mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 11:03:59 +00:00
dc099b99f9
- Add KNOE_AUTH_BASE_URL=https://api.prole.org/auth to knoe-auth deployment; LoginController.java defaulted to api.0.knoe.dev causing redirect_uri mismatch on every Google login attempt - Update oauth2-proxy-deployment-prole.yaml to reflect live config: --provider=oidc --oidc-issuer-url=https://api.prole.org/auth (was stale --provider=google; live deployment already switched to OIDC) - Fix redirect URIs in knoe-auth-google-prole-secret.example.yaml: remove spurious double /auth/auth/ prefix (Kong strip_path=false so Spring @RequestMapping(/auth) gives /auth/callback/google not /auth/auth/callback/google) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
30 lines
1.0 KiB
YAML
30 lines
1.0 KiB
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: knoe-auth-google-prole
|
|
namespace: knoe-system
|
|
labels:
|
|
app.kubernetes.io/managed-by: knoe-installer
|
|
# Google OAuth2 credentials for the prole.org Workspace login path (Path A).
|
|
#
|
|
# 1. Create an OAuth 2.0 Client ID at:
|
|
# https://console.cloud.google.com/apis/credentials
|
|
# Application type: Web application
|
|
# Authorized redirect URIs:
|
|
# https://api.prole.org/auth/callback/google
|
|
# https://api.prole.org/auth/enroll/google-callback
|
|
#
|
|
# 2. Store real values in OpenBao:
|
|
# bao kv put knoe/oauth2/google-prole-org \
|
|
# client_id="<CLIENT_ID>" client_secret="<CLIENT_SECRET>"
|
|
#
|
|
# 3. Create the secret from OpenBao:
|
|
# kubectl create secret generic knoe-auth-google-prole \
|
|
# --namespace knoe-system \
|
|
# --from-literal=client_id="$(bao kv get -field=client_id knoe/oauth2/google-prole-org)" \
|
|
# --from-literal=client_secret="$(bao kv get -field=client_secret knoe/oauth2/google-prole-org)"
|
|
type: Opaque
|
|
stringData:
|
|
client_id: ""
|
|
client_secret: ""
|