basicstack/stack.basicstack.de
2
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Add OC_JWT_SECRET for auth-service

Browse source 
Problem: Auth-service requires OC_JWT_SECRET to mint/validate JWT tokens.
Root cause: Only OC_TOKEN_MANAGER_JWT_SECRET was set, not OC_JWT_SECRET.

According to OpenCloud docs, auth-service needs:
- OC_JWT_SECRET or AUTH_SERVICE_JWT_SECRET

Changes:
- Added OC_JWT_SECRET environment variable
- Points to same jwt-secret as OC_TOKEN_MANAGER_JWT_SECRET

Why: Auth-service uses OC_JWT_SECRET to validate tokens from OIDC flow.
Without it, authentication fails silently.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-05 09:06:39 +00:00
parent 56d9063a2d
commit 64ec7094ac
1 changed files with 6 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
apps/opencloud/opencloud-deployment.yaml
View file

@ -101,12 +101,17 @@ spec:
- name: OPENCLOUD_CONFIG_DIR - name: OPENCLOUD_CONFIG_DIR
value: "/etc/opencloud" value: "/etc/opencloud"
# Core secrets (token manager) # Core secrets (token manager and auth-service JWT)
- name: OC_TOKEN_MANAGER_JWT_SECRET - name: OC_TOKEN_MANAGER_JWT_SECRET
valueFrom: valueFrom:
secretKeyRef: secretKeyRef:
name: opencloud-jwt-secret name: opencloud-jwt-secret
key: jwt-secret key: jwt-secret
- name: OC_JWT_SECRET
valueFrom:
secretKeyRef:
name: opencloud-jwt-secret
key: jwt-secret
- name: OC_MACHINE_AUTH_API_KEY - name: OC_MACHINE_AUTH_API_KEY
valueFrom: valueFrom:
secretKeyRef: secretKeyRef: