fix(GRO-887/GRO-898): Demo SSO - wire auth env vars into API deployment #368

Closed

groombook-engineer[bot] wants to merge 1 commits from fix/gro-898-demo-sso-env-vars into dev

Author	SHA1	Message	Date
Hugh Hackman	e26718be4e	fix(GRO-898): wire BETTER_AUTH_URL and OIDC_* secret refs into API deployment The base API deployment chart was missing the auth env var wiring needed for Better Auth + OIDC Authentik SSO: - BETTER_AUTH_URL: explicit base URL (was hardcoded in kustomize patch only) - OIDC_CLIENT_ID / OIDC_CLIENT_SECRET: secret refs (were missing entirely) - BETTER_AUTH_SECRET: secret ref (was missing entirely) - OIDC_INTERNAL_BASE: conditional env var (was missing from base chart) The groombook-auth sealed secret already holds all three encrypted values (BETTER_AUTH_SECRET, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET). The chart just wasn't referencing them for the base deployment. Also rename oidcIssuer → oidcIssuer in values for consistency, and add new values betterAuthUrl + internalBaseUrl to cover all required vars. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-04-29 23:43:12 +00:00

Author

SHA1

Message

Date

Hugh Hackman

e26718be4e

fix(GRO-898): wire BETTER_AUTH_URL and OIDC_* secret refs into API deployment

The base API deployment chart was missing the auth env var wiring needed
for Better Auth + OIDC Authentik SSO:

- BETTER_AUTH_URL: explicit base URL (was hardcoded in kustomize patch only)
- OIDC_CLIENT_ID / OIDC_CLIENT_SECRET: secret refs (were missing entirely)
- BETTER_AUTH_SECRET: secret ref (was missing entirely)
- OIDC_INTERNAL_BASE: conditional env var (was missing from base chart)

The groombook-auth sealed secret already holds all three encrypted values
(BETTER_AUTH_SECRET, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET). The chart just
wasn't referencing them for the base deployment.

Also rename oidcIssuer → oidcIssuer in values for consistency, and add
new values betterAuthUrl + internalBaseUrl to cover all required vars.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-29 23:43:12 +00:00

fix(GRO-887/GRO-898): Demo SSO - wire auth env vars into API deployment #368

1 Commits