apiVersion: v1
kind: Secret
metadata:
  name: keycloak-client-minio
  namespace: minio
  labels:
    keycloak.forteapps.net/client-config: "true"
stringData:
  client.json: |
    {
      "clientId": "minio",
      "name": "MinIO",
      "redirectUris": ["https://minio.forteapps.net/oauth_callback"],
      "webOrigins": ["https://minio.forteapps.net"],
      "protocolMappers": [
        {
          "name": "minio-policy-mapper",
          "protocol": "openid-connect",
          "protocolMapper": "oidc-usermodel-attribute-mapper",
          "config": {
            "user.attribute": "policy",
            "claim.name": "policy",
            "jsonType.label": "String",
            "id.token.claim": "true",
            "access.token.claim": "true",
            "userinfo.token.claim": "true"
          }
        }
      ],
      "secret": {
        "namespace": "minio",
        "name": "minio-oidc-credentials",
        "keys": { "clientId": "client-id", "clientSecret": "client-secret" }
      }
    }