email suffix for technical users

sundsea · Feb 12, 2020 · a572255 · a572255
1 parent 460e8d7
commit a572255
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 3 deletions.
diff --git a/charts/kube-master/Chart.yaml b/charts/kube-master/Chart.yaml
@@ -1,4 +1,4 @@
 apiVersion: v1
 description: A Helm chart for Kubernetes
 name: kube-master
-version: 2.0.3
+version: 2.0.4
diff --git a/charts/kube-master/templates/api.yaml b/charts/kube-master/templates/api.yaml
@@ -181,7 +181,7 @@ spec:
             - --oidc-client-id=kubernetes
             - --oidc-groups-claim=groups
             - --oidc-username-prefix=-
-            - --oidc-username-claim=sub
+            - --oidc-username-claim=name
             {{ end }}
           volumeMounts:
             - mountPath: /etc/kubernetes/certs

diff --git a/charts/kube-master/templates/dex-configmap.yaml b/charts/kube-master/templates/dex-configmap.yaml
@@ -67,7 +67,9 @@ data:
             username: cn
             idAttr: distinguishedName
             emailAttr: mail
-            nameAttr: displayName
+            nameAttr: cn
+            # workaround for technical users without email address in LDAP:
+            emailSuffix: cloud.sap 
 
           # Group search queries for groups given a user entry.
           groupSearch: