Baremetal cloud-on-k8s instance how to add LDAP bind password

[sfgroups1 (sfgroups)]

Hi,

I am in the process of setting up the LDAP authentication, I was able to add LDAP details in nodes.config section. But unsure how to add bind password.

https://www.elastic.co/guide/en/elasticsearch/reference/7.3/configuring-ldap-realm.html

based on the this document I need to include xpack.security.authc.realms.ldap.ldap1.secure_bind_password value for ldap bind password. Unsure how to include this password when we are using Elastic Operator.

Look at this document https://github.com/elastic/cloud-on-k8s/blob/master/docs/elasticsearch-spec.asciidoc#{p}-es-secure-settings, but is not clear how to add this bind secret.

Thanks

[ikakavas (Ioannis Kakavas)]

Doesn't

spec:
  secureSettings:
  - xpack.security.authc.realms.ldap.ldap1.secure_bind_password: the_password_here

work for you ?

[sfgroups1 (sfgroups)]

@ikakavas

xpack.security.authc.realms.ldap.ldap1.secure_bind_password:

I tried like this now its adding the bind secret key. thanks for the response

apiVersion: v1
kind: Secret
metadata:
  name: scure-secret
type: Opaque
data:
  xpack.security.authc.realms.ldap.ldap1.secure_bind_password: YWRtaW4=
---
apiVersion: elasticsearch.k8s.elastic.co/v1alpha1
kind: Elasticsearch
metadata:
  name: elastic-ldap
spec:
  version: 7.2.0
  secureSettings:
    secretName: scure-secret