mirror of
https://github.com/dredx/prole.git
synced 2026-09-24 16:04:31 +00:00
620bdd25eb
Add complete GKE deployment stack: - deploy/gcp/gke/: namespace, CloudNativePG cluster (premium-rwo, 100Gi), GCS barman-cloud backup with Workload Identity SA, ArgoCD OIDC ConfigMap, GitLab OmniAuth secret template, knoe-auth Google OIDC secret template - etc/init_cnpg_gke.sh: provision GCS buckets, GCP SA, WI binding, CNPG operator - etc/init_argocd.sh: apply argocd-oidc-cm.yaml when PLATFORM_DOMAIN/FRONTDOOR_HOST set - etc/init_gitlab.sh: inject OmniAuth openid_connect block when FRONTDOOR_HOST set - prole-auth-deployment.yaml: add GOOGLE_OIDC_ENABLED env vars (all optional) - supabase/helm/prole-supabase/values-gke.yaml: GoTrue Google OAuth overlay - knoe/core/prod_config.py: add backupProvider, workloadIdentitySA, googleClientId/Secret/HostedDomain Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
15 lines
542 B
YAML
15 lines
542 B
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: knoe-auth-google-oidc
|
|
namespace: knoe-system
|
|
labels:
|
|
app.kubernetes.io/managed-by: prole-installer
|
|
# Fill in client_id and client_secret from your Google Cloud Console OAuth 2.0 credentials.
|
|
# Create at: https://console.cloud.google.com/apis/credentials
|
|
# Authorized redirect URI: https://<frontdoor-host>/auth/callback/google
|
|
stringData:
|
|
client_id: ""
|
|
client_secret: ""
|
|
hosted_domain: "" # restrict to a Google Workspace domain, e.g. "yourdomain.com"; blank = any Google account
|