Initial commit

apps/home-assistant/manifests/oidc-config.yaml

@@ -0,0 +1,24 @@
+---
+# Home Assistant OIDC Configuration ConfigMap
+# 
+# This ConfigMap contains the OIDC configuration snippet that gets appended
+# to Home Assistant's configuration.yaml file during bootstrap
+#
+# The configuration enables hass-openid integration for Authentik OIDC auth
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: homeassistant-oidc-config
+  namespace: home-assistant
+data:
+  oidc.yaml: |
+    # OIDC Authentication via Authentik
+    # Users authenticate via Authentik and are auto-created in Home Assistant
+    openid:
+      client_id: !secret oidc_client_id
+      client_secret: !secret oidc_client_secret
+      configure_url: "https://auth.kube.huskypup.net/application/o/home-assistant/.well-known/openid-configuration"
+      scope: "openid profile email"
+      username_field: "preferred_username"
+      create_user: true
+      block_login: false