Add provider-neutral Google authentication

2026-07-20 21:42:56 -05:00
parent 48e19f138e
commit 72fd1e3e0f
20 changed files with 1084 additions and 36 deletions
@@ -57,6 +57,8 @@ kubectl create secret generic step3-runtime-secrets \
  --from-literal=purge-secret="${INTERNAL_PURGE_SECRET}" \
  --from-literal=stripe-secret-key="${STRIPE_SECRET_KEY}" \
  --from-literal=stripe-webhook-secret="${STRIPE_WEBHOOK_SECRET}" \
+  --from-literal=google-client-id="${GOOGLE_CLIENT_ID:-}" \
+  --from-literal=google-client-secret="${GOOGLE_CLIENT_SECRET:-}" \
  --dry-run=client -o yaml | kubectl apply -n "${KUBE_NAMESPACE}" -f -

 kubectl kustomize "k8s/overlays/${DEPLOYMENT_ENVIRONMENT}" \
@@ -37,5 +37,6 @@ jobs:
          INTERNAL_PURGE_SECRET: ${{ secrets.PRD_INTERNAL_PURGE_SECRET }}
          STRIPE_SECRET_KEY: ${{ secrets.PRD_STRIPE_SECRET_KEY }}
          STRIPE_WEBHOOK_SECRET: ${{ secrets.PRD_STRIPE_WEBHOOK_SECRET }}
+          GOOGLE_CLIENT_ID: ${{ secrets.PRD_GOOGLE_CLIENT_ID }}
+          GOOGLE_CLIENT_SECRET: ${{ secrets.PRD_GOOGLE_CLIENT_SECRET }}
        run: bash .gitea/scripts/deploy-environment.sh
-
@@ -37,5 +37,6 @@ jobs:
          INTERNAL_PURGE_SECRET: ${{ secrets.UAT_INTERNAL_PURGE_SECRET }}
          STRIPE_SECRET_KEY: ${{ secrets.UAT_STRIPE_SECRET_KEY }}
          STRIPE_WEBHOOK_SECRET: ${{ secrets.UAT_STRIPE_WEBHOOK_SECRET }}
+          GOOGLE_CLIENT_ID: ${{ secrets.UAT_GOOGLE_CLIENT_ID }}
+          GOOGLE_CLIENT_SECRET: ${{ secrets.UAT_GOOGLE_CLIENT_SECRET }}
        run: bash .gitea/scripts/deploy-environment.sh
-