k.rennerandClaude Opus 4.7
3ededebfdd
Blueprint-manages a new LDAP integration for nas-1 DSM: dedicated LDAPProvider, Application, Synology Users/Admins groups, and PolicyBindings. Standalone LoadBalancer Service on the BGP pool (pinned 10.2.99.88/fd99::88, LAN hostname ldap.renner.uno via external-dns-unifi) sidesteps the operator- owned ClusterIP; CNP scopes :3389 ingress to the mgmt LAN so the cleartext bind stays on a trusted segment until LDAPS is wired. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>