---
# Home Assistant OIDC Configuration ConfigMap
# 
# This ConfigMap contains the OIDC configuration snippet that gets appended
# to Home Assistant's configuration.yaml file during bootstrap
#
# The configuration enables hass-openid integration for Authentik OIDC auth
apiVersion: v1
kind: ConfigMap
metadata:
  name: homeassistant-oidc-config
  namespace: home-assistant
data:
  oidc.yaml: |
    # OIDC Authentication via Authentik
    # Users authenticate via Authentik and are auto-created in Home Assistant
    openid:
      client_id: !secret oidc_client_id
      client_secret: !secret oidc_client_secret
      configure_url: "https://auth.kube.huskypup.net/application/o/home-assistant/.well-known/openid-configuration"
      scope: "openid profile email"
      username_field: "preferred_username"
      create_user: true
      block_login: false