From 432cf97a7060b315dd45cf09065f69f4f561052c Mon Sep 17 00:00:00 2001
From: Erki Aas <eaas@k-space.ee>
Date: Thu, 27 Jul 2023 21:41:55 +0300
Subject: [PATCH] Add OIDCGWClient to deployment.yaml

---
 deployment.yaml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/deployment.yaml b/deployment.yaml
index a6cf4e1..b64846c 100644
--- a/deployment.yaml
+++ b/deployment.yaml
@@ -1,4 +1,27 @@
 ---
+apiVersion: codemowers.io/v1alpha1
+kind: OIDCGWClient
+metadata:
+  name: authorization-code-sample-client
+spec:
+  uri: 'https://client-gab7y.codemowers.ee/'
+  redirectUris:
+    - 'https://client-gab7y.codemowers.ee/cb'
+  #  allowedGroups: # if no groups are set, everyone is allowed
+  #    - 'codemowers:users'
+  grantTypes:
+    - 'authorization_code'
+    - 'refresh_token' # might be supported by some implementations
+  responseTypes:
+    - 'code'
+  #    - 'code id_token' # might be needed in some implementations
+  availableScopes:
+    - 'openid'
+    - 'profile'
+    - 'offline_access'
+  tokenEndpointAuthMethod: 'client_secret_basic'
+  pkce: true
+---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata: