apiVersion: v1
kind: Secret
metadata:
  name: knoe-auth-google-oidc
  namespace: knoe-system
  labels:
    app.kubernetes.io/managed-by: knoe-installer
# Fill in client_id and client_secret from your Google Cloud Console OAuth 2.0 credentials.
# Create at: https://console.cloud.google.com/apis/credentials
# Authorized redirect URI: https://<frontdoor-host>/auth/callback/google
stringData:
  client_id: ""
  client_secret: ""
  hosted_domain: ""   # restrict to a Google Workspace domain, e.g. "yourdomain.com"; blank = any Google account