mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-09-19 06:31:47 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update text on CRD templates to reflect new defaults

Browse Source
This commit is contained in:
Margo Crawford
2021-08-18 10:39:01 -07:00
parent 8657b0e3e7
commit 90e6298e29
16 changed files with 61 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/supervisor/idp.supervisor.pinniped.dev_activedirectoryidentityproviders.yaml
+4 -4
View File
@@ -89,7 +89,7 @@ spec:
the ActiveDirectory server in the user's entry. E.g. "cn"
for common name. Distinguished names can be used by specifying
lower-case "dn". Optional. When not specified, this defaults
to "sAMAccountName".
to a custom field that looks like "sAMAccountName@domain".
type: string
type: object
base:
@@ -108,7 +108,7 @@ spec:
about ActiveDirectory filters, see https://ldap.com/ldap-filters.
Note that the dn (distinguished name) is not an attribute of
an entry, so "dn={}" cannot be used. Optional. When not specified,
the default will act as if the Filter were specified as "(&(objectClass=group)(member:1.2.840.113556.1.4.1941:={})".
the default will act as if the filter were specified as "(&(objectClass=group)(member:1.2.840.113556.1.4.1941:={})".
This searches nested groups by default.
type: string
type: object
@@ -147,7 +147,7 @@ spec:
in Active Directory entry whose value shall become the username
of the user after a successful authentication. This would
typically be the same attribute name used in Optional, when
empty this defaults to "sAMAccountName".
empty this defaults to "userPrincipalName".
type: string
type: object
base:
@@ -165,7 +165,7 @@ spec:
LDAP filters, see https://ldap.com/ldap-filters. Note that the
dn (distinguished name) is not an attribute of an entry, so
"dn={}" cannot be used. Optional. When not specified, the default
will be '(&(objectClass=person)(!(objectClass=computer))(!(showInAdvancedViewOnly=TRUE))(|(sAMAccountName={}")(mail={}))(sAMAccountType=805306368))'
will be '(&(objectClass=person)(!(objectClass=computer))(!(showInAdvancedViewOnly=TRUE))(|(sAMAccountName={}")(mail={})(userPrincipalName={})(sAMAccountType=805306368))'
type: string
type: object
required: