poimenandrock ddee0f2dc9 feat(config): add tokenUrl, clientId, clientSecret to auth config (#17) ...

Closes homelab#12 (P3.7)

## Changes

- `AuthConfig`: added `TokenURL`, `ClientID`, `ClientSecret` fields
- `loader.go`: reads `tokenUrl`/`clientId` from YAML, `ClientSecret` from `AUTH_CLIENT_SECRET` env
- `deployment.yaml`: `AUTH_CLIENT_SECRET` from `api-gw-client-secret` Secret (optional)
- `gateway-config-secret.enc.yaml` + `configmap.yaml`: added `tokenUrl` and `clientId`

## Secret never in YAML

`clientSecret` deliberately omitted from YAML struct. Loaded from env only.

## Tests

3 tests: full config load, env-only secret, backward compat (missing fields = zero).

Co-authored-by: poimen <[email protected]>

2026-09-08 23:43:29 +00:00

..

configmap.yaml

feat(config): add tokenUrl, clientId, clientSecret to auth config (#17)

2026-09-08 23:43:29 +00:00

deployment.yaml

feat(config): add tokenUrl, clientId, clientSecret to auth config (#17)

2026-09-08 23:43:29 +00:00

gateway-config-secret.enc.yaml

feat(config): add tokenUrl, clientId, clientSecret to auth config (#17)

2026-09-08 23:43:29 +00:00

kustomization.yaml

fix: move gateway config from plaintext ConfigMap to SOPS-encrypted Secret

2026-09-05 00:28:45 -07:00

network-policy.yaml

fix(s3): correct MinIO service port and allow egress

2026-09-08 09:58:36 -07:00

service.yaml

chore: initial commit of Go API gateway

2026-08-19 20:54:34 -07:00

serviceaccount.yaml

fix: add serviceaccount manifest (was in deleted rbac.yaml)

2026-08-26 19:49:11 -07:00