add OIDC auth to state-docs-vmcp VirtualMCPServer

Switch incomingAuth from anonymous to oidc, wiring Keycloak (home-lab realm at cloak.olb42.com) as the provider with clientId state-docs-vmcp. Secret ref (state-docs-vmcp-secret, key: client-secret) is added to kustomization as a TODO comment pending the sealed secret creation. Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
2026-06-14 16:55:43 +00:00
parent 8b9e54a924
commit b497211278
2 changed files with 8 additions and 1 deletions
@@ -14,7 +14,13 @@ spec:
  embeddingServerRef:
    name: homelab-embedding
  incomingAuth:
-    type: anonymous
+    type: oidc
+    oidc:
+      issuerUrl: https://cloak.olb42.com/realms/home-lab
+      clientId: state-docs-vmcp
+      clientSecretRef:
+        name: state-docs-vmcp-secret
+        key: client-secret
  config:
    aggregation:
      conflictResolution: prefix