feat : update

k8s/base/configmap.yaml

@@ -7,6 +7,9 @@ metadata:
 data:
   BASE_URL: https://guide.sudloh.com
   BETTER_AUTH_URL: https://guide.sudloh.com
+  SUDLOH_OIDC_ISSUER: https://account.sudloh.com/api/auth
+  SUDLOH_OIDC_REDIRECT_URI: https://guide.sudloh.com/api/auth/callback/sudloh
+  SUDLOH_OIDC_ONLY: "true"
   # Traefik must overwrite this header; do not expose the app directly.
   TRUSTED_CLIENT_IP_HEADER: x-real-ip
   DATABASE_POOL_SIZE: "10"

k8s/base/deployment.yaml

@@ -87,6 +87,18 @@ spec:
                 secretKeyRef:
                   name: buzz-sheet-env
                   key: BETTER_AUTH_SECRET
+            - name: SUDLOH_OIDC_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: buzz-sheet-env
+                  key: SUDLOH_OIDC_CLIENT_ID
+                  optional: true
+            - name: SUDLOH_OIDC_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: buzz-sheet-env
+                  key: SUDLOH_OIDC_CLIENT_SECRET
+                  optional: true
             - name: RESEND_API_KEY
               valueFrom:
                 secretKeyRef: