---
# Override OidcTrustedDomains.js template to include Authentik authority domain
# The default template only includes $NETBIRD_MGMT_API_ENDPOINT, but @axa-fr/react-oidc
# needs the OIDC authority domain (auth.kube.huskypup.net) in trusted domains to allow
# discovery, token, and userinfo fetches.
apiVersion: v1
kind: ConfigMap
metadata:
  name: netbird-oidc-trusted-domains
  namespace: netbird
data:
  OidcTrustedDomains.js.tmpl: |
    const trustedDomains = {
        default:["$NETBIRD_MGMT_API_ENDPOINT", "$AUTH_AUTHORITY", "https://auth.kube.huskypup.net"],
        auth0:[]
    };
  OidcServiceWorker.js: |
    // Minimal no-op service worker for @axa-fr/react-oidc
    // Prevents 404 which can hang the OIDC initialization
    self.addEventListener('install', function(event) {
      self.skipWaiting();
    });
    self.addEventListener('activate', function(event) {
      event.waitUntil(self.clients.claim());
    });