diff --git a/apps/k8s01/forecastle/oauth2.yaml b/apps/k8s01/forecastle/oauth2.yaml
index b574483739d9a7e2d12c06a73c195e72b245f312..579e0e09bc36af51acc9942f8ba60fe39f6813e2 100644
--- a/apps/k8s01/forecastle/oauth2.yaml
+++ b/apps/k8s01/forecastle/oauth2.yaml
@@ -12,8 +12,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-02-22T23:30:07Z"
-    mac: ENC[AES256_GCM,data:1kJX70bv2O21YyMFFkVyOpUiQkA0r7Edg5fe+vVRGF1Az0VoHk3Ut1S23G2tHwQVpknl3PUCpXEBTxPDaxQ2y7tI/yNP84W5VL3aH64yJb4E017bc+JrOdOjTOB/ZLmg6ARhJAlAYhh5byeHAmyPi5GVX9lfTWdMF1cotwyNebg=,iv:SiVX4rb/Jxh0Si17IO75v5myXzSpo2z4Lhq7DhtOc0Q=,tag:dB8Cbx8JQdm09K7FRMfqVw==,type:str]
+    lastmodified: "2023-09-11T07:40:32Z"
+    mac: ENC[AES256_GCM,data:oytgFyb3mPvn0+lbs4ZP53SgMJlPpc5Afscn5emlpF5P4SPl44skDxyn6df2BaR2bRcaY+Q8+BlLOk27er4eZLUQ6JVZxeLJOeGdIobAqQkvi+8loW61D/GeCSV86zA1+M4aQCgXPUVnLnn5Az+5jH25etiRe24mWJT1jb45fj8=,iv:qEb7RirCKxXNmZFei3B1hRMnP4hetEOaC0K+nw9Guv0=,tag:Fx7XnzYSwoMHeQX+1VptPQ==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -91,6 +91,7 @@ spec:
             allowed-role: apps-k8s01:user
             whitelist-domain: ENC[AES256_GCM,data:ZttZ3akgaGWlRzKGK1HB4yo7GTIAoS+l,iv:mO4DOpJWfYOpuiaD5I+bV68AGw54l4C/vzqbhadaGxs=,tag:iik7NCC3Q9vppLkIqRTALQ==,type:str]
             silence-ping-logging: "true"
+            scope: openid email profile
         replicaCount: 2
         securityContext:
             enabled: true
@@ -124,8 +125,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-02-22T23:30:07Z"
-    mac: ENC[AES256_GCM,data:1kJX70bv2O21YyMFFkVyOpUiQkA0r7Edg5fe+vVRGF1Az0VoHk3Ut1S23G2tHwQVpknl3PUCpXEBTxPDaxQ2y7tI/yNP84W5VL3aH64yJb4E017bc+JrOdOjTOB/ZLmg6ARhJAlAYhh5byeHAmyPi5GVX9lfTWdMF1cotwyNebg=,iv:SiVX4rb/Jxh0Si17IO75v5myXzSpo2z4Lhq7DhtOc0Q=,tag:dB8Cbx8JQdm09K7FRMfqVw==,type:str]
+    lastmodified: "2023-09-11T07:40:32Z"
+    mac: ENC[AES256_GCM,data:oytgFyb3mPvn0+lbs4ZP53SgMJlPpc5Afscn5emlpF5P4SPl44skDxyn6df2BaR2bRcaY+Q8+BlLOk27er4eZLUQ6JVZxeLJOeGdIobAqQkvi+8loW61D/GeCSV86zA1+M4aQCgXPUVnLnn5Az+5jH25etiRe24mWJT1jb45fj8=,iv:qEb7RirCKxXNmZFei3B1hRMnP4hetEOaC0K+nw9Guv0=,tag:Fx7XnzYSwoMHeQX+1VptPQ==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -191,8 +192,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-02-22T23:30:07Z"
-    mac: ENC[AES256_GCM,data:1kJX70bv2O21YyMFFkVyOpUiQkA0r7Edg5fe+vVRGF1Az0VoHk3Ut1S23G2tHwQVpknl3PUCpXEBTxPDaxQ2y7tI/yNP84W5VL3aH64yJb4E017bc+JrOdOjTOB/ZLmg6ARhJAlAYhh5byeHAmyPi5GVX9lfTWdMF1cotwyNebg=,iv:SiVX4rb/Jxh0Si17IO75v5myXzSpo2z4Lhq7DhtOc0Q=,tag:dB8Cbx8JQdm09K7FRMfqVw==,type:str]
+    lastmodified: "2023-09-11T07:40:32Z"
+    mac: ENC[AES256_GCM,data:oytgFyb3mPvn0+lbs4ZP53SgMJlPpc5Afscn5emlpF5P4SPl44skDxyn6df2BaR2bRcaY+Q8+BlLOk27er4eZLUQ6JVZxeLJOeGdIobAqQkvi+8loW61D/GeCSV86zA1+M4aQCgXPUVnLnn5Az+5jH25etiRe24mWJT1jb45fj8=,iv:qEb7RirCKxXNmZFei3B1hRMnP4hetEOaC0K+nw9Guv0=,tag:Fx7XnzYSwoMHeQX+1VptPQ==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-