Sten eeabe8f49b feat(auth-sidecar): inject AUTH_OIDC_ALLOWED_RETURN_HOSTS ...

Reads the new `policies.forteapps.io/auth-oidc-allowed-return-hosts` pod
annotation into the OIDC sidecar's AUTH_OIDC_ALLOWED_RETURN_HOSTS env var
(mirrors the existing cookie-domain wiring). Enables origin-preserving
post-login redirects so a login that round-trips through a shared apex
callback returns the user to the originating subdomain.

Absent annotation => empty => unchanged path-only redirect, so all other
apps injected by this policy are unaffected. Requires auth-sidecar >= v1.5.0
(Forte/auth-sidecar#24) and the matching forteapp chart annotation.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-01 15:47:45 +02:00

..

auth-sidecar-injector.yaml

feat(auth-sidecar): inject AUTH_OIDC_ALLOWED_RETURN_HOSTS

2026-07-01 15:47:45 +02:00

bare-pod-cleaner.yaml

fix

2026-03-06 09:10:07 +01:00

default-ns-blocker.yaml

cleanup

2026-03-06 09:54:07 +01:00

keycloak-client-cloner.yaml

client cloner (#3)

2026-04-17 13:42:44 +00:00

replicaset-cleaner.yaml

shuffle

2026-03-06 09:32:36 +01:00

secret-cloner.yaml

remove trivy

2026-04-24 15:24:58 +02:00