added auth-proxy dashboard

terraform/keycloak/variables.tf

@@ -16,12 +16,6 @@ variable "keycloak_client_secret" {
   sensitive   = true
 }
 
-variable "kubeconfig_path" {
-  description = "Path to kubeconfig (set via TF_VAR_kubeconfig_path or KUBE_CONFIG_PATH)"
-  type        = string
-  default     = "~/.kube/config"
-}
-
 variable "google_client_id" {
   description = "Google OAuth client ID (set via TF_VAR_google_client_id)"
   type        = string
@@ -47,3 +41,16 @@ variable "proxy_applications" {
   }))
   default = {}
 }
+
+variable "oauth2_applications" {
+  description = "OAuth2/OIDC applications that handle authentication themselves"
+  type = map(object({
+    redirect_uris             = list(string)
+    post_logout_redirect_uris = optional(list(string), [])
+    web_origins               = optional(list(string), [])
+    extra_default_scopes      = optional(list(string), [])
+    extra_optional_scopes     = optional(list(string), [])
+    allowed_groups            = optional(list(string), [])
+  }))
+  default = {}
+}