From df35cd0630062094f9a702e41fa745b038196cbd Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B8rgen=20Stensrud?= Date: Tue, 30 Jun 2026 06:59:37 +0000 Subject: [PATCH] feat(auth-sidecar): inject AUTH_OIDC_COOKIE_DOMAIN (#24) Adds AUTH_OIDC_COOKIE_DOMAIN to the injected OIDC sidecar, from the `policies.forteapps.io/auth-oidc-cookie-domain` annotation. Empty when unset = host-only = unchanged for every app. Pairs with forte-helm + auth-sidecar#23. Safe to merge anytime (opt-in). --------- Co-authored-by: Danijel Simeunovic Reviewed-on: https://git.forteapps.net/Forte/launchpad/pulls/24 Reviewed-by: Danijel Simeunovic --- cluster-resources/policies/auth-sidecar-injector.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/cluster-resources/policies/auth-sidecar-injector.yaml b/cluster-resources/policies/auth-sidecar-injector.yaml index a358bdd..611a365 100644 --- a/cluster-resources/policies/auth-sidecar-injector.yaml +++ b/cluster-resources/policies/auth-sidecar-injector.yaml @@ -233,6 +233,8 @@ spec: value: "{{ regex_replace_all('https?://[^/]*', request.object.metadata.annotations.\"policies.forteapps.io/auth-oidc-callback-path\", '') }}" - name: AUTH_OIDC_SCOPES value: "{{ request.object.metadata.annotations.\"policies.forteapps.io/auth-oidc-scopes\" || 'openid,profile,email' }}" + - name: AUTH_OIDC_COOKIE_DOMAIN + value: "{{ request.object.metadata.annotations.\"policies.forteapps.io/auth-oidc-cookie-domain\" || '' }}" - name: AUTH_PUBLIC_PATHS value: "{{ request.object.metadata.annotations.\"policies.forteapps.io/auth-public-paths\" || '/healthz' }}" - name: AUTH_OIDC_COOKIE_SECRET