Initial commit

infrastructure/netbird/manifests/oidc-trusted-domains.yaml

@@ -0,0 +1,25 @@
+---
+# Override OidcTrustedDomains.js template to include Authentik authority domain
+# The default template only includes $NETBIRD_MGMT_API_ENDPOINT, but @axa-fr/react-oidc
+# needs the OIDC authority domain (auth.kube.huskypup.net) in trusted domains to allow
+# discovery, token, and userinfo fetches.
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: netbird-oidc-trusted-domains
+  namespace: netbird
+data:
+  OidcTrustedDomains.js.tmpl: |
+    const trustedDomains = {
+        default:["$NETBIRD_MGMT_API_ENDPOINT", "$AUTH_AUTHORITY", "https://auth.kube.huskypup.net"],
+        auth0:[]
+    };
+  OidcServiceWorker.js: |
+    // Minimal no-op service worker for @axa-fr/react-oidc
+    // Prevents 404 which can hang the OIDC initialization
+    self.addEventListener('install', function(event) {
+      self.skipWaiting();
+    });
+    self.addEventListener('activate', function(event) {
+      event.waitUntil(self.clients.claim());
+    });