jakman85andClaude Opus 4.8
951973b74d
oauth2-proxy read the base64 cookie value as raw bytes (44) → 'must be 16/24/32 bytes' crashloop. Regenerated cookie-secret as openssl rand -hex 16 (32 bytes). client-id + client-secret unchanged (still match the realm oauth2-proxy client). Value tracked in ~/.config/home-k3s/keycloak-sso-secrets.txt. Co-Authored-By: Claude Opus 4.8 <[email protected]>
31 lines
1.7 KiB
YAML
31 lines
1.7 KiB
YAML
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: oauth2-proxy-credentials
|
|
namespace: oauth2-proxy
|
|
type: Opaque
|
|
stringData:
|
|
client-id: ENC[AES256_GCM,data:20oGSPIZ8snVHSLB,iv:0vwysCCjH9wk2eX4h/Gy15UFU8LDmluVywXHXh8oCv4=,tag:rjyyt6UAg+b8aAWeSWoVVw==,type:str]
|
|
client-secret: ENC[AES256_GCM,data:C5mAVQTEoMWXcavNADbYWjcOQJVSa13DFRScwI7bpjtNrNuKAilD/13On+QnKsvh+IkUEk9O3Zv9iwpT7kWOFQ==,iv:hT76o2HC0OWDllacc59lCIHMqT1rePZ5vPxZmKbvEh4=,tag:Cd/cpWZvDpb2ny2LU0lKTw==,type:str]
|
|
cookie-secret: ENC[AES256_GCM,data:2o/Nr6qIlV07GV54uocRUfBYx/MXpilwO6t2adrUTIk=,iv:51qNjMdlARjw8FFftby+Vc4Ea8Z9CN6Hrev54pAXzCk=,tag:ke/JWhCNzw8bL92XkiHwaw==,type:str]
|
|
sops:
|
|
kms: []
|
|
gcp_kms: []
|
|
azure_kv: []
|
|
hc_vault: []
|
|
age:
|
|
- recipient: age175l8mdpdfu7hq0aml3exs3gykarwjmuvr23sq56s3wjejnyk44wsp4mfzg
|
|
enc: |
|
|
-----BEGIN AGE ENCRYPTED FILE-----
|
|
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCZzFmLzM3bktMRDZ1K1hi
|
|
dHZsT2RoSTlPSyt4VzdMb3R6c3p0WTRhWDNzCkhsNjczeVVyLzMyNTYyeFR2ZmJ0
|
|
ZWVHT2t1elZDOXZEaXJ4eWZGU3NKdzAKLS0tIEdiZ1lrV1NUa2padk1LR29IUHlE
|
|
VGJWRGtOYnFnUXd2UHlTZ0dScDdCU0kKKyBfBHaNtoeh6VwFvWfQ5rvZOZioDfel
|
|
l/+ltorD9jOCyoS2Lzjw+88DfGinD5lCf1HVtti2G4Ry34yKL99/fQ==
|
|
-----END AGE ENCRYPTED FILE-----
|
|
lastmodified: "2026-08-25T03:17:09Z"
|
|
mac: ENC[AES256_GCM,data:oQoaPOhJ65waud26yqnlR4d3GunQ82oQHbZeCmsCFKt9es4UUNpHEiVfUXelsk/uqk2sIZr4B5dMJtqRQjCQR0yXmV1xJsVtAHpJ70sxvu5yf1nq9b96M2Ngv7KjcWjKuYesWboxChEGiRtISPnWckVBJmMKo33WwndM9gXd8pE=,iv:7LDbsfDW82ITWuOxY25mUmxAZ8tFQL668f3wVmfaabY=,tag:O0n8lJh45ZkECjpn+FscHg==,type:str]
|
|
pgp: []
|
|
encrypted_regex: ^(data|stringData)$
|
|
version: 3.9.4
|