Sten eeabe8f49b feat(auth-sidecar): inject AUTH_OIDC_ALLOWED_RETURN_HOSTS ...

Reads the new `policies.forteapps.io/auth-oidc-allowed-return-hosts` pod
annotation into the OIDC sidecar's AUTH_OIDC_ALLOWED_RETURN_HOSTS env var
(mirrors the existing cookie-domain wiring). Enables origin-preserving
post-login redirects so a login that round-trips through a shared apex
callback returns the user to the originating subdomain.

Absent annotation => empty => unchanged path-only redirect, so all other
apps injected by this policy are unaffected. Requires auth-sidecar >= v1.5.0
(Forte/auth-sidecar#24) and the matching forteapp chart annotation.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-01 15:47:45 +02:00

..

network

netpol all remove

2026-04-25 16:04:13 +02:00

policies

feat(auth-sidecar): inject AUTH_OIDC_ALLOWED_RETURN_HOSTS

2026-07-01 15:47:45 +02:00

argocd-notifications-secret-sealed.yaml

argocd notifications

2026-03-04 10:50:35 +01:00

argocd-oidc-secret-sync.yaml

argocd tls

2026-04-25 11:49:17 +02:00

argocd-repo-server-config.yaml

argocd tls

2026-04-25 11:49:17 +02:00

azuredns-config-sealed.yaml

dns01

2026-05-29 21:48:32 +02:00

cert-manager-namespace.yaml

fixes

2026-02-09 15:14:00 +01:00

forte10x-repo-credentials-sealed.yaml

10x cred

2026-03-15 22:17:36 +01:00

gitea-backup-cronjob.yaml

feature/multi-cloud (#14)

2026-04-24 08:48:53 +00:00

gitea-ssh-ingressroute.yaml

migration

2026-04-13 15:54:14 +02:00

kyverno-config.yaml

apps group

2026-03-06 09:41:05 +01:00

letsencrypt-issuer.yaml

feat(forte-drop): issuer dnsZones for *.drop.forteapps.net (subdomain-per-drop) (#22)

2026-06-26 11:38:30 +00:00

mcp10x-repo-credentials-sealed.yaml

credentials

2026-03-10 10:59:36 +01:00

secrets-namespace.yaml

fixes

2026-02-09 15:14:00 +01:00