In real environments you should scope down, but lab Task SIMULATIONs often accept cluster-admin for speed.
Create a ConfigMap for groupsync.yaml and Secret(s) for bind password/CA
Mount them into the job container.
Create CronJob to run group sync
Command inside job:
oc adm groups sync --sync-config=/config/groupsync.yaml --confirm
The CronJob ensures periodic reconciliation with LDAP.
Verify job runs
oc -n id-sync get cronjob
oc -n id-sync get jobs
oc -n id-sync logs job/ < job-name >
==========
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit