From 3618fd33870ea89c973bd72d1baa443e371dcbb2 Mon Sep 17 00:00:00 2001
From: Danijel Simeunovic <danijel.simeunovic@fortedigital.com>
Date: Wed, 27 May 2026 23:15:59 +0200
Subject: [PATCH] minio oidc

---
 infra/values/base/minio-values.yaml    |  6 ++++++
 infra/values/upc-dev/minio-values.yaml | 20 ++++++++++----------
 2 files changed, 16 insertions(+), 10 deletions(-)

diff --git a/infra/values/base/minio-values.yaml b/infra/values/base/minio-values.yaml
index d80f797..91ac6e7 100644
--- a/infra/values/base/minio-values.yaml
+++ b/infra/values/base/minio-values.yaml
@@ -25,6 +25,12 @@ resources:
     cpu: 500m
     memory: 512Mi
 
+## StatefulSet update strategy: OnDelete prevents Multi-Attach errors
+## with ReadWriteOnce PVCs on single-replica deployments.
+## After a values change, manually delete the pod to recreate.
+statefulSetUpdate:
+  updateStrategy: OnDelete
+
 ## Service configuration
 service:
   type: ClusterIP
diff --git a/infra/values/upc-dev/minio-values.yaml b/infra/values/upc-dev/minio-values.yaml
index 7bfb048..4bce6c9 100644
--- a/infra/values/upc-dev/minio-values.yaml
+++ b/infra/values/upc-dev/minio-values.yaml
@@ -42,13 +42,13 @@ ingress:
 ## TEMPORARILY disabled: the registrar needs time to create minio-oidc-credentials.
 ## Re-enable once `kubectl get secret minio-oidc-credentials -n minio` succeeds.
 oidc:
-  enabled: false
-  # configUrl: "https://id.forteapps.net/realms/forte/.well-known/openid-configuration"
-  # clientId: "minio"
-  # existingClientSecretName: "minio-oidc-credentials"
-  # existingClientSecretKey: "client-secret"
-  # claimName: "policy"
-  # scopes: "openid,email,profile"
-  # redirectUri: "https://zipline.forteapps.net/oauth_callback"
-  # claimPrefix: ""
-  # comment: ""
+  enabled: true
+  configUrl: "https://id.forteapps.net/realms/forte/.well-known/openid-configuration"
+  clientId: "minio"
+  existingClientSecretName: "minio-oidc-credentials"
+  existingClientSecretKey: "client-secret"
+  claimName: "policy"
+  scopes: "openid,email,profile"
+  redirectUri: "https://zipline.forteapps.net/oauth_callback"
+  claimPrefix: ""
+  comment: ""