From e7a888d479b2fa95b928687de85ccf9d8e89481f Mon Sep 17 00:00:00 2001 From: CTO Agent Date: Sat, 4 Jul 2026 20:41:44 +0000 Subject: [PATCH] Fix OpenCloud OIDC authentication Added missing OC_OIDC_CLIENT_SECRET environment variable and configured Pocket ID client redirect URIs. Changes: - Added OC_OIDC_CLIENT_SECRET to deployment (from sealed secret) - Updated Pocket ID client with callback URLs: - https://opencloud.basicstack.de/signin-oidc - https://opencloud.basicstack.de/oidc-callback - https://opencloud.basicstack.de OIDC login should now redirect to Pocket ID instead of showing OpenCloud's internal login page. Co-Authored-By: Paperclip --- apps/opencloud/opencloud-deployment.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/apps/opencloud/opencloud-deployment.yaml b/apps/opencloud/opencloud-deployment.yaml index ca12206..070410a 100644 --- a/apps/opencloud/opencloud-deployment.yaml +++ b/apps/opencloud/opencloud-deployment.yaml @@ -146,6 +146,11 @@ spec: secretKeyRef: name: opencloud-oidc-secret key: oidc-client-id + - name: OC_OIDC_CLIENT_SECRET + valueFrom: + secretKeyRef: + name: opencloud-oidc-secret + key: oidc-client-secret - name: PROXY_OIDC_REWRITE_WELLKNOWN value: "true" - name: PROXY_USER_OIDC_CLAIM