From 1835ba151b67ce1fccef2229fd6ff5205de7b60a Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Mon, 11 Sep 2023 09:40:41 +0200
Subject: [PATCH] fix(forecastle): Hardcode default scope

References:
https://github.com/oauth2-proxy/oauth2-proxy/issues/2222
---
 apps/k8s01/forecastle/oauth2.yaml | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/apps/k8s01/forecastle/oauth2.yaml b/apps/k8s01/forecastle/oauth2.yaml
index b57448373..579e0e09b 100644
--- a/apps/k8s01/forecastle/oauth2.yaml
+++ b/apps/k8s01/forecastle/oauth2.yaml
@@ -12,8 +12,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-02-22T23:30:07Z"
-    mac: ENC[AES256_GCM,data:1kJX70bv2O21YyMFFkVyOpUiQkA0r7Edg5fe+vVRGF1Az0VoHk3Ut1S23G2tHwQVpknl3PUCpXEBTxPDaxQ2y7tI/yNP84W5VL3aH64yJb4E017bc+JrOdOjTOB/ZLmg6ARhJAlAYhh5byeHAmyPi5GVX9lfTWdMF1cotwyNebg=,iv:SiVX4rb/Jxh0Si17IO75v5myXzSpo2z4Lhq7DhtOc0Q=,tag:dB8Cbx8JQdm09K7FRMfqVw==,type:str]
+    lastmodified: "2023-09-11T07:40:32Z"
+    mac: ENC[AES256_GCM,data:oytgFyb3mPvn0+lbs4ZP53SgMJlPpc5Afscn5emlpF5P4SPl44skDxyn6df2BaR2bRcaY+Q8+BlLOk27er4eZLUQ6JVZxeLJOeGdIobAqQkvi+8loW61D/GeCSV86zA1+M4aQCgXPUVnLnn5Az+5jH25etiRe24mWJT1jb45fj8=,iv:qEb7RirCKxXNmZFei3B1hRMnP4hetEOaC0K+nw9Guv0=,tag:Fx7XnzYSwoMHeQX+1VptPQ==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -91,6 +91,7 @@ spec:
             allowed-role: apps-k8s01:user
             whitelist-domain: ENC[AES256_GCM,data:ZttZ3akgaGWlRzKGK1HB4yo7GTIAoS+l,iv:mO4DOpJWfYOpuiaD5I+bV68AGw54l4C/vzqbhadaGxs=,tag:iik7NCC3Q9vppLkIqRTALQ==,type:str]
             silence-ping-logging: "true"
+            scope: openid email profile
         replicaCount: 2
         securityContext:
             enabled: true
@@ -124,8 +125,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-02-22T23:30:07Z"
-    mac: ENC[AES256_GCM,data:1kJX70bv2O21YyMFFkVyOpUiQkA0r7Edg5fe+vVRGF1Az0VoHk3Ut1S23G2tHwQVpknl3PUCpXEBTxPDaxQ2y7tI/yNP84W5VL3aH64yJb4E017bc+JrOdOjTOB/ZLmg6ARhJAlAYhh5byeHAmyPi5GVX9lfTWdMF1cotwyNebg=,iv:SiVX4rb/Jxh0Si17IO75v5myXzSpo2z4Lhq7DhtOc0Q=,tag:dB8Cbx8JQdm09K7FRMfqVw==,type:str]
+    lastmodified: "2023-09-11T07:40:32Z"
+    mac: ENC[AES256_GCM,data:oytgFyb3mPvn0+lbs4ZP53SgMJlPpc5Afscn5emlpF5P4SPl44skDxyn6df2BaR2bRcaY+Q8+BlLOk27er4eZLUQ6JVZxeLJOeGdIobAqQkvi+8loW61D/GeCSV86zA1+M4aQCgXPUVnLnn5Az+5jH25etiRe24mWJT1jb45fj8=,iv:qEb7RirCKxXNmZFei3B1hRMnP4hetEOaC0K+nw9Guv0=,tag:Fx7XnzYSwoMHeQX+1VptPQ==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -191,8 +192,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-02-22T23:30:07Z"
-    mac: ENC[AES256_GCM,data:1kJX70bv2O21YyMFFkVyOpUiQkA0r7Edg5fe+vVRGF1Az0VoHk3Ut1S23G2tHwQVpknl3PUCpXEBTxPDaxQ2y7tI/yNP84W5VL3aH64yJb4E017bc+JrOdOjTOB/ZLmg6ARhJAlAYhh5byeHAmyPi5GVX9lfTWdMF1cotwyNebg=,iv:SiVX4rb/Jxh0Si17IO75v5myXzSpo2z4Lhq7DhtOc0Q=,tag:dB8Cbx8JQdm09K7FRMfqVw==,type:str]
+    lastmodified: "2023-09-11T07:40:32Z"
+    mac: ENC[AES256_GCM,data:oytgFyb3mPvn0+lbs4ZP53SgMJlPpc5Afscn5emlpF5P4SPl44skDxyn6df2BaR2bRcaY+Q8+BlLOk27er4eZLUQ6JVZxeLJOeGdIobAqQkvi+8loW61D/GeCSV86zA1+M4aQCgXPUVnLnn5Az+5jH25etiRe24mWJT1jb45fj8=,iv:qEb7RirCKxXNmZFei3B1hRMnP4hetEOaC0K+nw9Guv0=,tag:Fx7XnzYSwoMHeQX+1VptPQ==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
-- 
GitLab