Skip to content

feat: replace phpldapadmin image, security patches, bump to 1.4.0#7

Merged
llulioscesar merged 2 commits into
start-codex:mainfrom
llulioscesar:main
Apr 13, 2026
Merged

feat: replace phpldapadmin image, security patches, bump to 1.4.0#7
llulioscesar merged 2 commits into
start-codex:mainfrom
llulioscesar:main

Conversation

@llulioscesar
Copy link
Copy Markdown
Member

Summary

  • BREAKING: Replace osixia/phpldapadmin with phpldapadmin/phpldapadmin (port 80 → 8080)
  • Update openldap default image to 2.1.0 (patched CVEs)
  • Bump chart version to 1.4.0, appVersion to 2.6.1

Why

osixia/phpldapadmin is based on Debian 10 (EOL) with 122 critical and 374 high CVEs. The project is abandoned. phpldapadmin/phpldapadmin is actively maintained on Alpine with PHP 8.4.

Trivy comparison

Image Before (CRITICAL/HIGH) After (CRITICAL/HIGH)
phpldapadmin 122 / 374 3 / 11
openldap 5 / 28 0 / 6
ldap-sync-google 2 / 4 0 / 0

Test plan

  • Fresh install on Docker Desktop Kubernetes
  • Migration from published v1.3.1 to new version
  • OpenLDAP data preserved after upgrade
  • phpLDAPadmin login page accessible on new port
  • Helm template renders correctly

BREAKING: phpldapadmin port changes from 80 to 8080.

- Replace osixia/phpldapadmin (Debian 10 EOL, 122 critical CVEs) with
  phpldapadmin/phpldapadmin (Alpine, PHP 8.4, actively maintained)
- Update openldap default image to 2.1.0
- Update env vars for new phpldapadmin (LDAP_HOST, APP_KEY)
- Bump chart version to 1.4.0, appVersion to 2.6.1
@llulioscesar llulioscesar merged commit 84b5743 into start-codex:main Apr 13, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant