config

infra/values/base/backstage-values.yaml

@@ -36,9 +36,12 @@ upstream:
         cpu: 1000m
         memory: 2560Mi
 
+    extraEnvVarsSecrets:
+    - backstage-oidc-credentials
+
     appConfig:
       app:
-        title: "Forte Developer Portal"
+        title: "Forte Backstage"
         baseUrl: http://localhost:7007
 
       backend:
@@ -47,6 +50,27 @@ upstream:
           client: better-sqlite3
           connection: ":memory:"
 
+      # -- Keycloak OIDC authentication
+      signInPage: oidc
+      auth:
+        environment: production
+        providers:
+          oidc:
+            production:
+              metadataUrl: https://id.forteapps.net/realms/forte/.well-known/openid-configuration
+              clientId: ${AUTH_OIDC_CLIENT_ID}
+              clientSecret: ${AUTH_OIDC_CLIENT_SECRET}
+              prompt: auto
+              signIn:
+                resolvers:
+                - resolver: emailMatchingUserEntityProfileEmail
+
+      # -- Gitea SCM integration (for catalog URL resolution)
+      integrations:
+        gitea:
+        - host: git.forteapps.net
+
+      # -- Software catalog
       catalog:
         rules:
         - allow:
@@ -59,12 +83,22 @@ upstream:
           - Group
           - User
           - Domain
-        locations: []
-        # Register components from Gitea repositories by adding:
-        # - type: url
-        #   target: https://git.forteapps.net/Forte/my-repo/raw/branch/main/catalog-info.yaml
-        #   rules:
-        #   - allow: [Component, System, API]
+        providers:
+          # Auto-discover catalog-info.yaml from all Forte org repos
+          gitea:
+            forte:
+              organization: Forte
+              host: git.forteapps.net
+              catalogPath: catalog-info.yaml
+              schedule:
+                frequency: { minutes: 30 }
+                timeout: { minutes: 3 }
+        locations:
+          # Backstage's own org data (bootstrap teams, systems, domains)
+          # - type: url
+          #   target: https://git.forteapps.net/Forte/backstage-catalog/raw/branch/main/org.yaml
+          #   rules:
+          #   - allow: [Group, User, System, Domain]
 
   ingress:
     enabled: true