@red-hat-developer-hub/e2e-test-utils 2.1.11 → 2.1.14

package/dist/deployment/keycloak/deployment.d.ts

@@ -1,5 +1,5 @@
 import { KubernetesClientHelper } from "../../utils/kubernetes-client.js";
-import type { KeycloakDeploymentOptions, KeycloakDeploymentConfig, KeycloakClientConfig, KeycloakUserConfig, KeycloakGroupConfig, KeycloakRealmConfig, KeycloakConnectionConfig } from "./types.js";
+import type { KeycloakDeploymentOptions, KeycloakDeploymentConfig, KeycloakClientConfig, KeycloakUserConfig, KeycloakGroupConfig, KeycloakRealmConfig, KeycloakConnectionConfig, KeycloakLdapFederationConfig, KeycloakLdapMapperConfig, KeycloakProtocolMapperConfig, KeycloakLdapRealmOptions } from "./types.js";
 export declare class KeycloakHelper {
     k8sClient: KubernetesClientHelper;
     deploymentConfig: KeycloakDeploymentConfig;
@@ -84,6 +84,32 @@ export declare class KeycloakHelper {
      * Delete a realm
      */
     deleteRealm(realm: string): Promise<void>;
+    /**
+     * Create (or return existing) LDAP user federation component on a realm.
+     * Requires admin credentials via connect()/deploy().
+     */
+    createLdapUserFederation(realm: string, config: KeycloakLdapFederationConfig): Promise<string>;
+    getLdapUserFederation(realm: string, name?: string): Promise<{
+        id: string;
+        name?: string;
+    } | undefined>;
+    updateLdapUserFederation(id: string, config: KeycloakLdapFederationConfig, realm: string): Promise<void>;
+    deleteLdapUserFederation(id: string, realm: string): Promise<void>;
+    createLdapMapper(realm: string, parentId: string, mapper: KeycloakLdapMapperConfig): Promise<string>;
+    listLdapMappers(realm: string, parentId: string): Promise<Array<{
+        id?: string;
+        name?: string;
+    }>>;
+    syncLdapUsers(federationId: string, action?: "triggerFullSync" | "triggerChangedUsersSync"): Promise<void>;
+    /**
+     * Add an OIDC protocol mapper on a client (e.g. ldap_uuid user attribute → claim).
+     */
+    addClientProtocolMapper(realm: string, clientId: string, mapper: KeycloakProtocolMapperConfig): Promise<void>;
+    /**
+     * One-shot: separate LDAP-fed realm + client + OpenLDAP federation + ldap_uuid claim.
+     * Connect as Keycloak admin first (username/password), not the RHDH service account.
+     */
+    configureLdapRealm(options: KeycloakLdapRealmOptions): Promise<void>;
     /**
      * Teardown Keycloak deployment
      */
@@ -101,6 +127,7 @@ export declare class KeycloakHelper {
     private _ensureAdminClient;
     private _assignServiceAccountRoles;
     private _addUserToGroup;
+    private _ldapFederationConfigToComponent;
     private _isConflictError;
     private _log;
 }

package/dist/deployment/keycloak/deployment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/keycloak/deployment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAY1E,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAEpB,qBAAa,cAAc;IAClB,SAAS,yBAAgC;IACzC,gBAAgB,EAAE,wBAAwB,CAAC;IAC3C,WAAW,EAAE,MAAM,CAAM;IACzB,KAAK,EAAE,MAAM,CAAM;IACnB,QAAQ,EAAE,MAAM,CAAM;IACtB,YAAY,EAAE,MAAM,CAAM;IACjC,OAAO,CAAC,YAAY,CAAoC;gBAE5C,OAAO,GAAE,yBAA8B;IAInD;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAa7B;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAUnC;;OAEG;IACG,gBAAgB,CAAC,OAAO,CAAC,EAAE;QAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;QAC/B,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCjB;;OAEG;IACG,OAAO,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB9D;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB7D;;OAEG;IACG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC;IAqChB;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB5E;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8C1E;;OAEG;IACG,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;QACP,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAC;QAC7B,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;KAChC,GACA,OAAO,CAAC,IAAI,CAAC;IAahB;;OAEG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAe5D;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAQ9D;;OAEG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAejC;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBhE;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBlE;;OAEG;IACG,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;QACP,KAAK,CAAC,EAAE,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,KAAK,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC;KAC9C,GACA,OAAO,CAAC,IAAI,CAAC;IAkBhB;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/C;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/B;;OAEG;IACG,cAAc,CAAC,OAAO,GAAE,MAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAY1D,OAAO,CAAC,sBAAsB;YAahB,eAAe;YAWf,YAAY;IAwBpB,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;YAO3B,gBAAgB;YAoBhB,sBAAsB;YActB,kBAAkB;YAQlB,0BAA0B;YAmD1B,eAAe;IAqB7B,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,IAAI;CAGb"}
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/keycloak/deployment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAY1E,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACxB,4BAA4B,EAC5B,wBAAwB,EACxB,4BAA4B,EAC5B,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAEpB,qBAAa,cAAc;IAClB,SAAS,yBAAgC;IACzC,gBAAgB,EAAE,wBAAwB,CAAC;IAC3C,WAAW,EAAE,MAAM,CAAM;IACzB,KAAK,EAAE,MAAM,CAAM;IACnB,QAAQ,EAAE,MAAM,CAAM;IACtB,YAAY,EAAE,MAAM,CAAM;IACjC,OAAO,CAAC,YAAY,CAAoC;gBAE5C,OAAO,GAAE,yBAA8B;IAInD;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAa7B;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAUnC;;OAEG;IACG,gBAAgB,CAAC,OAAO,CAAC,EAAE;QAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;QAC/B,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAC;KAC9B,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCjB;;OAEG;IACG,OAAO,CAAC,MAAM,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuB9D;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB7D;;OAEG;IACG,YAAY,CAChB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC;IAqChB;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB5E;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC;IA8C1E;;OAEG;IACG,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;QACP,KAAK,CAAC,EAAE,kBAAkB,EAAE,CAAC;QAC7B,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC;KAChC,GACA,OAAO,CAAC,IAAI,CAAC;IAahB;;OAEG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IAe5D;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAQ9D;;OAEG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAejC;;OAEG;IACG,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBhE;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBlE;;OAEG;IACG,oBAAoB,CACxB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;QACP,KAAK,CAAC,EAAE,KAAK,CAAC,kBAAkB,GAAG,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,KAAK,CAAC,mBAAmB,GAAG,MAAM,CAAC,CAAC;KAC9C,GACA,OAAO,CAAC,IAAI,CAAC;IAkBhB;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/C;;;OAGG;IACG,wBAAwB,CAC5B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,4BAA4B,GACnC,OAAO,CAAC,MAAM,CAAC;IA6BZ,qBAAqB,CACzB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAc/C,wBAAwB,CAC5B,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,4BAA4B,EACpC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAsBV,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMlE,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,MAAM,CAAC;IA4BZ,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAS3C,aAAa,CACjB,YAAY,EAAE,MAAM,EACpB,MAAM,GAAE,iBAAiB,GAAG,yBAA6C,GACxE,OAAO,CAAC,IAAI,CAAC;IAShB;;OAEG;IACG,uBAAuB,CAC3B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,4BAA4B,GACnC,OAAO,CAAC,IAAI,CAAC;IA+BhB;;;OAGG;IACG,kBAAkB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IA6D1E;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAK/B;;OAEG;IACG,cAAc,CAAC,OAAO,GAAE,MAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAY1D,OAAO,CAAC,sBAAsB;YAahB,eAAe;YAWf,YAAY;IAwBpB,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC;YAO3B,gBAAgB;YAoBhB,sBAAsB;YActB,kBAAkB;YAQlB,0BAA0B;YAmD1B,eAAe;IAqB7B,OAAO,CAAC,gCAAgC;IAgCxC,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,IAAI;CAGb"}

package/dist/deployment/keycloak/deployment.js

@@ -333,6 +333,188 @@ export class KeycloakHelper {
             this._log(`Failed to delete realm ${realm}: ${error}`);
         }
     }
+    /**
+     * Create (or return existing) LDAP user federation component on a realm.
+     * Requires admin credentials via connect()/deploy().
+     */
+    async createLdapUserFederation(realm, config) {
+        await this._ensureAdminClient();
+        this._adminClient.setConfig({ realmName: realm });
+        const name = config.name ?? "openldap";
+        const existing = await this.getLdapUserFederation(realm, name);
+        if (existing?.id) {
+            this._log(`LDAP federation ${name} already exists (${existing.id})`);
+            await this.updateLdapUserFederation(existing.id, config, realm);
+            return existing.id;
+        }
+        const realmRep = await this._adminClient.realms.findOne({ realm });
+        if (!realmRep?.id) {
+            throw new Error(`Realm ${realm} not found`);
+        }
+        const { id } = await this._adminClient.components.create({
+            realm,
+            name,
+            providerId: "ldap",
+            providerType: "org.keycloak.storage.UserStorageProvider",
+            parentId: realmRep.id,
+            config: this._ldapFederationConfigToComponent(config),
+        });
+        this._log(`Created LDAP federation: ${name} (${id})`);
+        return id;
+    }
+    async getLdapUserFederation(realm, name) {
+        await this._ensureAdminClient();
+        this._adminClient.setConfig({ realmName: realm });
+        const components = await this._adminClient.components.find({
+            realm,
+            type: "org.keycloak.storage.UserStorageProvider",
+        });
+        const match = name
+            ? components.find((c) => c.name === name && c.providerId === "ldap")
+            : components.find((c) => c.providerId === "ldap");
+        return match?.id ? { id: match.id, name: match.name } : undefined;
+    }
+    async updateLdapUserFederation(id, config, realm) {
+        await this._ensureAdminClient();
+        this._adminClient.setConfig({ realmName: realm });
+        const current = await this._adminClient.components.findOne({ id, realm });
+        if (!current) {
+            throw new Error(`LDAP federation component ${id} not found`);
+        }
+        await this._adminClient.components.update({ id, realm }, {
+            ...current,
+            config: {
+                ...current.config,
+                ...this._ldapFederationConfigToComponent(config),
+            },
+        });
+        this._log(`Updated LDAP federation: ${id}`);
+    }
+    async deleteLdapUserFederation(id, realm) {
+        await this._ensureAdminClient();
+        await this._adminClient.components.del({ id, realm });
+        this._log(`Deleted LDAP federation: ${id}`);
+    }
+    async createLdapMapper(realm, parentId, mapper) {
+        await this._ensureAdminClient();
+        this._adminClient.setConfig({ realmName: realm });
+        const existing = await this.listLdapMappers(realm, parentId);
+        const found = existing.find((m) => m.name === mapper.name);
+        if (found?.id) {
+            this._log(`LDAP mapper ${mapper.name} already exists`);
+            return found.id;
+        }
+        const configEntries = {};
+        for (const [key, value] of Object.entries(mapper.config)) {
+            configEntries[key] = [value];
+        }
+        const { id } = await this._adminClient.components.create({
+            realm,
+            name: mapper.name,
+            parentId,
+            providerId: mapper.providerId,
+            providerType: "org.keycloak.storage.ldap.mappers.LDAPStorageMapper",
+            config: configEntries,
+        });
+        this._log(`Created LDAP mapper: ${mapper.name}`);
+        return id;
+    }
+    async listLdapMappers(realm, parentId) {
+        await this._ensureAdminClient();
+        return this._adminClient.components.find({
+            realm,
+            parent: parentId,
+            type: "org.keycloak.storage.ldap.mappers.LDAPStorageMapper",
+        });
+    }
+    async syncLdapUsers(federationId, action = "triggerFullSync") {
+        await this._ensureAdminClient();
+        await this._adminClient.userStorageProvider.sync({
+            id: federationId,
+            action,
+        });
+        this._log(`Triggered LDAP sync (${action}) for ${federationId}`);
+    }
+    /**
+     * Add an OIDC protocol mapper on a client (e.g. ldap_uuid user attribute → claim).
+     */
+    async addClientProtocolMapper(realm, clientId, mapper) {
+        await this._ensureAdminClient();
+        this._adminClient.setConfig({ realmName: realm });
+        const clients = await this._adminClient.clients.find({ clientId });
+        if (clients.length === 0 || !clients[0].id) {
+            throw new Error(`Client ${clientId} not found in realm ${realm}`);
+        }
+        const id = clients[0].id;
+        const existing = await this._adminClient.clients.listProtocolMappers({
+            id,
+            realm,
+        });
+        if (existing.some((m) => m.name === mapper.name)) {
+            this._log(`Protocol mapper ${mapper.name} already exists on ${clientId}`);
+            return;
+        }
+        await this._adminClient.clients.addProtocolMapper({ id, realm }, {
+            name: mapper.name,
+            protocol: mapper.protocol ?? "openid-connect",
+            protocolMapper: mapper.protocolMapper,
+            config: mapper.config,
+        });
+        this._log(`Added protocol mapper ${mapper.name} on client ${clientId}`);
+    }
+    /**
+     * One-shot: separate LDAP-fed realm + client + OpenLDAP federation + ldap_uuid claim.
+     * Connect as Keycloak admin first (username/password), not the RHDH service account.
+     */
+    async configureLdapRealm(options) {
+        await this._ensureAdminClient();
+        const realmName = options.realm;
+        await this.createRealm({ realm: realmName, enabled: true });
+        const clientConfig = {
+            ...DEFAULT_RHDH_CLIENT,
+            clientId: "rhdh-ldap-client",
+            clientSecret: "rhdh-ldap-client-secret",
+            name: "RHDH LDAP Client",
+            ...options.client,
+        };
+        await this.createClient(realmName, clientConfig);
+        await this._assignServiceAccountRoles(realmName, clientConfig.clientId);
+        const federationId = await this.createLdapUserFederation(realmName, options.ldap);
+        // Map LDAP entryUUID into a Keycloak user attribute for the token claim.
+        /* eslint-disable @typescript-eslint/naming-convention -- Keycloak Admin API mapper config keys */
+        const ldapUuidMapperConfig = {
+            "user.model.attribute": "ldap_uuid",
+            "ldap.attribute": options.ldap.uuidLdapAttribute ?? "entryUUID",
+            "read.only": "true",
+            "always.read.value.from.ldap": "true",
+            "is.binary.attribute": "false",
+        };
+        const claim = options.ldapUuidClaim ?? "ldap_uuid";
+        const ldapUuidClaimConfig = {
+            "user.attribute": "ldap_uuid",
+            "claim.name": claim,
+            "jsonType.label": "String",
+            "id.token.claim": "true",
+            "access.token.claim": "true",
+            "userinfo.token.claim": "true",
+        };
+        /* eslint-enable @typescript-eslint/naming-convention */
+        await this.createLdapMapper(realmName, federationId, {
+            name: "ldap-uuid",
+            providerId: "user-attribute-ldap-mapper",
+            config: ldapUuidMapperConfig,
+        });
+        await this.addClientProtocolMapper(realmName, clientConfig.clientId, {
+            name: "ldap-uuid-claim",
+            protocolMapper: "oidc-usermodel-attribute-mapper",
+            config: ldapUuidClaimConfig,
+        });
+        await this.syncLdapUsers(federationId);
+        this.realm = realmName;
+        this.clientId = clientConfig.clientId;
+        this.clientSecret = clientConfig.clientSecret;
+        this._log(`Configured LDAP realm ${realmName}`);
+    }
     /**
      * Teardown Keycloak deployment
      */
@@ -475,6 +657,34 @@ spec:
             this._log(`  Warning: Group ${groupName} not found`);
         }
     }
+    _ldapFederationConfigToComponent(config) {
+        const bool = (v, fallback) => String(v ?? fallback);
+        return {
+            enabled: ["true"],
+            priority: ["0"],
+            vendor: [config.vendor ?? "other"],
+            connectionUrl: [config.connectionUrl],
+            bindDn: [config.bindDn],
+            bindCredential: [config.bindCredential],
+            usersDn: [config.usersDn],
+            usernameLDAPAttribute: [config.usernameLdapAttribute ?? "uid"],
+            rdnLDAPAttribute: [config.rdnLdapAttribute ?? "uid"],
+            uuidLDAPAttribute: [config.uuidLdapAttribute ?? "entryUUID"],
+            userObjectClasses: [
+                config.userObjectClasses ?? "inetOrgPerson, organizationalPerson",
+            ],
+            editMode: [config.editMode ?? "READ_ONLY"],
+            importEnabled: [bool(config.importEnabled, true)],
+            pagination: [bool(config.pagination, true)],
+            searchScope: [config.searchScope ?? "1"],
+            trustEmail: [bool(config.trustEmail, true)],
+            authType: ["simple"],
+            syncRegistrations: ["false"],
+            useTruststoreSpi: ["ldapsOnly"],
+            connectionPooling: ["true"],
+            cachePolicy: ["DEFAULT"],
+        };
+    }
     _isConflictError(error) {
         const err = error;
         return err.response?.status === 409 || err.status === 409;

package/dist/deployment/keycloak/index.d.ts

@@ -1,3 +1,4 @@
 export { KeycloakHelper } from "./deployment.js";
-export type { KeycloakUserConfig, KeycloakGroupConfig } from "./types.js";
+export { DEFAULT_GROUPS, DEFAULT_KEYCLOAK_CONFIG, DEFAULT_USERS, } from "./constants.js";
+export type { KeycloakUserConfig, KeycloakGroupConfig, KeycloakLdapFederationConfig, KeycloakLdapRealmOptions, KeycloakClientConfig, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/deployment/keycloak/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/deployment/keycloak/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/deployment/keycloak/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EACL,cAAc,EACd,uBAAuB,EACvB,aAAa,GACd,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,4BAA4B,EAC5B,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,YAAY,CAAC"}

package/dist/deployment/keycloak/index.js

@@ -1 +1,2 @@
 export { KeycloakHelper } from "./deployment.js";
+export { DEFAULT_GROUPS, DEFAULT_KEYCLOAK_CONFIG, DEFAULT_USERS, } from "./constants.js";

package/dist/deployment/keycloak/types.d.ts

@@ -56,4 +56,39 @@ export type KeycloakConnectionConfig = {
     username?: string;
     password?: string;
 };
+export type KeycloakLdapFederationConfig = {
+    name?: string;
+    connectionUrl: string;
+    bindDn: string;
+    bindCredential: string;
+    usersDn: string;
+    usernameLdapAttribute?: string;
+    rdnLdapAttribute?: string;
+    uuidLdapAttribute?: string;
+    userObjectClasses?: string;
+    vendor?: string;
+    editMode?: string;
+    importEnabled?: boolean;
+    pagination?: boolean;
+    searchScope?: string;
+    trustEmail?: boolean;
+};
+export type KeycloakLdapMapperConfig = {
+    name: string;
+    providerId: string;
+    config: Record<string, string>;
+};
+export type KeycloakProtocolMapperConfig = {
+    name: string;
+    protocol?: string;
+    protocolMapper: string;
+    config: Record<string, string>;
+};
+export type KeycloakLdapRealmOptions = {
+    realm: string;
+    client?: Partial<KeycloakClientConfig>;
+    ldap: KeycloakLdapFederationConfig;
+    /** Protocol mapper claim name for LDAP UUID (default ldap_uuid). */
+    ldapUuidClaim?: string;
+};
 //# sourceMappingURL=types.d.ts.map

package/dist/deployment/keycloak/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/deployment/keycloak/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/deployment/keycloak/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACvC,IAAI,EAAE,4BAA4B,CAAC;IACnC,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC"}

package/dist/deployment/openldap/config/seed.ldif

@@ -0,0 +1,102 @@
+# Bootstrap tree for RHDH LDAP e2e (OpenLDAP / Bitnami).
+# Loaded via LDAP_CUSTOM_LDIF_DIR=/ldifs — must include root + OUs.
+
+dn: dc=rhdh,dc=test
+objectClass: dcObject
+objectClass: organization
+o: RHDH Test
+dc: rhdh
+
+dn: ou=users,dc=rhdh,dc=test
+objectClass: organizationalUnit
+ou: users
+
+dn: ou=groups,dc=rhdh,dc=test
+objectClass: organizationalUnit
+ou: groups
+
+dn: uid=user1,ou=users,dc=rhdh,dc=test
+objectClass: inetOrgPerson
+objectClass: organizationalPerson
+objectClass: person
+objectClass: top
+uid: user1
+cn: User 1
+sn: One
+givenName: User
+mail: user1@rhdh.test
+userPassword: user1pass
+
+dn: uid=user2,ou=users,dc=rhdh,dc=test
+objectClass: inetOrgPerson
+objectClass: organizationalPerson
+objectClass: person
+objectClass: top
+uid: user2
+cn: User 2
+sn: Two
+givenName: User
+mail: user2@rhdh.test
+userPassword: user1pass
+
+dn: uid=user3,ou=users,dc=rhdh,dc=test
+objectClass: inetOrgPerson
+objectClass: organizationalPerson
+objectClass: person
+objectClass: top
+uid: user3
+cn: User 3
+sn: Three
+givenName: User
+mail: user3@rhdh.test
+userPassword: user1pass
+
+dn: uid=rhdh-admin,ou=users,dc=rhdh,dc=test
+objectClass: inetOrgPerson
+objectClass: organizationalPerson
+objectClass: person
+objectClass: top
+uid: rhdh-admin
+cn: RHDH Admin
+sn: Admin
+givenName: RHDH
+mail: rhdh-admin@rhdh.test
+userPassword: user1pass
+
+dn: cn=Admins,ou=groups,dc=rhdh,dc=test
+objectClass: groupOfNames
+objectClass: top
+cn: Admins
+member: uid=rhdh-admin,ou=users,dc=rhdh,dc=test
+
+dn: cn=All_Users,ou=groups,dc=rhdh,dc=test
+objectClass: groupOfNames
+objectClass: top
+cn: All_Users
+member: uid=user1,ou=users,dc=rhdh,dc=test
+member: uid=user2,ou=users,dc=rhdh,dc=test
+
+dn: cn=SubAdmins,ou=groups,dc=rhdh,dc=test
+objectClass: groupOfNames
+objectClass: top
+cn: SubAdmins
+member: uid=rhdh-admin,ou=users,dc=rhdh,dc=test
+
+# Nested groups: create leaves before parents so member DNs resolve.
+dn: cn=testSubSubGroup,ou=groups,dc=rhdh,dc=test
+objectClass: groupOfNames
+objectClass: top
+cn: testSubSubGroup
+member: uid=user3,ou=users,dc=rhdh,dc=test
+
+dn: cn=testSubGroup,ou=groups,dc=rhdh,dc=test
+objectClass: groupOfNames
+objectClass: top
+cn: testSubGroup
+member: cn=testSubSubGroup,ou=groups,dc=rhdh,dc=test
+
+dn: cn=testGroup,ou=groups,dc=rhdh,dc=test
+objectClass: groupOfNames
+objectClass: top
+cn: testGroup
+member: cn=testSubGroup,ou=groups,dc=rhdh,dc=test

package/dist/deployment/openldap/constants.d.ts

@@ -0,0 +1,46 @@
+import type { OpenLDAPDeploymentOptions } from "./types.js";
+/** Default password shared by admin bind and seed user1 (matches ldap.spec pattern). */
+export declare const DEFAULT_OPENLDAP_PASSWORD = "user1pass";
+export declare const DEFAULT_OPENLDAP_CONFIG: {
+    releaseName: string;
+    adminUser: string;
+    adminPassword: string;
+    baseDn: string;
+    usersOu: string;
+    groupsOu: string;
+    port: number;
+    imageRepository: string;
+    imageTag: string;
+};
+export declare const DEFAULT_CONFIG_PATHS: {
+    seedLdifFile: string;
+};
+export declare const DEFAULT_USERS: readonly [{
+    readonly uid: "user1";
+    readonly cn: "User 1";
+    readonly sn: "One";
+    readonly mail: "user1@rhdh.test";
+    readonly password: "user1pass";
+}, {
+    readonly uid: "user2";
+    readonly cn: "User 2";
+    readonly sn: "Two";
+    readonly mail: "user2@rhdh.test";
+    readonly password: "user1pass";
+}, {
+    readonly uid: "user3";
+    readonly cn: "User 3";
+    readonly sn: "Three";
+    readonly mail: "user3@rhdh.test";
+    readonly password: "user1pass";
+}, {
+    readonly uid: "rhdh-admin";
+    readonly cn: "RHDH Admin";
+    readonly sn: "Admin";
+    readonly mail: "rhdh-admin@rhdh.test";
+    readonly password: "user1pass";
+}];
+export declare function buildBindDn(options?: Pick<OpenLDAPDeploymentOptions, "adminUser" | "baseDn">): string;
+export declare function buildUsersDn(options?: Pick<OpenLDAPDeploymentOptions, "usersOu" | "baseDn">): string;
+export declare function buildGroupsDn(options?: Pick<OpenLDAPDeploymentOptions, "groupsOu" | "baseDn">): string;
+//# sourceMappingURL=constants.d.ts.map

package/dist/deployment/openldap/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/deployment/openldap/constants.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAK5D,wFAAwF;AACxF,eAAO,MAAM,yBAAyB,cAAc,CAAC;AAErD,eAAO,MAAM,uBAAuB;;;;;;;;;;CAWnC,CAAC;AAEF,eAAO,MAAM,oBAAoB;;CAKhC,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;EA6BhB,CAAC;AAEX,wBAAgB,WAAW,CACzB,OAAO,GAAE,IAAI,CAAC,yBAAyB,EAAE,WAAW,GAAG,QAAQ,CAAM,GACpE,MAAM,CAIR;AAED,wBAAgB,YAAY,CAC1B,OAAO,GAAE,IAAI,CAAC,yBAAyB,EAAE,SAAS,GAAG,QAAQ,CAAM,GAClE,MAAM,CAIR;AAED,wBAAgB,aAAa,CAC3B,OAAO,GAAE,IAAI,CAAC,yBAAyB,EAAE,UAAU,GAAG,QAAQ,CAAM,GACnE,MAAM,CAIR"}

package/dist/deployment/openldap/constants.js

@@ -0,0 +1,65 @@
+import path from "path";
+// Navigate from dist/deployment/openldap/ to package root
+const PACKAGE_ROOT = path.resolve(import.meta.dirname, "../../..");
+/** Default password shared by admin bind and seed user1 (matches ldap.spec pattern). */
+export const DEFAULT_OPENLDAP_PASSWORD = "user1pass";
+export const DEFAULT_OPENLDAP_CONFIG = {
+    releaseName: "openldap",
+    adminUser: "admin",
+    adminPassword: DEFAULT_OPENLDAP_PASSWORD,
+    baseDn: "dc=rhdh,dc=test",
+    usersOu: "users",
+    groupsOu: "groups",
+    port: 1389,
+    // Bitnami public Helm chart for OpenLDAP was removed; use the Bitnami legacy image.
+    imageRepository: "bitnamilegacy/openldap",
+    imageTag: "2.6.10-debian-12-r4",
+};
+export const DEFAULT_CONFIG_PATHS = {
+    seedLdifFile: path.join(PACKAGE_ROOT, "dist/deployment/openldap/config/seed.ldif"),
+};
+export const DEFAULT_USERS = [
+    {
+        uid: "user1",
+        cn: "User 1",
+        sn: "One",
+        mail: "user1@rhdh.test",
+        password: DEFAULT_OPENLDAP_PASSWORD,
+    },
+    {
+        uid: "user2",
+        cn: "User 2",
+        sn: "Two",
+        mail: "user2@rhdh.test",
+        password: DEFAULT_OPENLDAP_PASSWORD,
+    },
+    {
+        uid: "user3",
+        cn: "User 3",
+        sn: "Three",
+        mail: "user3@rhdh.test",
+        password: DEFAULT_OPENLDAP_PASSWORD,
+    },
+    {
+        uid: "rhdh-admin",
+        cn: "RHDH Admin",
+        sn: "Admin",
+        mail: "rhdh-admin@rhdh.test",
+        password: DEFAULT_OPENLDAP_PASSWORD,
+    },
+];
+export function buildBindDn(options = {}) {
+    const adminUser = options.adminUser ?? DEFAULT_OPENLDAP_CONFIG.adminUser;
+    const baseDn = options.baseDn ?? DEFAULT_OPENLDAP_CONFIG.baseDn;
+    return `cn=${adminUser},${baseDn}`;
+}
+export function buildUsersDn(options = {}) {
+    const usersOu = options.usersOu ?? DEFAULT_OPENLDAP_CONFIG.usersOu;
+    const baseDn = options.baseDn ?? DEFAULT_OPENLDAP_CONFIG.baseDn;
+    return `ou=${usersOu},${baseDn}`;
+}
+export function buildGroupsDn(options = {}) {
+    const groupsOu = options.groupsOu ?? DEFAULT_OPENLDAP_CONFIG.groupsOu;
+    const baseDn = options.baseDn ?? DEFAULT_OPENLDAP_CONFIG.baseDn;
+    return `ou=${groupsOu},${baseDn}`;
+}

package/dist/deployment/openldap/deployment.d.ts

@@ -0,0 +1,31 @@
+import { KubernetesClientHelper } from "../../utils/kubernetes-client.js";
+import type { OpenLDAPDeploymentOptions, OpenLDAPDeploymentConfig, OpenLDAPBindConfig } from "./types.js";
+/**
+ * Orchestrator-style OpenLDAP helper (Bitnami legacy image).
+ * Call from test.runOnce — not globalSetup. Deploys into the Playwright project namespace.
+ */
+export declare class OpenLDAPHelper {
+    k8sClient: KubernetesClientHelper;
+    deploymentConfig: OpenLDAPDeploymentConfig;
+    ldapUrl: string;
+    constructor(options?: OpenLDAPDeploymentOptions);
+    /**
+     * Deploy OpenLDAP into the given namespace (creates namespace if needed).
+     */
+    deploy(namespace: string): Promise<void>;
+    /**
+     * True if the OpenLDAP service already exists in the configured namespace.
+     */
+    isRunning(): Promise<boolean>;
+    /** Cluster-internal LDAP URL (Keycloak federation / RHDH ldapOrg). */
+    getServiceUrl(): string;
+    getBindConfig(): OpenLDAPBindConfig;
+    /** Export LDAP_* env vars for RHDH secrets / app-config substitution. */
+    exportEnv(): void;
+    waitUntilReady(timeout?: number): Promise<void>;
+    teardown(): Promise<void>;
+    private _buildDeploymentConfig;
+    private _applyManifests;
+    private _log;
+}
+//# sourceMappingURL=deployment.d.ts.map

package/dist/deployment/openldap/deployment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment.d.ts","sourceRoot":"","sources":["../../../src/deployment/openldap/deployment.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAS1E,OAAO,KAAK,EACV,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AACH,qBAAa,cAAc;IAClB,SAAS,yBAAgC;IACzC,gBAAgB,EAAE,wBAAwB,CAAC;IAC3C,OAAO,SAAM;gBAER,OAAO,GAAE,yBAA8B;IAInD;;OAEG;IACG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9C;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAcnC,sEAAsE;IACtE,aAAa,IAAI,MAAM;IAUvB,aAAa,IAAI,kBAAkB;IAYnC,yEAAyE;IACzE,SAAS,IAAI,IAAI;IASX,cAAc,CAAC,OAAO,SAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW5C,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAM/B,OAAO,CAAC,sBAAsB;YAoBhB,eAAe;IA0H7B,OAAO,CAAC,IAAI;CAGb"}