feat(apps): Enable Google sign-in for redoost

2026-10-02 15:03:16 +05:30
parent cfa6a6e227
commit f1ea8c5c7a
3 changed files with 22 additions and 0 deletions
@@ -0,0 +1,15 @@
+---
+apiVersion: bitnami.com/v1alpha1
+kind: SealedSecret
+metadata:
+  name: redoost-auth
+  namespace: redoost
+spec:
+  encryptedData:
+    REDOOST_JWT_SECRET: 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
+    REDOOST_OIDC_CLIENT_SECRET: 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
+  template:
+    metadata:
+      name: redoost-auth
+      namespace: redoost
+    type: Opaque
@@ -3,3 +3,4 @@ kind: Kustomization
 resources:
  - sealed-secret.yaml
  - database-sealedsecret.yaml
+  - auth-sealedsecret.yaml
@@ -41,6 +41,12 @@ spec:
            existingSecret: redoost-s3
          database:
            existingSecret: redoost-db
+          auth:
+            existingSecret: redoost-auth
+            oidc:
+              issuer: https://accounts.google.com
+              provider: google
+              clientId: 197461299437-5uvtgdgfoaqnm5e8un1h92286393gjlf.apps.googleusercontent.com
          networkPolicy:
            enabled: true
            gateway: