From 066c12463c705484f5b76f61e93ad7047582cd2f Mon Sep 17 00:00:00 2001 From: rock Date: Mon, 28 Sep 2026 08:57:54 +0800 Subject: [PATCH] fix(poimen-frontend): correct secret key refs, remove unused NextAuth env MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - LLM_OIDC_TOKEN_URL/CLIENT_ID/CLIENT_SECRET/SCOPE → all from poimen-secrets (correct keys) - Remove NEXTAUTH_URL/NEXTAUTH_SECRET (app uses getServerToken(), not NextAuth) - GOTIFY_TOKEN → poimen-secrets (key patched in-cluster) --- k8s/apps/poimen/frontend-deployment.yaml | 17 ++++++----------- 1 file changed, 6 insertions(+), 11 deletions(-) diff --git a/k8s/apps/poimen/frontend-deployment.yaml b/k8s/apps/poimen/frontend-deployment.yaml index c5cbd12..ccef17a 100644 --- a/k8s/apps/poimen/frontend-deployment.yaml +++ b/k8s/apps/poimen/frontend-deployment.yaml @@ -59,27 +59,22 @@ spec: valueFrom: secretKeyRef: name: poimen-secrets - key: OIDC_TOKEN_URL + key: LLM_OIDC_TOKEN_URL - name: LLM_OIDC_CLIENT_ID valueFrom: secretKeyRef: - name: poimen-oauth2-creds - key: client_id + name: poimen-secrets + key: LLM_OIDC_CLIENT_ID - name: LLM_OIDC_CLIENT_SECRET valueFrom: secretKeyRef: - name: poimen-oauth2-creds - key: client_secret + name: poimen-secrets + key: LLM_OIDC_CLIENT_SECRET - name: LLM_OIDC_SCOPE - value: "openid llm_inference" - # NextAuth - - name: NEXTAUTH_URL - value: "https://poimen.riotpiao.com" - - name: NEXTAUTH_SECRET valueFrom: secretKeyRef: name: poimen-secrets - key: NEXTAUTH_SECRET + key: LLM_OIDC_SCOPE # Gotify (server-side notifications + HITL messages) - name: GOTIFY_URL value: "http://gotify.notifications.svc.cluster.local"