From c924c1f19a5f7d4399a7e827469de6dcfb05c607 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?c=C4=83t=C4=83lin?= <catalin@roboces.dev>
Date: Tue, 11 Aug 2026 12:31:09 +0200
Subject: [PATCH] Add bootstrap config for lldap admin user

---
 .../lldap/bootstrap/group-configmap.yaml      | 11 +++++
 .../lldap/bootstrap/group-lldap-admin.json    |  3 ++
 k8s/services/lldap/bootstrap/job.yaml         | 44 +++++++++++++++++++
 k8s/services/lldap/bootstrap/user-admin.json  | 11 +++++
 .../lldap/bootstrap/user-configmap.yaml       | 17 +++++++
 5 files changed, 86 insertions(+)
 create mode 100644 k8s/services/lldap/bootstrap/group-configmap.yaml
 create mode 100644 k8s/services/lldap/bootstrap/group-lldap-admin.json
 create mode 100644 k8s/services/lldap/bootstrap/job.yaml
 create mode 100644 k8s/services/lldap/bootstrap/user-admin.json
 create mode 100644 k8s/services/lldap/bootstrap/user-configmap.yaml

diff --git a/k8s/services/lldap/bootstrap/group-configmap.yaml b/k8s/services/lldap/bootstrap/group-configmap.yaml
new file mode 100644
index 0000000..d43d5e6
--- /dev/null
+++ b/k8s/services/lldap/bootstrap/group-configmap.yaml
@@ -0,0 +1,11 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: lldap-bootstrap-group-configs
+  namespace: apps-fuku
+data:
+  group-lldap-admin.json: |
+    {
+      "name": "lldap_admin"
+    }
diff --git a/k8s/services/lldap/bootstrap/group-lldap-admin.json b/k8s/services/lldap/bootstrap/group-lldap-admin.json
new file mode 100644
index 0000000..500adf1
--- /dev/null
+++ b/k8s/services/lldap/bootstrap/group-lldap-admin.json
@@ -0,0 +1,3 @@
+{
+  "name": "lldap_admin"
+}
diff --git a/k8s/services/lldap/bootstrap/job.yaml b/k8s/services/lldap/bootstrap/job.yaml
new file mode 100644
index 0000000..8a3d1f9
--- /dev/null
+++ b/k8s/services/lldap/bootstrap/job.yaml
@@ -0,0 +1,44 @@
+---
+apiVersion: batch/v1
+kind: Job
+metadata:
+  name: lldap-bootstrap
+  namespace: apps-fuku
+  annotations:
+    argocd.argoproj.io/hook: PostSync
+    argocd.argoproj.io/hook-delete-policy: BeforeHookCreation
+spec:
+  template:
+    spec:
+      restartPolicy: OnFailure
+      containers:
+        - name: lldap-bootstrap
+          image: nitnelave/lldap:v0.6.1-alpine
+          command:
+            - /app/bootstrap.sh
+          env:
+            - name: LLDAP_URL
+              value: "http://lldap:17170"
+            - name: LLDAP_ADMIN_USERNAME
+              value: "admin"
+            - name: LLDAP_ADMIN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: lldap-credentials
+                  key: lldap-ldap-user-pass
+            - name: DO_CLEANUP
+              value: "false"
+          volumeMounts:
+            - name: user-configs
+              mountPath: /bootstrap/user-configs
+              readOnly: true
+            - name: group-configs
+              mountPath: /bootstrap/group-configs
+              readOnly: true
+      volumes:
+        - name: user-configs
+          configMap:
+            name: lldap-bootstrap-user-configs
+        - name: group-configs
+          configMap:
+            name: lldap-bootstrap-group-configs
diff --git a/k8s/services/lldap/bootstrap/user-admin.json b/k8s/services/lldap/bootstrap/user-admin.json
new file mode 100644
index 0000000..9dfb567
--- /dev/null
+++ b/k8s/services/lldap/bootstrap/user-admin.json
@@ -0,0 +1,11 @@
+{
+  "displayName": "LLDAP Admin",
+  "email": "admin@fuku.local",
+  "firstName": "LLDAP",
+  "groups": [
+    "lldap_admin"
+  ],
+  "id": "admin",
+  "lastName": "Admin",
+  "password": "adminpassword"
+}
diff --git a/k8s/services/lldap/bootstrap/user-configmap.yaml b/k8s/services/lldap/bootstrap/user-configmap.yaml
new file mode 100644
index 0000000..be66a34
--- /dev/null
+++ b/k8s/services/lldap/bootstrap/user-configmap.yaml
@@ -0,0 +1,17 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: lldap-bootstrap-user-configs
+  namespace: apps-fuku
+data:
+  user-admin.json: |
+    {
+      "id": "admin",
+      "email": "admin@fuku.local",
+      "password": "adminpassword",
+      "displayName": "LLDAP Admin",
+      "firstName": "LLDAP",
+      "lastName": "Admin",
+      "groups": ["lldap_admin"]
+    }