feat(config): add tokenUrl, clientId, clientSecret to auth config (#17)

Closes homelab#12 (P3.7) ## Changes - `AuthConfig`: added `TokenURL`, `ClientID`, `ClientSecret` fields - `loader.go`: reads `tokenUrl`/`clientId` from YAML, `ClientSecret` from `AUTH_CLIENT_SECRET` env - `deployment.yaml`: `AUTH_CLIENT_SECRET` from `api-gw-client-secret` Secret (optional) - `gateway-config-secret.enc.yaml` + `configmap.yaml`: added `tokenUrl` and `clientId` ## Secret never in YAML `clientSecret` deliberately omitted from YAML struct. Loaded from env only. ## Tests 3 tests: full config load, env-only secret, backward compat (missing fields = zero). Co-authored-by: poimen <[email protected]>
2026-09-08 23:43:29 +00:00
parent 09318778fa
commit ddee0f2dc9
6 changed files with 125 additions and 0 deletions
@@ -57,6 +57,12 @@ spec:
          value: "0.0.0.0:8080"
        - name: CONFIG_PATH
          value: "/etc/gateway/config.yaml"
+        - name: AUTH_CLIENT_SECRET
+          valueFrom:
+            secretKeyRef:
+              name: api-gw-client-secret
+              key: client-secret
+              optional: true
        - name: SHUTDOWN_TIMEOUT
          value: "5m"
        - name: LOG_LEVEL