From eb27dcf65bd4c923b4f58625771c50f30cc49145 Mon Sep 17 00:00:00 2001
From: Ultradesu <ultradesu@hexor.cy>
Date: Mon, 4 May 2026 18:19:41 +0100
Subject: [PATCH] Added oauth2 proxy

---
 k8s/apps/mtproxy/secret-reader-ingress.yaml | 2 +-
 k8s/core/oauth2-proxy/middleware.yaml       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/k8s/apps/mtproxy/secret-reader-ingress.yaml b/k8s/apps/mtproxy/secret-reader-ingress.yaml
index 77d263f..8ac47f9 100644
--- a/k8s/apps/mtproxy/secret-reader-ingress.yaml
+++ b/k8s/apps/mtproxy/secret-reader-ingress.yaml
@@ -13,7 +13,7 @@ spec:
       kind: Rule
       middlewares:
         - name: keycloak-auth
-          namespace: oauth2-proxy
+          namespace: kube-system
       services:
         - name: secret-reader
           port: 80
diff --git a/k8s/core/oauth2-proxy/middleware.yaml b/k8s/core/oauth2-proxy/middleware.yaml
index 613e448..5fa7302 100644
--- a/k8s/core/oauth2-proxy/middleware.yaml
+++ b/k8s/core/oauth2-proxy/middleware.yaml
@@ -3,6 +3,7 @@ apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
   name: keycloak-auth
+  namespace: kube-system
 spec:
   forwardAuth:
     address: http://oauth2-proxy.oauth2-proxy.svc:80/oauth2/auth
@@ -11,4 +12,3 @@ spec:
       - X-Auth-Request-User
       - X-Auth-Request-Email
       - X-Auth-Request-Groups
-      - Authorization