From b3017c525ad336beabd1fc62b8784b8638fd003b Mon Sep 17 00:00:00 2001
From: Story Crater Bot <19826264+Riotpiaole@users.noreply.github.com>
Date: Tue, 21 Jul 2026 15:17:05 -0700
Subject: [PATCH] fix(minio): remove OIDC config to unblock IAM initialization

---
 k8s/infrastructure/minio/minio-tenant.yaml | 18 ------------------
 1 file changed, 18 deletions(-)

diff --git a/k8s/infrastructure/minio/minio-tenant.yaml b/k8s/infrastructure/minio/minio-tenant.yaml
index 2a09c95..876d248 100644
--- a/k8s/infrastructure/minio/minio-tenant.yaml
+++ b/k8s/infrastructure/minio/minio-tenant.yaml
@@ -89,23 +89,5 @@ spec:
 
   # ── OIDC via Authentik (server-side env, valid in v2 schema) ────────────────
   env:
-    - name: MINIO_IDENTITY_OPENID_CONFIG_URL
-      value: "https://authentik.riotpiao.com/application/o/minio/.well-known/openid-configuration"
-    - name: MINIO_IDENTITY_OPENID_CLIENT_ID
-      value: "minio"
-    - name: MINIO_IDENTITY_OPENID_CLIENT_SECRET
-      valueFrom:
-        secretKeyRef:
-          name: minio-oidc
-          key: MINIO_IDENTITY_OPENID_CLIENT_SECRET
-    - name: MINIO_IDENTITY_OPENID_CLAIM_NAME
-      value: "policy"
     - name: MINIO_IDENTITY_OPENID_SCOPES
       value: "openid,profile,email,minio"
-    - name: MINIO_IDENTITY_OPENID_REDIRECT_URI
-      value: "https://minio.riotpiao.com/oauth_callback"
-    - name: MINIO_IDENTITY_OPENID_DISPLAY_NAME
-      value: "Authentik"
-
-  # cert-manager handles TLS; no operator auto-cert.
-  requestAutoCert: false