From e29eb9611baca4c8069ba5fe9fa484a8c3642d7a Mon Sep 17 00:00:00 2001 From: Scooby Husky Date: Sun, 15 Mar 2026 14:24:53 -0500 Subject: [PATCH] Make Authentik the primary login method for Guacamole Change EXTENSION_PRIORITY from "*,openid" to "openid,*" so unauthenticated users are redirected to Authentik OIDC instead of seeing the database login form. Co-Authored-By: Claude Opus 4.6 --- apps/guacamole/manifests/deployment-complete.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/guacamole/manifests/deployment-complete.yaml b/apps/guacamole/manifests/deployment-complete.yaml index 736451c..ec2f8b0 100644 --- a/apps/guacamole/manifests/deployment-complete.yaml +++ b/apps/guacamole/manifests/deployment-complete.yaml @@ -85,7 +85,7 @@ spec: - name: ENABLE_WEBSOCKET value: "true" - name: EXTENSION_PRIORITY - value: "*,openid" + value: "openid,*" - name: OPENID_RESPONSE_TYPE value: "code" - name: OPENID_AUTHORIZATION_ENDPOINT