abarreiro@vmware.com>
Copy link
Copy Markdown
Contributor

@Didainius Didainius left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

Only one consideration inline.
Automated and manual testing worked

Signed-off-by: abarreiro <abarreiro@vmware.com>
Copy link
Copy Markdown

@lvirbalas lvirbalas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

An ask on most of the For example, statements in the Description fields.

Copy link
Copy Markdown

@lvirbalas lvirbalas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One request, and looks great!

abarreiro added 3 commits February 27, 2025 10:43
Signed-off-by: abarreiro <abarreiro@vmware.com>
Signed-off-by: abarreiro <abarreiro@vmware.com>
nit
Signed-off-by: abarreiro <abarreiro@vmware.com>
@adambarreiro adambarreiro merged commit bd7533d into vmware:main Feb 27, 2025
3 checks passed
@adambarreiro adambarreiro deleted the fix-ldap branch February 27, 2025 09:52
* `given_name` - (Required) LDAP attribute to use for the user's given name. For example, the _"givenName"_ attribute
* `surname` - (Required) LDAP attribute to use for the user's surname. For example, the _"sn"_ attribute
* `telephone` - (Required) LDAP attribute to use for the user's telephone number. For example, the _"telephoneNumber"_ attribute
* `group_membership_identifier` - (Required) LDAP attribute that identifies a user as a member of a group. For example, the _"dn"_ attribute
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a late comment about group_back_link_identifier param below. I just noticed that though docs say it's optional, it actually fails if you don't provide it:

│ Error: Missing required argument
│
│   on main.tf line 395, in resource "vcfa_org_ldap" "my-org-ldap":
│  395:     group_attributes {
│
│ The argument "group_membership_identifier" is required, but no definition was found.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants