diff --git a/apps/k8s01/nas/oauth2.yaml b/apps/k8s01/nas/oauth2.yaml
index 03112c401f03f9ccc17909846b4f11ca9e164223..6a366f64143c73cd6dfd118f4e40cf7ac4436a6c 100644
--- a/apps/k8s01/nas/oauth2.yaml
+++ b/apps/k8s01/nas/oauth2.yaml
@@ -12,8 +12,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-02-22T23:29:05Z"
-    mac: ENC[AES256_GCM,data:F0UtUW5p//ZYxYcCTblJf4eNNG0LnHkaF0wp2l6nKEnrU1jcgOy7kzl4sQp3HpluPTjAjxRp7x9HoolxkpVNDa94UULl9aHMQ5peAUqDTtdqdoV4nXFDJvJ5xX/8q6gYxtaUwvYUypI8obNNQtXcWHxWGt8zm6k0KMqmMRhC5Ig=,iv:L9Fg2JCYcDNIQIUvLlypcNECXwk7/F4wqCYyqRRXFJ8=,tag:84oifEPX74+znQn8Aaa9qg==,type:str]
+    lastmodified: "2023-09-11T21:46:11Z"
+    mac: ENC[AES256_GCM,data:4sdEwWdKLdSn3j93pPqc92SR5PFlVT53ShRwD27zHnROvLheGz2zNu0cgdRcQDMyVQPduSaqldftZWlBj0bs0Q/3J8fY4fSqObmv52N+/kpkM8rFd642GKA9YV8DaXgRWhXs/bk8Xm0g2j6Pyztwgqo0bziYw9feoAFJ+a8eekk=,iv:68aTY2mtxyw5gvKDI94SbsYXI1FXNP5paTar9jzhSS4=,tag:FrcaedlYTzunCdQsRPl1VA==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -92,6 +92,7 @@ spec:
             whitelist-domain: ENC[AES256_GCM,data:SKqK+unRFLC6Y5DNmhgTJ1Bq4Z+PSgT2NLa4/MVR,iv:+lzfSaArulzf8q9giuPFIoBbgGd9jogKTroyrYqeCT0=,tag:Dbdu3OKdwRfx/T4gZQuJIQ==,type:str]
             session-cookie-minimal: "true"
             silence-ping-logging: "true"
+            scope: openid email profile
         replicaCount: 2
         securityContext:
             enabled: true
@@ -125,8 +126,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-02-22T23:29:05Z"
-    mac: ENC[AES256_GCM,data:F0UtUW5p//ZYxYcCTblJf4eNNG0LnHkaF0wp2l6nKEnrU1jcgOy7kzl4sQp3HpluPTjAjxRp7x9HoolxkpVNDa94UULl9aHMQ5peAUqDTtdqdoV4nXFDJvJ5xX/8q6gYxtaUwvYUypI8obNNQtXcWHxWGt8zm6k0KMqmMRhC5Ig=,iv:L9Fg2JCYcDNIQIUvLlypcNECXwk7/F4wqCYyqRRXFJ8=,tag:84oifEPX74+znQn8Aaa9qg==,type:str]
+    lastmodified: "2023-09-11T21:46:11Z"
+    mac: ENC[AES256_GCM,data:4sdEwWdKLdSn3j93pPqc92SR5PFlVT53ShRwD27zHnROvLheGz2zNu0cgdRcQDMyVQPduSaqldftZWlBj0bs0Q/3J8fY4fSqObmv52N+/kpkM8rFd642GKA9YV8DaXgRWhXs/bk8Xm0g2j6Pyztwgqo0bziYw9feoAFJ+a8eekk=,iv:68aTY2mtxyw5gvKDI94SbsYXI1FXNP5paTar9jzhSS4=,tag:FrcaedlYTzunCdQsRPl1VA==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-
@@ -192,8 +193,8 @@ sops:
     azure_kv: []
     hc_vault: []
     age: []
-    lastmodified: "2023-02-22T23:29:05Z"
-    mac: ENC[AES256_GCM,data:F0UtUW5p//ZYxYcCTblJf4eNNG0LnHkaF0wp2l6nKEnrU1jcgOy7kzl4sQp3HpluPTjAjxRp7x9HoolxkpVNDa94UULl9aHMQ5peAUqDTtdqdoV4nXFDJvJ5xX/8q6gYxtaUwvYUypI8obNNQtXcWHxWGt8zm6k0KMqmMRhC5Ig=,iv:L9Fg2JCYcDNIQIUvLlypcNECXwk7/F4wqCYyqRRXFJ8=,tag:84oifEPX74+znQn8Aaa9qg==,type:str]
+    lastmodified: "2023-09-11T21:46:11Z"
+    mac: ENC[AES256_GCM,data:4sdEwWdKLdSn3j93pPqc92SR5PFlVT53ShRwD27zHnROvLheGz2zNu0cgdRcQDMyVQPduSaqldftZWlBj0bs0Q/3J8fY4fSqObmv52N+/kpkM8rFd642GKA9YV8DaXgRWhXs/bk8Xm0g2j6Pyztwgqo0bziYw9feoAFJ+a8eekk=,iv:68aTY2mtxyw5gvKDI94SbsYXI1FXNP5paTar9jzhSS4=,tag:FrcaedlYTzunCdQsRPl1VA==,type:str]
     pgp:
         - created_at: "2022-01-22T04:06:16Z"
           enc: |-