From 46a1c1aa33590c3babd3be5fc10d1ba86692e0a5 Mon Sep 17 00:00:00 2001
From: Daniel Sy <Daniel.Sy@telekom.de>
Date: Fri, 10 Apr 2026 13:22:45 +0200
Subject: [PATCH] feat(dex): add forgejo-runner-sizer OIDC static client

Register forgejo-runner-sizer as a Dex static client for OIDC
authentication on sizer.dev.t09.de. Adds the client secret env var
injection and the staticClients entry with secretEnv reference.
---
 otc/dev.t09.de/stacks/core/dex/values.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/otc/dev.t09.de/stacks/core/dex/values.yaml b/otc/dev.t09.de/stacks/core/dex/values.yaml
index 8a2a79d..7937bba 100644
--- a/otc/dev.t09.de/stacks/core/dex/values.yaml
+++ b/otc/dev.t09.de/stacks/core/dex/values.yaml
@@ -34,6 +34,11 @@ envVars:
       secretKeyRef:
         name: dex-argo-client
         key: clientSecret
+  - name: FORGEJO_RUNNER_SIZER_CLIENT_SECRET
+    valueFrom:
+      secretKeyRef:
+        name: dex-runner-sizer-client
+        key: clientSecret
   - name: LOG_LEVEL
     value: debug
 
@@ -74,3 +79,8 @@ config:
         - "https://grafana.dev.t09.de/login/generic_oauth"
       name: "Grafana"
       secretEnv: "OIDC_DEX_GRAFANA_CLIENT_SECRET"
+    - id: forgejo-runner-sizer
+      name: "Forgejo Runner Sizer"
+      redirectURIs:
+        - "https://sizer.dev.t09.de/ui/callback"
+      secretEnv: "FORGEJO_RUNNER_SIZER_CLIENT_SECRET"