---
apiVersion: codemowers.cloud/v1beta1
kind: OIDCClient
metadata:
  name: grafana
spec:
  displayName: Grafana
  uri: https://grafana.k-space.ee/login/generic_oauth
  redirectUris:
    - https://grafana.k-space.ee/login/generic_oauth
  allowedGroups:
    - k-space:floor
  grantTypes:
    - authorization_code
    - refresh_token
  responseTypes:
    - code
  # Preserve 1.x email claims for clients whose requests only include profile.
  overrideIncomingScopes: true
  availableScopes:
    - email
    - openid
    - profile
    - groups
  tokenEndpointAuthMethod: none