apiVersion: v1
kind: Secret
metadata:
  name: knoe-auth-google-prole
  namespace: knoe-system
  labels:
    app.kubernetes.io/managed-by: knoe-installer
# Google OAuth2 credentials for the prole.org Workspace login path (Path A).
#
# 1. Create an OAuth 2.0 Client ID at:
#      https://console.cloud.google.com/apis/credentials
#    Application type: Web application
#    Authorized redirect URIs:
#      https://api.prole.org/auth/auth/callback/google
#      https://api.prole.org/auth/auth/enroll/google-callback
#
# 2. Store real values in OpenBao:
#      bao kv put knoe/oauth2/google-prole-org \
#        client_id="<CLIENT_ID>" client_secret="<CLIENT_SECRET>"
#
# 3. Create the secret from OpenBao:
#      kubectl create secret generic knoe-auth-google-prole \
#        --namespace knoe-system \
#        --from-literal=client_id="$(bao kv get -field=client_id knoe/oauth2/google-prole-org)" \
#        --from-literal=client_secret="$(bao kv get -field=client_secret knoe/oauth2/google-prole-org)"
type: Opaque
stringData:
  client_id: ""
  client_secret: ""