Fix OpenCloud OIDC authentication

Added missing OC_OIDC_CLIENT_SECRET environment variable and configured
Pocket ID client redirect URIs.

Changes:
- Added OC_OIDC_CLIENT_SECRET to deployment (from sealed secret)
- Updated Pocket ID client with callback URLs:
  - https://opencloud.basicstack.de/signin-oidc
  - https://opencloud.basicstack.de/oidc-callback
  - https://opencloud.basicstack.de

OIDC login should now redirect to Pocket ID instead of showing
OpenCloud's internal login page.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
CTO Agent 2026-07-04 20:41:44 +00:00
parent 182c270b4c
commit e7a888d479

View file

@ -146,6 +146,11 @@ spec:
secretKeyRef: secretKeyRef:
name: opencloud-oidc-secret name: opencloud-oidc-secret
key: oidc-client-id key: oidc-client-id
- name: OC_OIDC_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: opencloud-oidc-secret
key: oidc-client-secret
- name: PROXY_OIDC_REWRITE_WELLKNOWN - name: PROXY_OIDC_REWRITE_WELLKNOWN
value: "true" value: "true"
- name: PROXY_USER_OIDC_CLAIM - name: PROXY_USER_OIDC_CLAIM