podAnnotations:
  policies.forteapps.io/auth: "true"
  policies.forteapps.io/auth-type: "oidc"
  policies.forteapps.io/auth-oidc-authority: "https://id.forteapps.net/realms/forte"
  policies.forteapps.io/auth-oidc-client-id: "chibisafe"
  policies.forteapps.io/auth-oidc-callback-path: "https://chibisafe.forteapps.net/auth/callback"
  policies.forteapps.io/auth-oidc-credentials-secret: "chibisafe-oidc-credentials"

# Ingress disabled — using IngressRoute to target sidecar port directly
ingress:
  enabled: false